Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/edd94304-c556-32a8-89f1-6f73ae2570b0.roa
File:                     edd94304-c556-32a8-89f1-6f73ae2570b0.roa (raw, json)
Hash identifier:          6bTEqCKBR4z0Iaf0BX6DiroPWjLN+rP+nnF7oOlQ6Y8=
Subject key identifier:   4D:04:13:95:08:72:CC:55:A7:63:3D:5A:61:06:3F:4C:6E:15:5A:3F
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F432858481C9A897BB95EC5BA7B8429C0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/edd94304-c556-32a8-89f1-6f73ae2570b0.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     198148
IP address blocks:        207.176.32.0/22 maxlen: 24
                          207.176.48.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:89:7b:b9:5e:c5:ba:7b:84:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=6b09361b-78b1-4e9d-bf54-93a9d5e9c5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:92:a7:42:08:5c:01:c2:fc:a6:01:6b:de:
                    c3:66:48:fd:ff:75:6f:b4:f8:19:21:e9:54:f8:11:
                    38:a9:9a:79:72:3f:d4:98:f0:2d:04:23:ba:39:a7:
                    c4:69:bf:23:3e:43:2a:83:23:dc:df:21:d4:83:30:
                    6d:5c:04:21:59:d3:dd:28:81:4d:3d:dc:19:b5:88:
                    21:8c:08:30:fb:eb:8f:3a:f7:9f:47:d2:e5:bc:fa:
                    b4:cf:86:52:6a:ce:d3:ed:0d:88:31:af:5a:21:1f:
                    28:1e:2d:2c:f3:d0:51:8e:b7:f8:a6:9c:45:ff:e7:
                    73:f4:6a:fa:8d:02:77:03:41:ac:ae:2d:0d:c4:50:
                    e9:fc:5f:7f:d6:8a:7e:2b:c4:bd:5c:31:a3:be:01:
                    8c:e3:77:dd:28:15:2d:3c:92:93:11:09:9d:59:53:
                    91:2c:8f:70:b0:5e:8a:b1:f9:dc:5f:5b:d5:42:9a:
                    50:f5:e7:c6:9b:38:35:e7:8e:67:9f:1f:94:a1:ab:
                    d6:9f:4a:d0:78:87:ef:d3:31:3d:71:85:d7:dc:13:
                    40:bf:05:39:2f:5e:51:c9:49:db:14:e0:23:ea:25:
                    72:ce:d0:1a:08:b7:b0:4e:e6:f8:a8:a7:5e:57:cc:
                    8c:3f:12:1a:9d:45:5a:cb:f1:0e:b8:54:a8:d8:c9:
                    2a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:04:13:95:08:72:CC:55:A7:63:3D:5A:61:06:3F:4C:6E:15:5A:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/edd94304-c556-32a8-89f1-6f73ae2570b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.176.32.0/22
                  207.176.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:ef:27:19:87:cd:b1:96:b0:1e:be:33:ea:7a:29:da:02:a2:
         ca:48:78:57:3e:c3:66:ad:14:77:83:a3:ce:d0:50:d9:5c:27:
         bc:e8:8e:d2:f6:b6:2e:21:2d:87:54:aa:59:a7:a4:2e:ad:fc:
         d0:5d:79:3c:27:08:f1:0c:b2:e9:f5:bb:1c:74:15:0a:3d:c5:
         36:4c:ee:af:6c:44:e5:ef:4f:55:25:07:04:f8:96:44:e2:82:
         c8:e3:08:80:ff:fa:06:96:23:97:3b:87:dd:8b:cb:a7:da:46:
         23:6a:67:71:38:27:be:9b:38:5b:8a:e4:0a:e7:ae:81:10:f6:
         2b:45:3b:e8:f0:56:48:a0:30:01:92:86:47:ec:32:78:73:13:
         f3:9c:18:28:d3:29:3d:88:68:3d:82:15:e6:12:3d:4e:16:c5:
         b5:82:ec:a7:30:3f:a7:34:4d:cc:c1:c7:a8:ac:2c:d0:9e:cb:
         2f:61:f2:db:6f:2a:36:3c:2d:b1:fa:c1:20:46:e2:7c:fe:e5:
         2d:a4:49:bc:20:86:8d:b0:0c:c7:30:a1:00:04:86:6f:dd:d1:
         f4:ff:2c:ac:bc:ed:c4:d2:0f:61:ef:c3:dd:ae:11:73:55:9c:
         a6:de:ba:2b:76:18:73:90:f4:33:f4:36:57:46:98:49:47:50:
         81:b5:dc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:31 2025 by rpki-client