Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa
File:                     bda6574d-81c2-38f7-b624-cdc878c38860.roa (raw, json)
Hash identifier:          0FQsabQm03sjK7XihAO0q+yxIuXPezYwm1s3h9Qqz6U=
Subject key identifier:   88:84:07:86:3A:EC:62:7F:0B:08:02:FB:79:7E:4B:9A:36:7D:67:08
Certificate issuer:       /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687
Certificate serial:       010D0C9F4328584840E556718115507D64653680
Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     400702
IP address blocks:        192.81.172.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:56:71:81:15:50:7d:64:65:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=130d691e-e728-4286-a403-f1a0893ef266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:16:7c:e6:97:6d:3f:1f:e9:8f:fe:07:40:c5:
                    66:48:94:34:a9:a2:6e:ab:85:02:8d:00:a0:af:cb:
                    3a:6c:cd:4c:35:12:59:71:33:9a:69:92:66:58:ce:
                    74:62:03:49:37:d5:12:39:94:d4:fa:6e:08:58:b6:
                    bc:7e:ea:15:d7:09:36:e4:42:9f:7c:2b:c4:71:c7:
                    a7:90:69:c1:ac:25:3d:88:fd:41:d9:11:5e:85:0e:
                    77:8f:74:cd:50:94:d5:8d:d2:86:ba:67:40:15:56:
                    d3:28:05:0a:7c:0f:b1:75:83:07:31:c8:a5:86:2d:
                    6b:01:82:70:50:28:ef:0d:25:e2:53:b2:5c:cb:11:
                    c0:f1:19:13:71:e8:53:32:b1:b9:cf:a2:3d:6e:65:
                    6f:08:e9:f3:ed:3f:24:9c:8e:f6:6d:24:b6:b1:c2:
                    f7:fe:9a:1c:42:f7:5d:85:f3:b6:0d:61:32:a2:2d:
                    dc:1a:f4:a9:c7:41:ee:91:34:c4:37:96:7a:90:53:
                    36:66:f3:cf:a1:aa:fd:0d:d1:02:6d:e1:2a:7d:18:
                    40:d9:bc:f4:45:5c:f2:ba:12:84:98:46:df:93:30:
                    3b:66:6e:50:d6:b4:38:8e:43:fd:4c:ec:47:b7:2f:
                    30:d9:4d:e2:59:2f:b1:8f:92:2f:5f:e8:2f:5f:c0:
                    65:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:84:07:86:3A:EC:62:7F:0B:08:02:FB:79:7E:4B:9A:36:7D:67:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/bda6574d-81c2-38f7-b624-cdc878c38860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:da:3c:1a:c6:d6:9e:20:1e:ef:8a:06:af:5b:3d:57:ba:a6:
         42:1e:04:c9:74:b3:9a:93:22:df:f8:a3:c6:0e:4a:a0:0f:12:
         04:a8:2e:39:45:64:e1:af:01:00:fb:54:c8:c0:88:ec:13:de:
         75:31:a8:e9:c4:09:25:e5:8d:40:87:bb:83:42:68:d2:a6:50:
         31:97:8b:03:b7:be:06:b2:4e:37:18:b8:fa:c6:7b:56:c3:70:
         83:0d:7b:2d:0a:b9:be:d5:ac:04:88:c4:b5:04:50:f9:3f:46:
         e0:21:00:dd:c1:6d:2b:ba:66:01:e9:88:52:c7:02:7d:79:e7:
         4c:12:89:79:7c:5d:8d:bf:68:ed:ee:bf:86:4a:41:5c:93:9b:
         df:25:46:53:67:76:b3:21:e2:2e:bc:43:85:26:e4:41:42:76:
         d4:b6:44:9c:3b:cc:61:8a:43:21:e4:5b:6b:ad:63:df:6b:87:
         67:7d:d9:fd:f0:b4:ff:54:be:47:46:df:39:b9:72:76:d9:d6:
         a1:70:4d:e2:a9:37:4d:63:6c:3e:41:80:67:e3:59:64:05:44:
         27:b3:db:3d:7a:1f:96:02:61:19:a5:99:b6:83:02:5f:b7:30:
         c7:cb:15:fb:76:16:81:20:1c:d3:21:77:70:ce:60:b9:07:6c:
         8c:8b:67:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:18:29 2025 by rpki-client