Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa
File:                     b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa (raw, json)
Hash identifier:          b6Tvz4Ea5dhJcWGIGMX+TVAqF1dP9EIiLFvmUFpzBAs=
Subject key identifier:   3A:C4:6F:70:6C:A9:54:B3:2D:8C:6E:C7:99:6B:B1:A3:D2:17:6D:AB
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F432858486960675B49BB7607F83F7C68
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        207.202.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:67:5b:49:bb:76:07:f8:3f:7c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=d803a334-85ec-4673-9fdf-9784c9bdc235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1e:58:f6:00:c3:98:00:55:63:81:01:b0:6f:
                    07:49:fc:a1:3c:c1:1a:9e:75:9c:f5:ee:3b:87:e4:
                    c4:79:f3:ab:cc:f8:f9:94:77:4e:0e:cf:60:40:54:
                    50:8d:ff:5e:50:ba:9c:5b:00:c9:9a:46:6d:31:5b:
                    0f:cf:dd:8f:fa:63:6d:de:d0:a5:76:ca:37:a9:83:
                    5f:b7:80:ad:c9:be:97:f1:4d:a4:5a:12:08:e8:27:
                    51:ab:46:82:fd:c5:3f:b3:79:ff:ac:c7:ef:ca:b1:
                    de:3b:4c:d0:11:8d:27:0f:02:7e:8c:6d:33:2d:56:
                    ee:1a:71:76:d8:26:06:09:eb:38:18:86:1b:b1:fe:
                    45:c5:f9:61:5c:e2:dc:f1:eb:ab:b5:bb:2b:ca:b8:
                    1a:5b:9c:cc:c1:14:17:23:8d:72:76:d3:7d:cc:44:
                    ee:30:79:82:63:66:e6:be:15:5e:43:9e:4f:66:b9:
                    c8:4f:2f:c1:e7:a3:57:89:1d:a6:1b:72:ea:0b:54:
                    f1:f4:3c:20:e6:e3:f5:07:3c:d4:a7:65:ab:dc:af:
                    07:b9:95:d6:33:e0:25:e0:81:da:75:73:a5:6d:85:
                    d9:4a:c8:f6:f9:f4:5f:b6:1e:e2:64:51:8b:c4:8f:
                    e5:60:44:7d:63:f0:9b:e6:8d:16:a9:cc:c9:30:33:
                    4a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C4:6F:70:6C:A9:54:B3:2D:8C:6E:C7:99:6B:B1:A3:D2:17:6D:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4f:97:10:f9:5f:90:9c:60:b4:8e:f0:8c:d4:d8:67:26:dd:
         00:ef:37:5e:59:23:26:32:d2:9c:05:70:38:c6:16:1b:0e:1e:
         51:1c:e5:6a:2b:32:f8:5d:48:6d:31:70:39:24:9e:65:4b:2e:
         55:95:23:5e:0b:ae:52:cd:22:f9:37:01:c1:9e:d5:bf:61:2f:
         88:30:51:df:0c:0d:33:49:31:16:70:f0:33:b8:30:9d:a7:ef:
         aa:74:68:64:48:c5:fe:20:df:e1:f2:7b:d0:aa:91:02:80:89:
         a6:bf:74:1a:6f:e6:da:97:4e:a4:9e:79:42:f2:6c:29:db:23:
         bc:e0:d7:bb:92:ee:4b:bf:c9:64:f3:c3:e6:3c:d9:1a:93:21:
         18:46:fe:cd:fd:72:89:4f:04:d3:ee:4f:8c:64:55:1c:47:55:
         ba:38:44:79:79:6a:9b:04:18:f2:64:df:73:9e:5f:f6:41:f9:
         1f:4f:60:22:8f:61:56:94:97:40:3f:27:4d:1b:0d:bd:78:b9:
         51:2d:da:43:99:21:d2:a0:fc:56:b3:5e:ac:54:53:fc:50:02:
         4c:2e:47:23:a0:5b:24:c1:55:0f:fd:ba:35:1e:87:46:5f:76:
         ea:5f:2f:42:92:86:59:9b:c9:5d:65:7f:7a:c1:bf:bf:c7:6a:
         93:dd:f4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:30 2025 by rpki-client