Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8e79cb8-e56d-33a2-9a00-d48435945dc5.roa
File:                     f8e79cb8-e56d-33a2-9a00-d48435945dc5.roa (raw, json)
Hash identifier:          Hz0qtxzhxrhY4visXKMHP8RXOrqkZbhaWo0/IV6GY2Y=
Subject key identifier:   16:03:B8:F5:F7:16:AE:AB:21:89:9E:21:74:66:2A:57:48:A6:B1:83
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584837200A44C3F80586459E4F00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8e79cb8-e56d-33a2-9a00-d48435945dc5.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     7018
IP address blocks:        67.216.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:0a:44:c3:f8:05:86:45:9e:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=c5d5a2b4-93b8-4621-9b23-0a8541854ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:39:fb:5e:c3:04:3a:58:c2:c2:96:45:13:9d:
                    ef:9a:6e:55:7c:81:a9:3e:2c:a4:c3:ea:04:90:a6:
                    97:99:51:01:ac:c8:c4:cb:ef:7b:50:aa:d7:f6:73:
                    04:34:35:b9:3e:80:2c:f8:58:eb:77:10:65:e4:94:
                    51:e1:0b:90:b0:1d:91:28:c2:d1:4f:ab:4b:6d:2a:
                    0b:8a:c6:d0:2d:15:db:9b:ac:c9:e5:5d:60:af:ec:
                    c7:5b:22:c6:4f:11:2d:41:4f:89:84:8b:3c:a9:35:
                    c7:a4:07:8d:dd:45:ec:63:47:a6:0e:70:c9:5b:95:
                    51:35:e1:9c:8c:26:79:95:04:a6:68:b4:ed:08:54:
                    e5:68:38:16:5a:7d:6c:c3:61:c1:c0:04:d6:e5:a5:
                    21:0c:b7:a4:85:ba:35:d4:44:82:69:15:58:0f:8d:
                    be:25:fd:67:1e:ff:7b:d6:94:b3:12:dc:19:28:21:
                    77:d2:95:27:86:c2:68:1c:de:aa:ff:14:54:bd:a7:
                    71:5a:a8:e4:5b:b7:e1:e4:1c:61:6c:48:da:da:04:
                    47:c3:8e:f7:0d:18:39:6b:e2:08:9e:89:83:2b:95:
                    54:e5:9a:bf:f3:93:bf:67:43:7f:f4:b2:c4:88:f3:
                    8c:5c:2f:cd:39:ef:fd:7b:64:1f:d2:0e:83:c0:84:
                    63:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:03:B8:F5:F7:16:AE:AB:21:89:9E:21:74:66:2A:57:48:A6:B1:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8e79cb8-e56d-33a2-9a00-d48435945dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.216.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:60:5d:55:64:9d:b8:79:8a:44:93:c8:1a:4f:ea:c4:77:d9:
         9b:91:f3:b3:d5:e6:4a:36:e2:b0:96:05:e4:18:bb:ff:99:ec:
         19:c5:fd:ec:8d:02:9c:93:6d:79:02:da:ab:9e:fc:b9:09:2c:
         7d:83:92:4d:c8:f0:a8:c6:d0:d9:b1:74:55:75:95:d8:13:92:
         99:5f:58:ed:87:fb:a5:f9:27:3b:f6:95:c4:52:86:74:91:65:
         39:c2:be:50:6b:fd:cd:d8:20:39:2a:e6:cb:be:f4:51:ef:90:
         24:57:d0:bb:ce:ba:47:6a:2c:c3:65:b4:a9:4d:fd:b2:21:da:
         51:87:1c:de:b1:5b:7a:74:2c:f6:ba:87:c3:79:8d:49:e5:c9:
         60:b9:06:bc:67:b5:93:bc:88:9e:10:88:c1:0a:78:6b:28:1b:
         02:ef:6b:06:99:7a:95:d9:6f:df:41:af:6a:89:b6:40:58:f0:
         6e:80:07:16:12:a9:c3:64:eb:9a:c2:64:ea:80:b4:bf:e1:41:
         fa:b2:21:be:ab:73:d0:87:3c:e3:95:80:e3:c4:37:f4:ae:29:
         57:51:97:68:9d:88:5f:93:e9:4b:67:6e:e7:15:16:4a:f5:b5:
         ad:bd:26:90:9c:31:c0:89:5e:ef:eb:1a:d0:9b:7a:1c:4c:d2:
         26:e8:3a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:56 2025 by rpki-client