Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/6dd89af2-4338-3c2c-9998-029f692eee16.roa
File:                     6dd89af2-4338-3c2c-9998-029f692eee16.roa (raw, json)
Hash identifier:          DieeWudFYDDJQD8z9zKyIjGwO1Lfuz+XCkpX4lkqh/E=
Subject key identifier:   60:C5:D5:6F:4C:36:AB:8F:70:3F:04:43:8E:2F:CB:70:E8:15:BA:06
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285847F84F80C72EBD3A36134D9C80
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/6dd89af2-4338-3c2c-9998-029f692eee16.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     212335
IP address blocks:        216.177.133.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:80:c7:2e:bd:3a:36:13:4d:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=aaf35569-60df-454b-863f-9c5b685da92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:ca:fc:1b:c6:2d:48:e2:04:1f:dd:ab:b3:
                    a5:82:92:b9:a8:29:d6:bf:28:d8:f0:af:56:1d:18:
                    2a:c7:23:f8:f5:b7:6a:a9:e3:cd:64:e7:cb:cb:ef:
                    46:aa:a3:cd:84:47:77:9c:7c:d1:22:ca:aa:9b:16:
                    46:0a:01:64:9c:93:17:09:5c:ca:63:35:27:11:76:
                    e7:0d:75:0f:01:01:be:10:85:de:22:86:14:1a:36:
                    f6:94:c7:eb:a9:5f:ec:80:1c:2a:65:67:28:88:82:
                    a0:6d:37:dc:b4:91:bd:f8:f8:fe:8e:64:6e:99:b5:
                    cb:09:1a:0c:ce:6f:6f:6c:e9:31:0f:2a:3c:59:67:
                    17:19:35:7f:62:0f:3c:fd:ce:15:90:f9:46:a8:a3:
                    b1:fe:e5:b2:78:ae:0b:59:63:0f:13:dd:21:c3:25:
                    19:39:22:c2:27:6a:84:ea:43:20:7a:c1:f3:4d:0c:
                    b7:89:60:65:06:f2:b4:48:1d:c8:81:a0:4e:70:6b:
                    b8:d8:3b:c6:7a:6f:cf:85:7b:8f:54:36:34:40:44:
                    6a:e5:a2:d4:c8:ce:f8:ed:dc:fe:2a:76:52:11:5d:
                    55:b3:84:07:af:0f:cd:b5:9e:1d:c6:80:cd:30:9c:
                    9d:f6:32:3e:67:b9:2b:6d:25:49:a6:6d:65:d4:ff:
                    b7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C5:D5:6F:4C:36:AB:8F:70:3F:04:43:8E:2F:CB:70:E8:15:BA:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/6dd89af2-4338-3c2c-9998-029f692eee16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:53:cb:e2:26:42:f0:ee:d9:9d:fb:77:79:2a:74:c4:c5:28:
         cd:ab:78:7b:b6:73:63:ff:70:56:22:3d:a4:4c:2b:38:34:46:
         a8:8c:f4:fd:d1:a2:23:ea:9d:7a:49:b4:ac:49:ec:f4:0d:cb:
         22:07:f3:47:18:c8:0e:14:d0:8f:b4:ce:0a:78:75:53:bd:d0:
         e3:83:6d:c9:ae:9d:32:42:f5:3b:0d:1d:c3:96:f0:f0:43:d0:
         52:25:04:05:41:fd:b8:09:95:c9:05:0e:78:eb:e6:c3:f3:32:
         8d:d4:67:69:5e:1a:f0:c0:9d:8b:1a:ab:1a:d1:9d:b4:ae:b4:
         a2:4a:e1:b2:17:d7:2e:40:bf:09:be:da:90:bb:a1:8c:d4:ed:
         18:f9:3e:03:9f:57:fc:aa:9f:e7:eb:2c:7a:56:3e:7f:04:e5:
         bc:ea:3a:4b:79:88:87:a1:0c:ac:02:61:47:9b:75:18:0d:71:
         cf:74:a2:b5:3e:58:4a:e4:ae:22:f2:97:60:9c:80:9b:e5:bd:
         9d:ce:ad:b0:41:fc:e0:ad:b6:82:84:08:1d:95:15:58:4c:7a:
         02:6b:f2:2b:94:3f:97:41:5c:77:11:b8:b5:a4:3d:9e:57:80:
         93:58:82:aa:3e:63:e3:e1:5f:32:88:7a:d1:e2:9e:a1:90:ad:
         12:e1:7f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:50:57 2025 by rpki-client