Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa
File:                     5fc3e362-19d5-308a-8dcb-de8129446685.roa (raw, json)
Hash identifier:          T2J03T7KNT1XCzxwM+x59HgxK4Pnt7e0MD5Xj7GMbCE=
Subject key identifier:   99:57:F0:B1:FB:92:1F:41:8B:4F:DD:82:09:0D:6B:1D:9C:2B:7B:0A
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F43285848159FDFEE75E16187A31C83C0
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     20278
IP address blocks:        167.88.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:df:ee:75:e1:61:87:a3:1c:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=92785828-5808-45a4-a9c7-e0675070fc2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1f:a6:55:62:c1:ea:03:0e:07:e9:7b:2f:21:
                    88:f8:bf:47:e1:2a:df:0e:19:a0:16:e3:7c:b7:6b:
                    54:c3:a6:e4:20:d9:79:27:23:f8:bb:d7:38:a2:39:
                    63:d8:7e:f3:76:8b:c2:d1:9d:87:52:f9:03:41:43:
                    91:c2:7b:0f:a0:27:9a:ae:2c:51:eb:14:09:93:21:
                    05:bb:1a:b4:bd:e0:9e:d9:41:29:54:66:ba:f5:36:
                    5b:23:33:b1:02:e4:22:9c:63:e7:e2:8b:1c:d6:0f:
                    2a:23:b3:04:86:71:ce:5d:d3:81:70:be:5c:7c:14:
                    23:67:43:cd:86:d5:7e:0d:98:24:0c:15:85:b2:da:
                    c6:5b:85:29:49:1f:ac:ac:71:f2:fc:16:58:5f:ff:
                    2c:a4:74:ab:23:09:af:db:f4:30:e0:25:43:ad:48:
                    48:bc:f6:68:e2:4d:83:4f:80:a6:5a:a1:30:3c:73:
                    21:77:16:2f:a1:0e:e3:6b:73:13:d7:13:88:37:79:
                    e3:a3:46:19:e9:3d:f5:c5:91:79:a8:48:f6:ad:09:
                    a7:ac:78:3c:40:45:bb:b1:6e:81:18:66:85:db:95:
                    11:57:55:05:66:2d:e4:13:15:5b:8b:70:b7:fb:6c:
                    90:5c:5d:49:de:d5:b1:f8:de:1d:e7:2a:b1:59:00:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:57:F0:B1:FB:92:1F:41:8B:4F:DD:82:09:0D:6B:1D:9C:2B:7B:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b2:50:36:90:38:c9:30:44:cf:e1:74:a6:00:6d:f8:f5:fe:
         d9:e1:66:85:1e:fc:de:d4:dc:8c:fb:36:a5:ef:9c:1a:7d:9d:
         49:02:7d:68:c5:a0:01:7e:5b:79:26:69:7c:96:bb:63:ea:dc:
         a9:2c:23:b9:39:24:1d:39:8c:8a:80:88:7e:d5:f3:b2:0a:fc:
         d7:f8:5d:c7:59:a8:a1:d5:be:dc:e5:7f:2a:8c:23:eb:db:1f:
         5c:b7:da:71:d6:ab:ac:19:f8:85:25:5e:fe:e1:46:72:70:5f:
         1c:43:af:cf:b2:d8:e3:ae:de:4a:4b:7b:fb:5e:ca:26:34:42:
         54:5b:55:e6:80:49:1b:e5:16:f6:53:60:08:0e:80:8d:f9:52:
         e3:48:7f:52:12:c6:0b:07:c6:f5:cd:e7:a8:70:71:c5:f0:26:
         6e:b6:9c:11:4f:f9:d5:57:c5:2c:a2:b9:e9:2a:ce:e5:dc:9f:
         33:2e:76:fd:93:7b:e5:bd:69:d0:b7:92:71:2d:57:a2:02:91:
         a3:57:b2:f0:8c:93:6c:2b:71:44:7f:49:31:94:e0:0c:86:7a:
         cb:e9:7d:d1:4a:1c:ba:e1:8b:a6:75:d1:04:0c:a0:81:87:d3:
         94:19:47:be:b5:9b:51:cc:1e:d5:60:de:9c:37:92:a2:3e:cd:
         5d:e8:a5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:23 2025 by rpki-client