Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/4ceb18d8-1127-3773-8a61-4ada200b7eeb.roa
File:                     4ceb18d8-1127-3773-8a61-4ada200b7eeb.roa (raw, json)
Hash identifier:          Ikqk5MBGvlFk2x7hNmmAuOORo2J7QGjiIKl5pUv+4M8=
Subject key identifier:   37:BA:1C:A7:D7:8B:AD:CD:7A:8C:2A:03:63:69:C5:2C:B8:15:5C:E7
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F43285848100A922C52E33E1FD19B0500
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/4ceb18d8-1127-3773-8a61-4ada200b7eeb.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     11260
IP address blocks:        67.204.192.0/18 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:92:2c:52:e3:3e:1f:d1:9b:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=52255ef8-c6ed-4600-b5a9-1dbbf2bef7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:e2:c1:e9:9b:1b:17:45:0c:23:97:fa:49:
                    13:52:69:a6:cc:36:40:b6:9e:a3:b4:62:4a:89:fd:
                    c8:d9:a4:9b:ff:1d:59:4f:c8:86:b9:d8:86:b2:6c:
                    ab:b9:ba:92:30:6a:4d:b0:17:92:27:6c:1a:05:4c:
                    07:71:16:c1:95:51:62:e1:1f:f8:1f:d2:a2:a9:73:
                    0e:4f:b7:8e:3c:24:f5:97:cd:63:3e:9c:d5:73:19:
                    14:7d:48:b1:70:7c:3f:7b:78:b6:44:53:f2:bb:1e:
                    f9:64:99:5c:d3:95:03:4e:53:61:41:ba:ad:e7:34:
                    69:fc:cf:85:e4:3f:a6:b6:ed:fd:c3:5e:e1:f9:24:
                    10:cc:d8:6c:5a:c4:a9:4a:fb:63:45:be:18:4e:3c:
                    ac:68:95:02:49:de:0b:b1:c5:ee:d9:2d:0e:5e:1c:
                    62:59:22:84:fc:1b:69:fd:57:0e:b4:86:ca:15:9e:
                    e7:05:b2:47:23:16:c4:3b:be:cc:0e:2c:37:70:2d:
                    57:c7:91:6c:34:f4:77:a9:cd:d8:c0:7b:e0:86:55:
                    1b:a1:4c:7e:c7:54:80:2a:8f:4b:16:5f:0a:7e:06:
                    b1:80:17:bb:5c:7b:a0:b0:45:a5:9d:15:ed:2c:3b:
                    3b:12:af:f9:36:40:e3:7d:e0:5d:50:bf:5b:44:fb:
                    ae:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BA:1C:A7:D7:8B:AD:CD:7A:8C:2A:03:63:69:C5:2C:B8:15:5C:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/4ceb18d8-1127-3773-8a61-4ada200b7eeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.204.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2a:87:0a:e4:45:40:5d:8a:86:e2:d0:e3:7c:b6:f5:18:57:
         7f:ae:63:76:e9:eb:2a:ba:9f:f8:ac:ed:90:51:1d:fd:8c:ac:
         58:59:e9:c8:13:b5:0a:66:be:f8:01:8a:75:9b:7a:2b:59:78:
         27:6a:4e:a0:51:4c:3c:70:36:c7:00:93:b9:48:ad:1f:53:01:
         55:4e:30:6b:42:56:e7:27:de:0e:4f:a0:6c:8e:12:82:d9:1b:
         ad:8f:39:58:db:45:2b:d8:d3:0b:23:cd:4f:d7:b8:f0:2d:2f:
         d0:e1:6b:1d:a2:9f:19:c8:0f:16:bb:c5:7d:b4:6f:c5:97:79:
         e4:4a:73:24:db:b8:05:49:e3:2a:5a:2c:81:2a:5d:87:e2:02:
         d0:42:21:b2:b1:7d:cc:35:cc:37:08:70:07:ec:54:5f:51:c1:
         4c:2f:8f:a8:53:a5:29:a9:c7:7f:d5:14:ff:d3:3f:55:df:d2:
         2c:60:0d:9d:70:5c:e9:8e:81:ca:52:81:d8:52:f6:7f:d9:b0:
         00:cc:7b:76:55:0a:5d:ab:c5:7a:f3:a7:c4:37:99:e4:5c:19:
         62:12:31:c0:a6:57:79:bf:89:ea:02:8e:7a:9f:62:d4:d6:40:
         fd:24:a4:be:83:7e:2a:fc:36:42:63:e2:84:5a:2b:e3:d8:c2:
         c2:f4:67:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:35:08 2025 by rpki-client