Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/9e17f123-8acb-33c1-8e8e-8c31d82ff296.roa
File:                     9e17f123-8acb-33c1-8e8e-8c31d82ff296.roa (raw, json)
Hash identifier:          oIpmqUXRgZ+pUM8R6tyEQsXAfACzbmwYa4zB19xqkPw=
Subject key identifier:   1D:20:93:75:6F:5E:CB:B3:76:39:22:FC:5C:EB:4F:5B:35:58:99:DA
Certificate issuer:       /CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
Certificate serial:       010D0C9F43285847F84F84B800EFF2F72F819320
Authority key identifier: D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/9e17f123-8acb-33c1-8e8e-8c31d82ff296.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     3851
IP address blocks:        207.197.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:84:b8:00:ef:f2:f7:2f:81:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=65869153-2a38-4b2a-ae2f-236759ce604c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:1a:30:92:11:b4:17:d5:32:e5:1c:40:11:
                    24:24:e8:d1:2b:14:e0:dd:d1:37:bc:ce:8b:59:e9:
                    24:b5:47:3f:34:4c:99:fc:2a:f9:0b:e9:e6:4e:2d:
                    dc:72:f0:58:d5:bf:68:0a:9a:26:49:c6:29:ab:97:
                    8e:8e:a7:3c:bf:fc:9a:8c:66:0b:9d:04:6a:2b:27:
                    9b:ce:6b:3f:14:fa:54:b6:c4:8c:2a:5a:a5:5f:2f:
                    6c:22:6e:e1:44:a0:02:fb:ac:5b:f3:fc:c3:5f:08:
                    4d:13:e9:77:8a:54:62:50:db:9f:1b:53:b2:6e:63:
                    fc:3b:d4:fa:ba:14:a0:77:e9:45:77:ab:8c:8f:51:
                    23:24:7b:a9:89:e9:e4:a2:aa:68:67:dc:3d:19:b8:
                    00:31:50:99:fa:8d:d3:fa:de:7c:be:49:fe:5d:24:
                    4f:78:fd:37:d9:0f:e8:40:82:3d:f6:e4:68:98:f6:
                    2a:0a:21:56:a6:d4:d9:0c:02:4c:2c:38:1e:a9:2f:
                    a3:db:03:50:94:92:38:54:b6:18:5d:95:c8:c8:6d:
                    36:8a:6f:80:d1:e2:18:83:1a:c8:1e:0d:6b:14:14:
                    d1:aa:05:23:f5:fc:b2:21:b6:ae:24:2c:26:ea:7e:
                    e1:a8:f6:1f:1b:0d:b9:76:0b:41:cc:ec:8d:35:7b:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:20:93:75:6F:5E:CB:B3:76:39:22:FC:5C:EB:4F:5B:35:58:99:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/9e17f123-8acb-33c1-8e8e-8c31d82ff296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl

            X509v3 Authority Key Identifier:
                keyid:D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.197.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:fa:24:58:95:fe:a6:f1:c7:26:7b:5c:bc:32:67:1e:d4:6b:
         7d:73:07:b7:b2:98:c2:8d:65:93:ad:a4:e7:b7:56:5e:63:36:
         6c:a9:ca:4a:ff:81:13:ca:c2:36:14:01:2a:36:06:9d:01:fc:
         db:ac:c7:c1:ea:88:7a:1d:4c:15:e0:f3:0e:21:e8:2f:ce:af:
         e4:54:a9:5e:36:5a:67:eb:48:62:79:75:a3:78:80:c8:a4:82:
         51:1d:59:82:44:90:41:4f:a4:8b:c7:4d:09:0e:af:45:0c:94:
         59:30:11:24:96:75:ee:45:87:c9:ee:e3:e6:5b:9d:02:af:30:
         61:87:01:74:eb:5c:1c:03:65:cf:2d:aa:42:9f:7a:05:9a:a0:
         53:a4:7c:4a:52:b1:c9:be:f0:16:27:60:3f:de:27:33:18:cc:
         6a:1c:69:b9:80:d7:01:8e:1a:6d:8d:f6:ae:d9:30:c5:cf:9c:
         56:94:f7:76:3d:67:63:63:4b:6b:0b:10:7c:1c:7c:c8:30:3b:
         27:01:ae:4b:9c:69:ca:9c:99:49:99:fb:c5:68:9d:9d:b9:d5:
         b6:40:82:86:5d:55:91:6d:93:cc:34:0f:e9:13:0a:38:0b:e1:
         ee:39:9a:ed:63:47:ae:6b:02:87:3c:cb:00:e4:9d:0e:b5:d0:
         dd:0a:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:46 2025 by rpki-client