Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/1c22fa85-ec81-39ad-993a-2bc722866357.roa
File:                     1c22fa85-ec81-39ad-993a-2bc722866357.roa (raw, json)
Hash identifier:          QkavuDd6YVwyQJIARK88bpAAxzrp+39EUKaQ40rA/EE=
Subject key identifier:   58:60:0A:6D:AC:77:B7:21:B5:D7:6C:41:89:86:59:9C:DE:F4:9C:91
Certificate issuer:       /CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
Certificate serial:       010D0C9F432858480214EF80425E4F17C085B576
Authority key identifier: 17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/1c22fa85-ec81-39ad-993a-2bc722866357.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     399209
IP address blocks:        209.209.26.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:14:ef:80:42:5e:4f:17:c0:85:b5:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=57096fd4-e54b-4429-93b0-47ebe4293f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:a8:fe:2d:51:4b:cf:9a:32:a7:75:70:e5:
                    c7:28:42:d1:b8:ab:e5:d9:c4:f7:27:09:31:71:19:
                    06:dd:04:36:27:d2:3e:da:60:ae:34:2c:9d:dd:d2:
                    a8:ab:91:c6:ad:9d:98:59:8f:2b:5f:ae:ab:cd:e5:
                    e1:d3:13:ef:6f:81:1b:a0:3e:fd:6c:39:7d:57:be:
                    95:fc:82:ac:43:83:9c:eb:d5:c1:00:23:b4:01:b2:
                    a0:a1:ab:60:8c:76:54:d7:4b:95:a8:70:59:ec:a0:
                    51:1a:a5:e7:c7:c5:20:2f:f7:59:27:f7:82:60:95:
                    37:0a:cb:5b:4a:07:91:4f:c6:e1:eb:ea:27:fa:4e:
                    e9:af:63:11:e7:aa:9e:b6:32:c1:6a:7b:19:cb:3a:
                    2c:64:f1:2d:9b:2d:0e:3f:3e:c2:74:27:c8:a6:fa:
                    57:ff:29:00:f2:63:3d:5d:dd:6c:df:36:2d:b9:76:
                    a1:29:3c:e9:7f:0b:0a:11:3f:ac:b4:ba:d8:99:bd:
                    a9:33:f5:8f:2e:0e:bf:c6:34:d9:9c:05:81:1a:3b:
                    2f:13:06:00:d7:4e:92:c4:9f:b1:c8:fb:c5:d4:64:
                    e8:c1:18:13:b1:8b:c5:13:bd:54:9b:4e:e3:07:4b:
                    e0:84:28:16:7c:b7:0d:fa:df:f9:f8:81:61:93:b6:
                    5c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:60:0A:6D:AC:77:B7:21:B5:D7:6C:41:89:86:59:9C:DE:F4:9C:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/1c22fa85-ec81-39ad-993a-2bc722866357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl

            X509v3 Authority Key Identifier:
                keyid:17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a0:45:be:91:01:63:77:5d:02:9c:0f:28:93:22:7d:2f:1b:
         99:e0:fd:45:ac:e2:f0:12:68:d8:ce:c0:5d:32:3a:27:b3:fe:
         df:e2:6a:80:75:88:13:61:f5:db:33:27:29:9e:31:7c:57:a7:
         34:9b:1f:dd:9f:6e:7f:fe:9e:30:66:34:c2:88:49:01:d1:fa:
         5a:0c:4e:21:bf:60:dc:ce:cd:44:91:da:13:36:f8:64:37:fc:
         33:63:ae:ed:97:f9:67:db:a8:aa:e9:4c:c8:e1:f9:0c:0c:e2:
         93:a0:3b:4e:75:0f:47:cc:f7:1f:e9:bd:d3:57:13:91:0e:78:
         cf:8d:3b:70:65:94:fe:4d:8e:75:e9:f3:87:a6:de:ad:da:67:
         92:6c:e8:1b:b9:49:37:46:e5:29:01:71:b1:a1:c0:f0:b8:0b:
         0b:53:f7:a4:5f:78:d8:a1:f9:f2:63:b2:fe:73:05:d5:52:26:
         7f:01:07:40:8b:95:95:ff:c1:cd:82:39:ef:af:40:49:5d:9e:
         62:72:b4:47:83:18:c9:79:8f:8f:1f:91:13:71:54:f3:b8:be:
         5e:61:ae:26:b7:d3:96:52:e6:4e:fa:d4:d6:64:e6:3b:31:ac:
         c1:b3:79:83:59:db:91:f9:2f:20:52:5b:bf:be:32:e4:cb:9c:
         90:4f:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:33:51 2025 by rpki-client