Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/844f5ed1-c66f-38a2-b351-46bc8a0d71a1.roa
File:                     844f5ed1-c66f-38a2-b351-46bc8a0d71a1.roa (raw, json)
Hash identifier:          /2aLfWx5E5lOpAQXY+5sEBeTpmDJL/OxlFWtrtsNfTE=
Subject key identifier:   1F:A8:9C:93:1D:F1:D2:AA:9D:58:DC:D7:1F:1E:2B:B8:88:A6:BC:01
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F432858483455831E8641913D33673380
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/844f5ed1-c66f-38a2-b351-46bc8a0d71a1.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     33182
IP address blocks:        107.190.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:83:1e:86:41:91:3d:33:67:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=f689d496-01c9-41d2-bf16-e94d4928c47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:c2:9e:9e:85:f7:8a:eb:f2:67:84:47:7d:
                    f4:2a:f5:cc:3b:ca:4e:8b:5c:76:7e:95:8a:28:68:
                    2a:07:b8:49:2c:56:ff:4d:9e:f8:b7:b3:b1:55:53:
                    fb:fc:55:f4:41:ed:4f:1f:77:f2:1f:a0:62:b9:8d:
                    96:3b:83:d0:4f:69:66:c4:8e:e2:cd:9a:cb:15:5e:
                    c4:ee:57:3d:78:02:51:b6:8e:11:45:8a:92:32:de:
                    7a:70:28:6a:dd:15:b1:36:fa:df:22:9e:16:c7:09:
                    9e:1e:d3:0b:8e:94:5b:44:77:f1:41:b2:0c:28:48:
                    be:9f:76:5b:b5:f3:55:f3:7b:0d:bf:3d:78:94:fd:
                    b6:bf:af:4f:8d:59:36:0a:74:56:d4:64:3c:e4:09:
                    28:e7:ff:73:cd:e0:80:b9:7c:8a:c6:5c:88:6b:db:
                    29:26:07:9a:21:35:9d:24:6b:c1:24:a2:8a:ac:95:
                    92:4b:ec:4a:f5:88:c1:79:90:27:bf:2a:69:f5:6d:
                    f3:50:2d:db:b4:31:49:6f:38:23:d5:5c:99:21:f9:
                    34:13:56:68:69:55:7c:52:55:cc:56:ca:5f:29:d0:
                    c9:cf:f5:d6:dc:9c:c1:9a:79:a5:3f:ef:37:f1:e5:
                    80:a0:62:4d:75:05:31:f4:b2:7f:34:79:0e:2b:af:
                    b1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A8:9C:93:1D:F1:D2:AA:9D:58:DC:D7:1F:1E:2B:B8:88:A6:BC:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/844f5ed1-c66f-38a2-b351-46bc8a0d71a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.190.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:2f:0c:cd:1c:37:0f:bf:b5:8e:12:69:6a:59:c9:2b:54:0d:
         a3:96:64:a4:15:e5:f6:7d:ca:16:ed:cf:92:79:c1:1f:06:c9:
         18:ca:d8:4d:50:9d:b7:1a:4e:e1:fc:bf:29:f1:0d:d7:99:0f:
         58:a6:e3:a3:14:6c:43:49:a3:72:38:47:53:75:c7:d5:df:c3:
         76:b8:f8:43:ee:82:ce:49:aa:2b:8b:e6:66:bf:f3:27:f1:bd:
         73:b2:48:19:1d:c4:bd:18:ac:be:f9:43:82:4f:e3:2d:d5:0d:
         ea:c0:f3:b4:a8:1a:00:2f:d4:0d:15:de:74:c8:18:75:7e:04:
         61:57:a3:34:0f:19:48:24:14:77:8e:23:a0:80:2b:12:45:47:
         17:03:10:9c:f4:3b:0d:13:34:0f:ac:ac:23:0c:8e:5f:7c:1e:
         24:ab:c7:aa:50:d2:7d:e9:74:cb:95:c1:bc:ab:44:3e:72:e7:
         07:e1:58:2e:3e:e2:4c:4b:1f:a7:b8:7d:26:29:24:c7:e5:bd:
         c2:87:04:d9:81:79:01:dc:a7:3a:12:b0:ec:86:c5:76:4d:25:
         2d:16:40:f5:aa:7b:7d:81:79:f8:05:65:6c:84:3a:26:c8:4c:
         1a:7d:a1:f5:75:ae:ee:d5:a2:5b:8a:e6:93:61:66:e3:a0:a5:
         4a:61:87:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:22:49 2025 by rpki-client