Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/7b56145a-292a-3242-b062-ea6188b785e0.roa
File:                     7b56145a-292a-3242-b062-ea6188b785e0.roa (raw, json)
Hash identifier:          VoXL0FTO1tslK85q5L+UOuU3AtAErbVK6KKVKDG/8rs=
Subject key identifier:   90:9F:F1:60:A4:0F:E5:44:48:AC:F0:0B:AD:C3:49:AC:71:F8:40:87
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F43285848318AACEEE8C025D23F411C80
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/7b56145a-292a-3242-b062-ea6188b785e0.roa
Signing time:             Fri 13 Dec 2024 14:00:50 +0000
ROA not before:           Fri 13 Dec 2024 14:00:50 +0000
ROA not after:            Thu 13 Mar 2025 13:00:50 +0000
asID:                     16276
IP address blocks:        199.48.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:31:8a:ac:ee:e8:c0:25:d2:3f:41:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Dec 13 14:00:50 2024 GMT
            Not After : Mar 13 13:00:50 2025 GMT
        Subject: CN=8ab7d23a-ca2f-4ff6-9aad-d08d70ad416e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:da:07:21:28:fe:96:fa:a5:1c:4e:01:43:3a:
                    51:e3:80:38:49:64:02:22:57:13:8f:70:96:4c:f5:
                    84:2d:51:d4:f2:2d:d5:dc:ed:23:60:51:b6:45:19:
                    2d:8e:5f:b1:22:97:28:6f:d7:7f:b7:a2:46:0c:7c:
                    86:81:41:c5:da:b0:65:0e:e3:ee:1c:f6:96:55:2a:
                    1c:b7:bf:50:e1:89:ad:4a:3e:9c:09:86:1b:07:6c:
                    36:32:54:0e:7d:71:d5:ab:55:23:3f:10:d1:ae:fe:
                    e8:c0:41:4e:82:c2:6f:87:8f:74:5a:87:6f:71:1b:
                    45:61:67:80:0c:7d:dd:a5:c7:e9:d9:5d:5c:d0:c4:
                    b2:be:82:92:ae:ce:4a:0a:a3:cc:63:63:be:85:79:
                    2c:1d:bb:0b:18:0a:56:fe:b3:5f:22:05:01:bd:67:
                    9b:b5:5d:73:14:ed:3f:c2:1e:f2:04:3a:09:b3:09:
                    66:1f:81:ee:8a:91:03:a9:a6:5e:c8:d7:4a:85:d8:
                    c9:59:9b:ca:74:67:09:a8:9f:b9:da:27:2a:6f:52:
                    c4:32:09:a6:1a:59:36:ba:85:75:ee:24:7a:6f:23:
                    e8:4b:22:e9:70:84:b3:8e:59:ac:da:58:64:a2:97:
                    aa:61:52:06:49:3c:22:19:3c:d6:f0:f8:9a:87:07:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9F:F1:60:A4:0F:E5:44:48:AC:F0:0B:AD:C3:49:AC:71:F8:40:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/7b56145a-292a-3242-b062-ea6188b785e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5c:e1:f4:e5:1d:35:84:6e:5b:0e:0a:09:db:4d:6c:54:b5:
         29:59:78:3b:27:98:b2:6f:ba:be:86:b7:1b:29:dd:62:af:c7:
         61:8e:f8:e8:b2:b7:b8:cf:c1:43:39:3a:22:a5:a1:70:60:69:
         6b:e2:e2:bd:a1:98:b9:8e:18:00:4c:f9:9e:85:d7:c5:cd:14:
         0a:ee:14:04:67:53:b0:cc:8c:44:98:51:0b:fe:f9:b6:55:22:
         85:02:17:e9:9f:c7:db:be:23:6a:1d:09:ad:78:e9:8a:62:b1:
         cf:9a:38:cf:32:11:fb:e5:80:2f:07:d3:c8:2a:df:ae:1f:2e:
         c2:1d:a5:d2:a2:91:30:34:67:21:02:3e:71:58:4b:17:ae:3a:
         7c:75:b9:1d:20:ea:80:28:b6:40:a7:57:dd:d9:e6:c5:fc:62:
         63:b7:a5:70:a1:3b:3c:4a:76:e9:48:4f:79:0a:43:0f:82:70:
         77:a7:fd:ce:d8:2e:9d:b1:37:af:e3:f1:33:ba:35:10:52:d5:
         2b:59:78:e3:e0:d8:82:5c:07:f7:db:96:da:72:3e:e6:b7:11:
         d2:f5:fc:5a:4c:0f:1c:fe:49:f1:e4:0f:2a:d4:e7:de:e2:e1:
         0c:49:14:47:8e:a5:1f:01:ae:5a:4d:5a:5e:a6:19:ab:4d:6c:
         2e:ed:50:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:32 2025 by rpki-client