Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0ed25788-6756-3792-8936-e294bf809692.roa
File:                     0ed25788-6756-3792-8936-e294bf809692.roa (raw, json)
Hash identifier:          lVOpAKUQiu0ac2t7uzd1ehP0hsUlfcavARqD2ZN0aqk=
Subject key identifier:   C8:E7:99:42:89:04:1D:93:46:2A:88:88:92:6A:41:63:48:74:B4:B6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584883E5C5F86DE7DF67C7BBD180
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0ed25788-6756-3792-8936-e294bf809692.roa
Signing time:             Sun 12 Jan 2025 02:00:38 +0000
ROA not before:           Sun 12 Jan 2025 02:00:38 +0000
ROA not after:            Sat 12 Apr 2025 01:00:38 +0000
asID:                     3360
IP address blocks:        170.30.214.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:83:e5:c5:f8:6d:e7:df:67:c7:bb:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 12 02:00:38 2025 GMT
            Not After : Apr 12 01:00:38 2025 GMT
        Subject: CN=84cc046e-4ac4-4daa-9c1c-af9a4ea0b7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c7:89:5e:ef:dd:fc:e2:af:8f:79:c5:f4:36:
                    c2:76:dc:d2:d0:c2:26:07:dc:a0:df:41:d2:eb:63:
                    e8:6c:14:39:1f:49:6c:07:44:1f:e2:3e:88:b5:8d:
                    b5:a3:71:63:56:66:c7:1f:b7:fe:10:dd:f9:1d:a8:
                    1f:98:83:e7:21:e0:2b:71:fe:a2:5f:0d:ae:e2:5a:
                    75:38:83:35:5c:f7:4a:0d:c3:6d:f1:86:b1:76:55:
                    d4:12:03:e5:f1:b2:58:60:7f:09:6a:ca:b6:94:03:
                    91:df:36:4a:90:27:ee:0c:41:fb:9a:0a:87:1f:8b:
                    1b:ba:15:47:f3:31:61:ce:e9:e9:7d:9d:4f:b9:10:
                    c2:97:98:2b:b7:6c:fb:04:f9:35:10:b2:18:07:94:
                    9d:49:8e:3c:fe:19:b0:de:39:3f:4e:5b:10:94:b6:
                    44:54:c5:c5:d4:29:1f:d0:e0:76:9d:28:09:30:52:
                    9c:95:89:bf:10:6a:00:d3:a3:19:e3:20:11:79:55:
                    04:e1:aa:10:1c:39:cb:30:48:9b:8a:58:26:0d:46:
                    f6:b5:36:c5:93:d5:91:a3:5b:6c:05:cc:46:80:a6:
                    dd:b4:11:c8:1b:c7:66:9a:20:29:55:de:77:97:4d:
                    df:65:d7:ee:16:70:04:fe:62:0d:da:0c:79:f0:2a:
                    91:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E7:99:42:89:04:1D:93:46:2A:88:88:92:6A:41:63:48:74:B4:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0ed25788-6756-3792-8936-e294bf809692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c4:d9:37:8b:a6:77:7c:5f:f4:03:09:3e:29:7e:58:21:01:
         ee:3f:38:06:f8:23:7b:ee:0f:c0:97:ef:65:ff:3b:d6:34:61:
         da:f4:43:c4:9e:d0:c6:70:5e:13:b0:58:6c:75:03:1d:93:31:
         01:c1:61:51:36:bf:74:56:e9:8a:5c:5e:d0:e9:20:40:66:69:
         10:58:eb:ae:8b:9c:33:6d:28:ea:40:97:43:a3:40:9f:70:c6:
         74:14:5c:69:8e:51:a7:8f:20:9c:7d:11:88:e8:05:fe:79:47:
         f4:16:8d:de:37:12:b4:e0:0a:4a:f7:1f:b5:df:fc:53:2e:b2:
         8e:d2:53:8e:c9:f1:e0:68:6f:ed:a3:83:79:a6:0f:9f:08:f8:
         8d:7f:5f:5c:80:f3:e1:23:c0:4e:e7:d4:26:cd:46:e3:5f:70:
         e2:4e:0c:74:b5:d7:ac:28:7a:50:e9:40:9f:00:a0:dd:6d:37:
         f6:56:69:e5:94:73:c4:d1:1b:32:6e:f8:6d:f0:28:ef:ca:42:
         25:82:35:85:d6:14:78:11:dd:e6:cd:0f:bb:2a:6e:44:47:d8:
         53:bf:e2:83:9f:cc:bb:36:df:df:a0:be:79:be:25:9a:da:44:
         09:42:c6:be:b2:5f:af:ce:24:8a:70:59:4c:47:32:56:f4:3b:
         ca:78:ef:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:54 2025 by rpki-client