Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/77bdc095-ec10-3d4c-92c9-95c7cfde9ba3.roa
File:                     77bdc095-ec10-3d4c-92c9-95c7cfde9ba3.roa (raw, json)
Hash identifier:          CGPpkqvFKfHLILpKkMPQpQ3wPOK0wR64hfbIzu0+FKQ=
Subject key identifier:   4F:44:FD:A3:62:4D:DB:D6:BB:FD:A6:E4:F9:BD:2A:70:2F:C5:33:4A
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285848159FEC547664DF635503FA80
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/77bdc095-ec10-3d4c-92c9-95c7cfde9ba3.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     42475
IP address blocks:        205.177.67.0/24 maxlen: 24
                          205.177.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:ec:54:76:64:df:63:55:03:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=9fb18136-d4df-47a2-9dd6-0694d32b7782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:11:b2:97:ce:7d:f0:50:03:29:e7:1e:a0:08:
                    30:96:44:e8:7b:8a:2f:70:ec:65:1f:22:05:9e:4d:
                    52:47:57:e6:16:0e:cc:ed:a9:db:50:ab:18:ba:d6:
                    38:3f:1e:2f:36:60:2a:ec:fa:a0:c7:4b:5b:ce:f7:
                    39:01:36:95:2c:52:61:74:50:36:38:e2:b7:7d:50:
                    7b:73:d5:77:6e:69:d7:b0:08:c5:3e:9f:e3:e4:21:
                    2b:b1:cb:4e:d6:dc:c4:11:bc:2b:e5:4f:37:cf:1b:
                    17:06:9c:29:7c:c2:74:3d:de:bf:3c:07:f8:3a:63:
                    7d:76:3d:22:37:0b:a5:9a:be:5b:72:8c:ea:4d:21:
                    45:70:87:e5:25:52:86:71:69:b6:13:d8:7d:ea:93:
                    9b:5c:f7:1a:80:19:71:b2:48:33:90:62:1c:82:72:
                    af:89:1f:52:6b:c0:11:bc:94:67:6f:0a:7b:06:e3:
                    31:0f:60:e4:7f:7e:53:3c:8b:b2:51:97:9b:a7:d6:
                    2d:fe:93:95:ac:52:7a:f2:d0:5b:62:c6:18:7c:94:
                    7f:90:9c:24:a7:c1:57:81:7a:36:60:8e:ee:c4:ee:
                    52:4b:89:13:0c:e8:6e:d9:79:81:11:ce:1b:30:4c:
                    2c:de:ca:38:d6:bc:ba:25:48:3c:fc:22:e0:d2:27:
                    d3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:44:FD:A3:62:4D:DB:D6:BB:FD:A6:E4:F9:BD:2A:70:2F:C5:33:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/77bdc095-ec10-3d4c-92c9-95c7cfde9ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.177.67.0-205.177.68.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ce:25:65:d2:c8:78:4e:f8:e3:36:8f:c9:d9:80:5d:1e:89:
         62:7f:09:72:6a:f6:17:98:73:90:78:86:a9:3f:02:ae:18:b5:
         e5:12:ea:64:53:d4:54:f0:2d:bc:60:d3:10:89:f2:ac:68:58:
         ee:56:8c:6c:c0:54:03:2a:e5:31:cc:8a:a0:a5:c0:bf:07:76:
         ca:9e:f5:2e:5b:82:67:26:a1:8b:31:ef:28:d2:5c:69:c5:cb:
         ab:9a:16:bb:86:9c:52:15:1d:7a:b4:d8:5e:84:b6:81:8f:96:
         db:2e:4b:e8:e2:45:6c:4a:44:bc:20:fa:64:52:06:25:57:75:
         d0:18:f8:c8:55:fe:1b:2c:db:a6:3c:1c:17:5a:37:6b:f7:84:
         e6:72:66:dc:06:aa:3c:4d:24:4e:da:bc:e7:05:e1:fa:f6:c9:
         80:c4:33:92:06:6f:40:b0:eb:19:41:80:a2:f7:66:a9:25:a9:
         c5:51:67:d5:e4:16:f4:ec:26:74:5b:95:19:d6:57:2c:90:12:
         ac:9d:50:d3:ee:e1:1d:f4:0e:4e:60:8b:9d:ba:27:af:3b:d9:
         15:ef:1a:ce:12:9b:5f:20:ae:45:9e:83:37:80:4d:a4:8a:5d:
         3c:76:f7:92:55:be:2a:af:98:48:d0:e4:85:e4:b0:bd:77:91:
         ae:f7:f8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:38:48 2025 by rpki-client