Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa
File:                     068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa (raw, json)
Hash identifier:          RRpmTtWba2/DCksbWjpsLIgX2Ur9lLghBx3de2FuNv4=
Subject key identifier:   B9:70:EB:C4:19:89:72:F3:FB:C9:9C:98:98:CB:97:C8:3E:5A:99:D0
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F4328584807AA6A7506938122304D20E0
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     55178
IP address blocks:        192.230.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:6a:75:06:93:81:22:30:4d:20:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=69158a19-d7c4-49d2-a492-e4ab62b41efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:20:0f:3f:b5:0a:5a:17:b2:76:d2:02:a4:
                    58:f7:2b:d6:6a:7f:de:21:06:36:de:cc:82:5c:24:
                    69:86:0c:d3:e1:79:33:dc:ce:c0:4d:2d:66:17:eb:
                    a8:52:f7:21:33:18:5f:cc:4e:2e:5a:7f:92:eb:78:
                    49:80:cd:2e:09:8e:da:ed:e5:4b:2e:8b:7b:38:ae:
                    07:c8:43:3e:41:4f:14:4f:9c:62:b0:65:27:8f:39:
                    c6:63:11:14:3a:e8:15:f5:89:ee:f5:68:da:b5:7d:
                    82:9d:d0:66:a0:45:9d:aa:9e:33:b7:ef:8a:b6:68:
                    97:33:af:b7:ba:9f:f7:96:31:8b:b5:8c:8e:6f:a0:
                    d1:eb:63:5c:d6:b0:93:8d:cc:29:4e:64:ab:c0:b5:
                    ce:a1:6c:62:17:5a:4d:0a:d4:fd:a7:f0:4e:f2:cb:
                    0b:09:16:8f:ea:5f:c2:f8:67:95:38:38:78:9a:2b:
                    e7:2e:e2:e1:df:39:bf:d0:bb:06:04:48:b3:91:2a:
                    83:f7:06:4b:30:c6:05:a2:a5:a8:85:c4:b6:2d:04:
                    a8:bd:d5:87:c1:09:7e:ba:32:02:31:d1:83:41:ee:
                    80:7a:7c:c9:a4:0d:23:6b:39:90:51:99:50:6a:06:
                    ed:89:e4:e9:91:b9:0a:2e:36:b5:5e:e1:af:70:c7:
                    03:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:70:EB:C4:19:89:72:F3:FB:C9:9C:98:98:CB:97:C8:3E:5A:99:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:74:1a:2a:de:65:02:29:35:18:f1:07:1e:ac:d5:d7:5d:18:
         15:c9:a0:d7:1e:d5:c6:2c:5d:51:05:3e:ed:3c:2e:3d:92:6c:
         db:fb:e4:94:58:5c:4a:d2:32:7c:41:9c:a5:df:57:e9:63:16:
         39:d5:5f:45:df:cb:0d:d5:eb:e4:55:5a:7e:36:8b:7e:b9:54:
         e7:36:70:3e:62:5a:fe:3f:cf:27:f6:f2:00:31:9f:38:b3:99:
         18:26:76:a6:c7:ec:2d:48:06:9d:a3:14:06:d4:3b:2f:70:d2:
         da:69:f7:4b:cd:8e:a0:20:56:e2:d9:50:a3:01:91:31:36:d7:
         1a:64:7a:0e:41:dc:d7:12:2c:3a:7b:63:76:0a:70:57:10:75:
         54:2f:1f:e0:91:92:5b:fe:70:7d:38:f6:c1:e3:73:24:de:f0:
         f5:c8:d9:d7:ee:52:51:43:a8:78:e6:b4:7a:37:8a:56:3e:e9:
         fa:4b:32:81:0a:b4:3b:6b:4c:b4:09:4a:93:b4:da:eb:88:4e:
         13:5b:fe:0b:85:80:d1:78:b0:88:0f:c4:46:5e:5c:0e:03:73:
         38:c5:20:dd:bd:c7:8b:f5:b4:6d:92:60:5b:3c:43:1e:28:4a:
         1d:5c:f7:76:a4:ef:99:24:c8:87:1e:ef:50:f0:ef:a0:52:38:
         8e:64:96:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:51:03 2025 by rpki-client