Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa
File:                     61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa (raw, json)
Hash identifier:          ZdxZ7OvbSxCDdfRxsJVRXW/1Ry83N1MXHQsnojT4wBg=
Subject key identifier:   C0:7D:83:64:20:F7:49:66:B0:EC:96:9B:14:50:FC:B1:C6:B4:E5:0C
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584871C070626D7B643FE76EEAC0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     13347
IP address blocks:        198.145.102.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:70:62:6d:7b:64:3f:e7:6e:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=840b9324-a864-48a5-a22a-5a3d3693dbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cc:e6:38:88:c5:3e:d0:93:2f:9c:57:d9:a5:
                    0b:f6:37:11:b5:a4:82:b2:5f:11:39:c2:fb:22:41:
                    93:28:22:9c:60:74:bd:29:59:c9:bb:82:91:e0:94:
                    1a:31:04:9b:7f:15:0a:4b:4d:15:88:be:85:2c:91:
                    59:22:58:64:a4:1d:7d:dd:75:fe:93:dc:5e:35:aa:
                    76:67:b0:c5:46:61:4e:92:91:17:98:a1:f8:03:a7:
                    02:df:a8:48:25:0d:53:4c:81:4c:d5:47:35:75:81:
                    5c:c3:1b:f4:48:6d:91:45:93:e1:ea:9c:c8:50:6c:
                    5e:80:f0:67:07:f4:a1:d7:e2:78:55:11:83:31:a8:
                    c1:d9:84:90:db:d6:42:f7:e0:6f:bd:54:62:95:89:
                    e1:50:db:9a:47:99:ad:db:78:f5:52:10:d5:4b:fa:
                    9b:67:ed:fc:84:ad:72:0f:c9:fe:53:ec:76:65:0e:
                    b0:76:ad:79:9e:a1:ed:9d:97:9a:8e:aa:47:b2:2c:
                    41:ca:06:2d:24:b8:bb:bb:6e:d7:57:d5:b2:53:80:
                    28:2d:66:9e:5d:56:00:40:6c:09:e1:36:f1:ce:d2:
                    97:c0:97:34:ab:2e:f3:86:76:6d:dd:28:9b:fa:d7:
                    09:d6:0f:62:0a:1e:77:fb:77:74:bc:08:8c:06:10:
                    3e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7D:83:64:20:F7:49:66:B0:EC:96:9B:14:50:FC:B1:C6:B4:E5:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:01:b9:44:d0:bf:70:c6:71:fd:ed:a5:13:59:ea:4a:33:15:
         16:fb:91:21:fd:e5:62:3a:c7:6f:27:50:4a:f0:68:2b:64:8d:
         8c:18:2f:e0:a9:1f:b3:59:37:75:82:a7:28:dd:a3:91:14:90:
         f5:ef:ba:41:e8:13:a1:68:c7:08:d0:65:52:85:48:c7:8d:8d:
         5b:42:6b:21:08:fe:fd:47:a7:ed:89:96:7c:8c:be:66:1d:ca:
         45:40:fd:a7:c3:11:36:3a:72:10:40:a0:80:22:a4:e3:11:6a:
         1f:ba:8d:7f:5e:98:5f:86:d0:b0:92:e6:97:26:60:bb:67:ce:
         9e:fe:c1:36:69:44:ca:db:b2:4e:de:6d:74:22:50:de:c8:ab:
         e9:ed:e5:ac:ee:8a:c3:cd:53:10:1b:ba:5b:85:95:e6:a7:1d:
         33:11:9c:95:85:5c:e4:39:f2:ac:1a:15:a2:e6:0d:3c:a6:09:
         f8:69:3b:f2:2e:46:69:ed:45:2c:7c:fe:fb:e5:d0:dc:fa:68:
         fa:6f:b6:53:bd:93:9c:af:fd:e1:b2:85:15:a6:c7:2b:60:e8:
         8b:6a:8b:78:c9:9e:6e:d9:3e:fb:75:5d:ec:45:05:b6:1c:c8:
         67:f4:83:64:a6:c5:49:68:a0:f5:b7:58:17:29:b9:e8:b8:a4:
         6e:a3:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:14:48 2025 by rpki-client