Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/6ce7d7a5-b002-382e-8094-978c1c15f725.roa
File:                     6ce7d7a5-b002-382e-8094-978c1c15f725.roa (raw, json)
Hash identifier:          +PT9PdHL2qgaWLUhtpYZ98QNcKhul6J5kVr0GYNRNdU=
Subject key identifier:   70:65:8F:48:9A:A6:E5:BF:6A:B7:FA:CE:49:12:6D:63:2E:5D:37:01
Certificate issuer:       /CN=1b022ab9-d430-450e-a80d-1a7148a7dbbc
Certificate serial:       010D0C9F432858480EA50E6653687248DE321D80
Authority key identifier: A3:C3:38:88:82:20:9C:99:F7:EB:37:EB:E0:57:4E:52:76:87:A8:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/6ce7d7a5-b002-382e-8094-978c1c15f725.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     396982
IP address blocks:        199.47.186.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:0e:66:53:68:72:48:de:32:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b022ab9-d430-450e-a80d-1a7148a7dbbc
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=8dfd60c3-ba5b-4c45-bc46-d00be0c4a1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:41:c4:51:ad:b1:cb:4b:9f:1b:5f:ee:26:94:
                    df:15:e0:a8:36:e4:f4:ab:78:27:af:1b:ab:c9:92:
                    70:ef:11:88:93:27:9e:03:6b:0f:5e:25:48:4b:74:
                    10:67:ee:54:71:80:e8:ed:f0:52:1f:b5:b2:0e:97:
                    47:d7:d9:e4:d6:41:01:a7:18:d6:0c:3a:54:ad:34:
                    bd:4f:e3:6a:03:1d:a2:43:56:10:6c:fc:3a:54:f1:
                    50:92:05:41:58:0b:58:7f:49:68:f2:bc:73:b4:db:
                    9f:53:73:e7:d7:fc:ee:b4:55:eb:bc:31:fb:e3:61:
                    32:68:bc:3d:18:e7:a4:c6:e1:f0:4f:7f:57:f0:6e:
                    6d:63:1f:b8:cd:3c:cd:07:5b:c2:5d:9b:28:ac:6e:
                    72:e4:5b:31:93:98:a0:b1:82:a5:b8:ee:fc:32:6b:
                    c6:d4:ee:3d:bf:29:bd:31:85:be:f2:8a:3f:35:24:
                    01:d0:df:a3:dd:ce:9b:a2:80:3a:50:67:bb:55:c0:
                    76:ce:43:5e:66:bd:c3:58:b0:5b:40:36:27:5d:fc:
                    f7:70:06:8b:ab:c0:79:45:48:65:67:f3:4f:f4:d8:
                    9e:9a:54:c1:37:1d:d1:aa:8a:96:c2:2e:5c:f0:ed:
                    bc:2a:5b:25:38:6b:5f:93:d7:a5:70:b7:2e:88:70:
                    1f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:65:8F:48:9A:A6:E5:BF:6A:B7:FA:CE:49:12:6D:63:2E:5D:37:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/6ce7d7a5-b002-382e-8094-978c1c15f725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/1b022ab9-d430-450e-a80d-1a7148a7dbbc.crl

            X509v3 Authority Key Identifier:
                keyid:A3:C3:38:88:82:20:9C:99:F7:EB:37:EB:E0:57:4E:52:76:87:A8:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b8:75:a5:4e:72:e6:47:f9:b5:6f:34:5d:70:e0:03:70:48:
         fa:e0:28:2b:c2:31:6e:dd:a3:a3:3b:7f:12:0d:c7:e6:9f:5e:
         71:ab:81:ad:78:84:d4:cb:9c:58:96:e4:1c:33:e6:8e:ab:09:
         da:e6:b8:12:e9:0c:10:c5:9f:2f:8b:cc:9e:ac:3a:b6:b1:ca:
         52:ea:e6:b9:63:7c:fc:01:b6:28:b9:bc:c1:31:18:bd:25:ab:
         ac:69:f6:2f:dd:08:24:44:4d:1f:bb:30:21:f9:0f:9c:30:de:
         9f:d2:fa:61:3b:27:a5:7b:6a:98:20:9c:9e:f8:8d:08:02:05:
         0f:df:e1:ab:60:69:3c:77:28:26:85:02:af:38:3f:79:59:44:
         f4:25:32:d2:55:a7:1d:8d:23:2b:d7:25:d7:1f:91:6e:f0:fd:
         74:c1:d6:28:f0:22:b9:c7:f1:e8:3a:1a:25:41:6e:67:96:f4:
         ef:cb:c2:6f:98:86:cd:19:0b:55:9b:d6:05:d0:ab:8b:9f:8e:
         2e:2f:93:16:bf:a9:b5:24:d5:c2:e0:a2:0f:a4:70:aa:68:7c:
         8f:70:25:8b:4e:69:74:e9:bd:39:b4:d0:a7:0c:7b:a9:e5:5d:
         9f:d2:5b:bf:6c:c9:f8:48:e5:52:40:c1:55:5b:79:01:f5:da:
         13:05:ca:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:20 2025 by rpki-client