Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/de81f4e0-93ed-353e-9941-b212f5c29fe6.roa
File:                     de81f4e0-93ed-353e-9941-b212f5c29fe6.roa (raw, json)
Hash identifier:          /MN81qbs8QDoJJqZS05cD0OuyEX6yW0VOwHsl8Jm1O8=
Subject key identifier:   AE:89:F3:09:56:53:6A:48:9A:2B:D7:F0:87:EC:F3:91:78:96:5D:C5
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F4328584800B81E31AE50999D08D98900
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/de81f4e0-93ed-353e-9941-b212f5c29fe6.roa
Signing time:             Tue 26 Nov 2024 02:17:52 +0000
ROA not before:           Tue 26 Nov 2024 02:17:52 +0000
ROA not after:            Mon 24 Feb 2025 02:17:52 +0000
asID:                     153371
IP address blocks:        207.174.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:b8:1e:31:ae:50:99:9d:08:d9:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Nov 26 02:17:52 2024 GMT
            Not After : Feb 24 02:17:52 2025 GMT
        Subject: CN=5492131e-38a4-40ad-8706-2b030baced0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c9:b9:6f:13:97:2b:79:a4:01:3d:28:43:2f:
                    26:85:3c:6d:e3:c5:98:3b:97:4d:84:3f:89:7f:b7:
                    16:cb:70:96:d2:33:19:f3:55:c2:55:5c:94:fa:22:
                    a1:a5:4f:63:0a:1c:ee:cf:98:95:12:b3:fb:80:30:
                    90:71:16:72:b3:11:cb:8e:27:11:5a:1c:ca:fb:83:
                    68:c4:70:e9:20:4b:87:3e:d4:ed:05:02:8d:49:4c:
                    02:02:a1:68:f4:a7:5d:7a:52:fc:49:b9:fd:35:5b:
                    a6:5a:44:5e:d8:d7:e9:7b:18:18:b0:04:e7:af:7a:
                    c0:c1:d2:17:95:77:53:73:d3:6f:4e:aa:c9:e6:bf:
                    92:4a:05:f6:18:b2:ff:e1:85:28:c5:50:ea:75:af:
                    e5:18:7c:58:2c:d1:02:b4:74:a5:eb:26:df:bc:df:
                    11:b1:f4:d7:c1:60:d9:2e:61:bd:4b:cd:33:62:aa:
                    28:f1:32:30:f1:55:6d:43:20:63:9c:42:e4:bb:60:
                    3f:da:90:a3:cc:98:71:3a:36:8f:b3:d3:2c:6c:c5:
                    67:63:a5:d9:1b:b5:a7:d1:ec:0f:12:57:8b:4a:9c:
                    b9:58:6d:c6:50:1d:11:21:90:72:9c:3c:3b:ca:4a:
                    d1:1c:84:52:6b:88:1e:61:7d:c2:65:c6:27:d5:f6:
                    9b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:89:F3:09:56:53:6A:48:9A:2B:D7:F0:87:EC:F3:91:78:96:5D:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/de81f4e0-93ed-353e-9941-b212f5c29fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:33:43:7a:67:ac:ed:ad:f5:4d:1b:70:44:24:02:d9:09:54:
         5a:09:88:88:06:66:e6:f2:bc:72:43:73:0f:34:19:d7:da:30:
         15:2a:9a:b3:13:08:75:e5:d4:12:b6:1f:29:75:89:cf:f7:25:
         6b:07:b6:e2:8e:8f:9f:ed:65:df:85:49:32:53:45:ee:9b:1c:
         0b:cb:6d:73:45:1d:ce:c9:4a:ae:e2:40:a5:c1:03:f2:de:c1:
         6a:05:57:0a:1c:13:86:b4:a7:ba:d1:70:1d:cf:5b:f8:2d:df:
         b4:04:26:50:67:b0:1e:72:cf:69:f9:9d:62:a5:4d:e0:c9:fe:
         53:42:23:11:51:cc:bd:a9:4a:bb:ce:6b:0d:5f:64:c8:22:a9:
         ca:c3:21:4e:1d:81:a9:ba:63:70:9e:34:b3:07:57:3f:e9:af:
         e1:3b:e1:02:4c:4d:1b:63:4b:bb:d8:0e:ad:78:a6:e9:10:f7:
         95:e9:06:eb:5c:d1:03:1a:35:8a:3a:8a:c3:74:8e:a2:91:45:
         75:08:e0:ea:d1:ab:63:7e:7a:af:1f:7a:65:e4:4e:2d:4e:fe:
         aa:c9:bb:53:6c:76:d2:35:5d:30:81:06:6b:77:33:2e:58:d7:
         42:95:cc:6f:62:00:50:a9:31:18:b3:97:8b:4e:fb:89:61:d3:
         50:71:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:47 2025 by rpki-client