Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/18d57279-9cce-36bc-b8e1-741147e33233.roa
File:                     18d57279-9cce-36bc-b8e1-741147e33233.roa (raw, json)
Hash identifier:          a3XsKZalWAL3X92TKuOPJEC/9JYhesuxsQJGBItFW4s=
Subject key identifier:   70:E2:D4:79:70:A7:3E:C5:71:8D:7E:81:6D:68:67:F9:FF:FA:B4:08
Certificate issuer:       /CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
Certificate serial:       010D0C9F432858485CD033F16F8E9C66A28CF180
Authority key identifier: E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/18d57279-9cce-36bc-b8e1-741147e33233.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     393444
IP address blocks:        205.207.186.0/24 maxlen: 24
                          2602:fa4d::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:33:f1:6f:8e:9c:66:a2:8c:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=8666cc3a-6be9-44c9-bfdf-e84fbaffbca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b3:95:88:b9:e3:e5:98:65:b7:98:b5:a1:fb:
                    bf:83:e4:ad:27:d8:7e:c9:61:d0:98:c5:1f:05:aa:
                    e0:f7:c1:89:27:b8:03:1b:a6:c3:ba:a7:fa:56:27:
                    a7:7b:be:98:db:09:20:0b:43:01:19:c9:49:6f:ba:
                    a3:01:81:ac:b9:3c:a5:d9:04:3e:83:9e:cd:a9:d4:
                    02:28:66:bc:e6:8f:15:0c:a9:47:97:49:ca:81:ad:
                    74:1f:ac:8b:61:87:c3:6d:1f:6c:3d:54:94:c9:69:
                    c5:03:37:27:f5:71:b7:d0:36:04:ce:ff:4d:54:41:
                    ed:3e:9b:44:69:f1:b1:84:ca:33:8a:a6:ca:1b:48:
                    a5:c9:1c:3a:82:db:8f:d3:b4:35:06:ff:94:8a:e8:
                    64:7e:02:f0:b0:f0:08:83:1d:49:16:ce:25:b9:ac:
                    51:86:11:4b:9c:a4:0d:9e:19:5e:e4:f5:2b:35:01:
                    7b:18:50:c5:36:9a:85:be:0e:26:a8:f3:1b:16:a0:
                    81:a8:8c:fc:b2:a1:36:ec:68:1b:24:7e:fd:8a:e9:
                    d3:97:f3:94:e5:09:ef:1b:7e:e2:76:d1:c4:fb:e8:
                    2c:49:5c:8f:2a:2f:f7:71:b3:a3:2f:47:4b:8f:e3:
                    27:83:cd:ea:63:36:1d:50:7f:b4:91:da:4e:0d:ef:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E2:D4:79:70:A7:3E:C5:71:8D:7E:81:6D:68:67:F9:FF:FA:B4:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/18d57279-9cce-36bc-b8e1-741147e33233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl

            X509v3 Authority Key Identifier:
                keyid:E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.186.0/24
                IPv6:
                  2602:fa4d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:59:17:b8:89:09:0b:a5:6c:67:f8:1c:2a:ac:54:6f:56:c4:
         85:90:eb:76:c9:f8:f8:38:af:44:63:32:29:6b:28:87:a3:86:
         1f:6f:08:a5:6c:23:50:18:a5:25:3e:91:cd:d6:61:0f:5f:b4:
         b9:40:96:16:6d:d5:4b:61:77:ce:86:65:96:59:22:b9:76:1a:
         5f:8b:ff:54:af:72:5b:89:17:05:c5:7a:55:b5:55:d6:97:30:
         59:76:f6:41:1c:9c:87:66:63:66:be:28:a3:ec:32:e5:48:b3:
         48:63:82:8c:ea:1d:a0:46:bd:f3:08:3c:94:7e:0c:7d:30:0b:
         07:35:1e:9d:cb:cc:1a:9a:bf:a5:08:61:5f:ce:90:82:6b:fc:
         16:0c:52:73:d9:7b:9c:36:54:55:73:e8:22:93:88:37:74:eb:
         cf:34:2b:2d:cc:77:ec:1c:df:57:b8:1d:86:7d:0a:33:e9:e7:
         9b:e8:3d:c8:bc:59:29:fc:3d:89:9d:5d:55:2f:b0:a3:ef:fa:
         3b:78:35:6f:cd:df:1b:f7:74:09:63:4a:b9:41:5e:28:9d:be:
         c6:95:26:3d:50:ff:b7:99:16:12:ad:dd:01:e3:7b:97:b8:11:
         33:b2:29:96:96:f3:e1:cf:7c:e6:9d:c6:4c:89:fe:82:5f:78:
         55:9f:10:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:17 2025 by rpki-client