Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/2e95c6ec-52d6-3d58-bfc8-c49fd809bc1a.roa
File:                     2e95c6ec-52d6-3d58-bfc8-c49fd809bc1a.roa (raw, json)
Hash identifier:          AB5dA8WYMvxqfW622RsC2U0tAksC5IgjRhunregEESg=
Subject key identifier:   63:2D:86:4A:E7:B4:9E:92:FA:7F:06:69:5B:60:E9:AE:7D:E5:CC:CF
Certificate issuer:       /CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Certificate serial:       010D0C9F43285847EBBF8389DCEA37BCA1261F00
Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/2e95c6ec-52d6-3d58-bfc8-c49fd809bc1a.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     19605
IP address blocks:        206.55.222.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:83:89:dc:ea:37:bc:a1:26:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=44cdb42f-7116-4271-b023-0d6af199b9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:b7:ef:69:b1:0e:c8:75:a7:55:57:06:c6:
                    28:47:f1:c3:84:6d:72:39:b3:48:6e:99:ae:ac:c8:
                    50:5c:89:f7:c9:6e:38:88:3d:2a:5d:f4:ed:17:97:
                    b2:99:77:06:7d:b4:a1:7d:52:15:94:3e:ff:84:32:
                    6c:93:f0:c1:aa:85:71:5c:52:4e:e6:9d:94:9f:45:
                    de:6a:b0:80:8b:8f:8e:eb:4e:7b:54:8e:61:08:75:
                    00:14:c9:bd:6f:20:29:91:ee:5b:b9:10:4c:62:3f:
                    20:97:8c:b6:66:f3:7a:a6:01:2a:97:7c:0a:3a:3b:
                    81:78:71:56:ac:b8:8a:3b:99:67:ba:52:bc:b1:4c:
                    4c:25:a2:8f:fd:fc:1f:5d:e1:f9:23:2e:ce:53:97:
                    61:24:4d:ad:40:59:15:76:78:73:57:04:a8:78:c8:
                    61:ef:0b:a5:81:db:b6:83:fb:d4:da:49:62:64:bf:
                    6b:35:c6:3c:ae:99:62:d9:94:c6:af:98:8e:64:f1:
                    64:1b:e5:80:8a:bf:1b:24:c6:4d:9e:b4:ef:b3:0f:
                    6d:6e:e2:00:f4:e4:c4:97:60:16:2d:40:7f:e5:15:
                    3e:a3:3d:4b:09:48:a9:e4:cb:e2:8f:c1:03:9d:4e:
                    e9:0f:36:4d:1a:fd:8e:75:65:9f:59:b7:61:5d:d1:
                    a8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2D:86:4A:E7:B4:9E:92:FA:7F:06:69:5B:60:E9:AE:7D:E5:CC:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/2e95c6ec-52d6-3d58-bfc8-c49fd809bc1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl

            X509v3 Authority Key Identifier:
                keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:27:61:53:b8:1b:c7:47:d3:a3:4a:bb:b8:0b:a3:c0:d2:5d:
         ad:26:d0:54:39:7e:20:0a:e8:8b:1d:f1:c2:e3:7e:89:fa:53:
         9a:b4:00:cc:85:1b:b6:17:3a:30:40:ee:b1:21:33:00:05:30:
         db:1d:4d:9a:43:6d:11:1f:fc:92:1a:35:b5:84:36:76:b6:5b:
         e5:32:bc:e6:6e:1f:c9:54:ed:db:0e:5e:a9:92:4f:d8:a8:90:
         ff:9c:a0:06:f0:f2:6e:26:f0:5e:00:2b:c7:9d:58:61:f0:e1:
         92:15:82:80:3d:0b:e1:46:92:ed:21:24:e5:95:ee:55:4e:06:
         7a:16:77:b2:7a:bb:60:1c:e0:63:1d:7e:c5:32:45:6d:9f:d5:
         a3:0a:28:b9:f0:8b:d5:83:71:97:ac:68:ad:1c:ad:e9:34:aa:
         d3:cf:1b:a2:f3:36:e9:89:30:4d:1b:3b:9e:7d:1c:64:9f:2e:
         af:96:8f:20:ea:87:ca:88:40:e6:dc:20:de:db:53:94:d9:a0:
         b6:27:57:82:fa:d4:52:90:cc:66:67:21:63:5e:82:84:28:cf:
         0a:cf:dc:45:a5:98:1a:7d:f7:af:4b:39:e1:e7:1c:4a:f9:27:
         f4:a3:34:de:e5:99:ec:13:e1:e2:a5:99:6a:e0:81:2e:ff:c2:
         31:d3:2c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:56 2025 by rpki-client