Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/179e34cd-f6d3-3e45-bc18-e63c36e7b795.roa
File:                     179e34cd-f6d3-3e45-bc18-e63c36e7b795.roa (raw, json)
Hash identifier:          DuyoXpwFMFZ5Jsmib7ox+izuXSW5Xz5yAA/Hhe1L7dg=
Subject key identifier:   C3:75:EB:43:9A:5A:04:B1:ED:68:F6:9F:E9:56:6D:A6:9E:08:D1:B7
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584843B00AE79A90081DE73A5900
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/179e34cd-f6d3-3e45-bc18-e63c36e7b795.roa
Signing time:             Fri 20 Dec 2024 02:00:40 +0000
ROA not before:           Fri 20 Dec 2024 02:00:40 +0000
ROA not after:            Thu 20 Mar 2025 01:00:40 +0000
asID:                     36692
IP address blocks:        198.41.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:43:b0:0a:e7:9a:90:08:1d:e7:3a:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Dec 20 02:00:40 2024 GMT
            Not After : Mar 20 01:00:40 2025 GMT
        Subject: CN=608d5c9a-5e4f-48e8-874a-2aa3a6d2b558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:5e:55:cc:35:03:5a:37:a7:7f:32:5b:7b:
                    1e:d6:f2:04:64:f1:6e:c1:88:9e:5d:0a:52:d4:68:
                    43:39:2d:6f:ba:56:1a:b5:2e:7f:c4:d1:80:fa:d8:
                    01:53:ab:83:f3:60:f4:46:2f:49:c7:08:61:87:92:
                    92:1b:34:bc:27:dc:21:f2:8a:04:8c:20:5e:88:8d:
                    39:56:ae:07:4d:69:ec:ae:27:31:4b:3a:85:1d:65:
                    4f:92:ed:0f:6c:8e:df:57:f5:00:3f:7e:a1:a4:db:
                    16:21:0e:8a:f2:00:da:b7:00:11:6c:1c:9f:bf:ec:
                    ca:ef:01:fb:28:63:bd:74:02:71:77:fe:94:4c:ec:
                    ce:a7:b5:f9:d6:20:6a:6e:00:ef:af:a9:a8:bb:0b:
                    94:a2:cf:68:16:f1:e3:25:e2:70:c6:bf:89:db:3d:
                    f8:2e:a0:de:88:f8:7d:4d:f8:4a:92:6b:75:c5:e1:
                    85:68:4f:53:37:65:dd:b2:55:b6:2b:db:ee:0a:5a:
                    83:f5:9e:f0:68:fb:cf:92:d4:66:73:30:fe:6a:2e:
                    bf:d5:d8:fe:02:35:c7:07:62:6d:09:97:70:29:cd:
                    10:97:ff:ba:c3:44:6e:12:95:b9:ab:d0:06:f0:84:
                    bc:48:77:a3:49:0b:72:35:fe:e8:7b:c7:94:b3:fc:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:75:EB:43:9A:5A:04:B1:ED:68:F6:9F:E9:56:6D:A6:9E:08:D1:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/179e34cd-f6d3-3e45-bc18-e63c36e7b795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ee:53:c3:7b:63:60:1c:a8:8a:24:5c:42:c7:ad:bb:48:a6:
         45:29:50:94:42:00:36:55:53:55:85:6a:bc:aa:1d:09:1d:4f:
         56:20:28:ac:13:0a:d1:36:bb:04:c5:4e:34:86:cf:7d:73:16:
         95:4c:0e:dc:5a:6f:89:9c:93:42:54:8b:70:96:f7:90:3c:ad:
         62:91:b7:eb:18:78:bb:6c:cd:b1:b1:32:ba:3d:47:15:16:d8:
         70:a2:23:0b:2f:97:27:54:41:2d:14:12:30:10:70:9e:5c:f3:
         4f:94:07:ab:43:03:6d:d4:59:a6:aa:b8:cd:c4:3d:85:7e:8f:
         16:6e:ab:a1:0e:97:a8:66:7f:e0:17:0a:aa:d0:26:16:a4:25:
         68:9f:61:31:b3:31:14:16:bf:5a:7a:35:a5:65:6b:a8:50:30:
         07:72:03:dd:e9:16:30:70:67:d8:42:19:0a:3e:a3:86:6c:17:
         27:3b:15:dc:91:20:b5:34:3d:5f:07:42:1e:ac:7d:d9:40:0c:
         1a:59:d7:65:c6:e6:e2:f7:3f:0a:01:bb:78:f2:35:65:f4:0e:
         58:cd:3f:8f:bd:35:6c:21:ea:b0:6b:75:7d:6f:d7:66:2b:a5:
         33:87:29:3a:58:2b:eb:2a:7a:b8:3e:d3:34:7e:d0:af:24:7e:
         36:00:59:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:20 2025 by rpki-client