Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/25988580-4265-3e67-b9da-0bcc5b7a589f.roa
File:                     25988580-4265-3e67-b9da-0bcc5b7a589f.roa (raw, json)
Hash identifier:          bhFG5bXGNDscdicQ1n9bdHeNh8d+DV2myocfgDlgWDw=
Subject key identifier:   D7:44:02:D7:09:A3:6F:7D:34:E7:F1:DF:42:1B:5D:A2:07:DB:57:CE
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285848100A86F3AF4A41F45FF655B8
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/25988580-4265-3e67-b9da-0bcc5b7a589f.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     14618
IP address blocks:        173.199.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:86:f3:af:4a:41:f4:5f:f6:55:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=30fe3969-4470-4a6b-9f42-51c299595215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a8:a6:09:1c:e8:68:a2:87:11:3f:a1:03:95:
                    61:66:dd:db:60:32:38:6b:59:1c:42:ff:0a:c7:2c:
                    a4:7f:c9:cb:67:d6:b0:64:e3:da:fa:cc:ea:3d:21:
                    21:2a:a1:31:06:22:76:67:3e:f0:f2:7b:b6:29:03:
                    1a:69:e6:d4:06:84:e9:23:e2:7f:83:e8:d9:5f:35:
                    be:46:2d:54:88:e7:40:b9:51:5d:bb:6b:2d:ec:f4:
                    68:5e:b8:2d:ba:07:a8:f5:ef:b5:18:f5:79:3a:6c:
                    83:14:fa:8a:a2:0c:02:3e:9e:cc:8b:c5:ac:3d:4d:
                    15:6b:9c:69:4c:5c:f9:d6:73:c9:cd:1f:f7:87:9f:
                    84:7e:e2:5e:56:e0:a5:39:40:95:3e:f4:11:01:cf:
                    32:bf:1e:8f:ae:e9:ff:5e:52:1c:49:39:25:ee:94:
                    a4:99:09:46:b5:68:fa:d4:48:a7:2c:b4:08:97:58:
                    cc:aa:9a:2b:0a:02:7f:84:67:c6:9f:36:17:23:0a:
                    bc:08:c9:e0:b9:43:04:27:79:60:36:83:30:81:4e:
                    f2:a0:22:af:d1:f0:bb:c4:53:d3:ef:89:78:fe:e0:
                    2b:f5:81:10:c5:21:27:66:e7:1f:0d:1f:b4:0f:4e:
                    0a:e6:2b:05:3d:da:cb:93:ab:2a:20:cf:50:33:3d:
                    e3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:44:02:D7:09:A3:6F:7D:34:E7:F1:DF:42:1B:5D:A2:07:DB:57:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/25988580-4265-3e67-b9da-0bcc5b7a589f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:2e:02:33:74:5c:c1:3f:d0:e3:7f:e7:13:a3:bb:da:06:57:
         ca:b8:e1:78:37:cd:c2:fd:12:ec:03:4d:4b:01:81:b4:19:ac:
         c1:19:23:e0:9c:94:34:1b:09:29:82:86:c0:d7:f8:a2:a5:25:
         00:78:d1:2f:90:17:34:96:98:32:b3:4f:21:89:13:f9:87:38:
         5d:8c:16:94:90:62:b2:f9:f8:be:a4:33:25:74:af:b1:29:01:
         3a:09:87:79:6e:bc:bd:ad:51:24:b3:fd:8d:d7:89:43:4a:96:
         40:86:66:14:76:f6:04:cf:52:03:af:2b:a1:11:bf:a5:14:f9:
         d4:e9:07:7f:0c:0c:d5:3e:6a:47:0a:09:27:aa:9c:7e:3a:9d:
         70:29:56:d4:a9:a2:b7:61:ad:26:ac:bd:a6:0e:28:bd:ef:03:
         f8:03:b4:24:47:a9:3d:5a:f8:ab:3d:f1:0e:a6:48:aa:4b:83:
         3d:77:9e:f3:43:e4:32:63:74:ae:4e:45:69:0b:57:da:5d:1e:
         da:b1:52:89:39:f8:7f:ac:97:44:69:8a:9a:a4:75:00:7f:99:
         49:94:95:7e:cc:8a:2c:d6:22:29:ad:73:a8:1b:36:94:a4:0a:
         b4:8e:dd:3f:71:f5:8c:cc:e0:7a:72:b8:b1:c2:a0:71:93:82:
         64:c6:62:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:25 2025 by rpki-client