Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/27846eec-5acb-3f57-8cfe-2e7e32df0c73.roa
File:                     27846eec-5acb-3f57-8cfe-2e7e32df0c73.roa (raw, json)
Hash identifier:          gZ0cyTuAVVpCtdhbTlXfwkZHkK1JwSZnUX89sK3LEjA=
Subject key identifier:   13:51:C7:C4:20:42:10:00:D5:20:A0:FF:43:97:06:AF:37:F4:B7:B0
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285848100A78736544EFAFDCE00B00
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/27846eec-5acb-3f57-8cfe-2e7e32df0c73.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     8781
IP address blocks:        209.58.40.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:78:73:65:44:ef:af:dc:e0:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=9a141ad8-ec54-4789-807e-9f23bb40da54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:a5:51:5f:ca:5b:d3:6e:08:1e:53:80:44:
                    9b:69:5b:c5:54:49:e0:a0:d6:30:ad:f8:b0:ae:4b:
                    c7:26:ca:1b:fb:3d:39:ca:1e:e5:99:91:75:f1:6a:
                    b7:e5:e3:1b:69:5c:82:8c:b4:37:0c:4c:7a:93:85:
                    88:d2:b1:19:d1:39:45:7c:d6:29:da:db:30:4d:64:
                    50:d1:b2:00:d7:e1:15:8d:7c:6f:eb:6b:4b:a3:e9:
                    a8:56:1e:7d:df:94:b1:c2:a5:da:80:05:5e:6a:06:
                    0d:98:56:49:c9:16:52:52:99:52:68:23:d3:6d:90:
                    b6:4e:de:a1:aa:2a:e4:3d:54:0b:d3:09:d4:43:0d:
                    57:58:54:70:0b:04:ac:28:d9:6f:06:0e:5a:dc:5c:
                    63:bf:62:41:a6:e5:18:77:6f:aa:03:e6:b0:f1:39:
                    03:4b:e8:3e:d4:03:72:47:79:47:1d:94:62:3e:e4:
                    36:00:e3:e9:d2:f6:0f:28:fc:92:f5:9e:9f:91:66:
                    12:d2:e8:66:1b:3b:d5:65:82:3c:d9:ff:88:ec:1b:
                    ef:82:e7:e0:b6:b8:68:6a:52:d1:16:47:ed:a1:e1:
                    b2:d8:81:9b:59:79:d1:af:85:a8:65:e6:8e:4d:7c:
                    19:83:db:03:78:18:fe:71:bf:b2:a5:9d:a8:41:be:
                    ba:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:51:C7:C4:20:42:10:00:D5:20:A0:FF:43:97:06:AF:37:F4:B7:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/27846eec-5acb-3f57-8cfe-2e7e32df0c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.58.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b7:ec:86:38:82:39:b4:df:3e:7f:0d:c7:2d:3c:74:fe:bf:
         8b:7a:70:6c:ec:c7:b2:0d:d0:92:d3:3f:48:b8:e9:f7:68:6c:
         a7:f0:21:b7:f8:c7:c6:7b:f5:42:49:48:1b:9a:4c:e4:77:b8:
         ca:c5:31:5a:de:17:71:2b:37:d0:08:c4:64:58:3b:e3:5c:7e:
         e1:93:52:7b:91:09:a9:54:86:3e:65:f1:f6:51:03:53:be:f6:
         97:54:8d:ef:04:73:3f:38:33:6a:1f:dc:f7:4a:8f:39:fb:bb:
         e0:94:dc:d7:8d:3a:89:92:c0:59:b8:8e:e6:68:7e:67:b6:0c:
         af:57:33:e6:a2:9a:a9:d9:37:ab:e1:0a:fb:9c:e0:f9:29:e2:
         ca:b6:fe:b6:24:30:06:d9:67:19:e6:ad:14:cd:9d:33:bd:07:
         c4:c8:59:af:53:5b:79:05:1b:25:80:b8:84:80:d5:35:03:a6:
         77:9a:c6:3f:76:0f:b9:92:0a:37:22:34:5b:ac:4c:2c:42:a4:
         ee:d8:60:6c:37:a6:a6:b3:07:6d:e1:d3:1a:e4:a6:08:dd:26:
         8d:44:de:a4:f3:c1:7e:02:b3:d7:0c:01:28:e8:6e:b5:37:30:
         15:eb:38:88:85:ad:9c:48:a8:e9:6b:a7:8f:27:ab:bc:18:08:
         71:54:61:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:02:08 2025 by rpki-client