Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/67ba8417-9a25-34c4-adcb-541f98289bb1.roa
File:                     67ba8417-9a25-34c4-adcb-541f98289bb1.roa (raw, json)
Hash identifier:          s6o+777bayTl3gUUVxn4I/OIlnOmwBnoL285jy1Jt4o=
Subject key identifier:   D6:86:10:3B:F3:79:FA:A3:C9:6A:9D:DF:77:8D:7B:43:C4:74:4E:DD
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F432858484D758E1BE52D6114137DCEE0
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/67ba8417-9a25-34c4-adcb-541f98289bb1.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     394625
IP address blocks:        185.151.184.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:8e:1b:e5:2d:61:14:13:7d:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=cebaaac1-c86d-42ec-b6cf-b9b7797d8a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:d7:35:f9:09:2c:49:9a:4d:d9:49:0e:d4:
                    63:23:62:af:89:fd:d5:df:ee:10:9e:77:08:c6:ed:
                    97:ef:d0:6e:21:ca:b6:8e:2a:cd:8a:c1:fa:bc:e2:
                    31:6d:53:79:00:91:2a:93:e9:bb:a6:4f:e4:23:54:
                    36:ae:b6:c8:ce:e4:96:bd:6d:91:ea:90:b7:72:32:
                    5a:b8:d2:ca:53:cc:00:54:66:5e:67:70:3a:be:88:
                    52:71:f7:f9:43:da:10:17:42:11:d6:0e:4f:16:fb:
                    4f:7f:11:66:ce:4c:ca:33:6d:39:59:05:9b:f9:3a:
                    3a:29:f0:c0:05:8a:05:72:82:75:d0:6e:2e:4a:7b:
                    ca:71:d6:ab:a9:d9:f0:1e:99:4d:35:26:f1:43:36:
                    f0:d8:22:c7:4e:21:e9:20:50:40:4b:54:a0:67:70:
                    a6:48:38:3d:87:70:20:a5:b8:dd:0f:9f:11:f7:2c:
                    b5:cb:82:2c:d2:50:f8:24:b1:cf:3d:61:15:b1:00:
                    d3:c9:d0:36:1a:79:fd:dc:d3:4b:54:45:e2:15:ba:
                    22:c9:21:ae:ed:73:d2:02:b7:ac:87:25:3f:45:fb:
                    93:69:7e:24:7f:60:e4:b9:71:cc:b0:b9:38:b6:8a:
                    b1:93:9c:10:eb:4b:5b:87:26:0f:86:ac:2f:e6:ce:
                    31:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:86:10:3B:F3:79:FA:A3:C9:6A:9D:DF:77:8D:7B:43:C4:74:4E:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/67ba8417-9a25-34c4-adcb-541f98289bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.151.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:32:6f:12:bf:a6:0c:3a:04:9c:14:70:eb:00:49:40:af:30:
         64:10:8b:79:3e:00:19:df:c0:9f:34:ed:71:c5:17:34:1a:d1:
         7e:7a:ed:4c:19:7e:62:64:b2:46:90:b7:d4:7d:02:c5:80:18:
         cb:1e:24:c6:a2:3d:cf:7d:1b:79:78:7c:c9:6d:8b:58:9b:cf:
         bd:66:98:2d:8c:7b:c8:17:76:39:38:26:bc:a9:77:f5:81:f2:
         22:8f:58:e3:3a:d5:a9:76:84:8f:0c:a6:2a:02:9a:5b:6a:68:
         f9:27:de:4c:6a:ef:75:45:d4:dd:93:a4:68:c0:58:a2:c6:c0:
         33:f2:a9:90:ef:e8:02:ae:e0:b0:e0:0d:c1:52:ed:03:ba:c5:
         42:69:a6:11:ff:02:58:ab:81:04:73:5a:f9:14:73:33:bd:53:
         04:bb:2d:00:3b:1e:75:59:de:63:69:97:d0:fb:9a:9c:b3:3c:
         95:1b:3f:f2:5c:5c:2e:30:08:7d:5c:e2:f0:fe:b6:fe:56:49:
         14:cc:e1:39:d9:1d:5b:ac:d3:04:2f:9e:61:b3:09:6c:1c:8f:
         8d:2e:b8:03:cc:54:96:7b:aa:f8:a7:c3:7b:f0:2d:19:79:62:
         1e:ab:7c:6e:e5:07:b2:6d:72:3b:b5:d4:fd:b6:16:3d:87:a8:
         3e:49:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:18 2025 by rpki-client