Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/90a5c368-fc18-3f5c-bbb8-ecbf1033fe31.roa
File:                     90a5c368-fc18-3f5c-bbb8-ecbf1033fe31.roa (raw, json)
Hash identifier:          fYfsC/y4/doaRyseXmt7by94ZZRdc+whjFoo7Le2F8o=
Subject key identifier:   53:CF:48:68:54:79:3B:0C:12:A0:BF:CE:61:49:C6:78:02:C3:1A:F7
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F43285848100A85299F01214266E6AEE0
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/90a5c368-fc18-3f5c-bbb8-ecbf1033fe31.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     16509
IP address blocks:        198.176.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:85:29:9f:01:21:42:66:e6:ae:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=5ba09138-45e6-4af5-9f98-6aab62f2a0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:5b:d6:01:17:c6:bd:b2:ab:90:4e:b9:35:
                    06:32:c1:97:12:51:2b:c0:0b:c0:0a:eb:23:93:73:
                    2b:68:92:eb:d8:bd:fa:60:2e:18:cd:5c:a5:91:b2:
                    6e:9a:53:df:2e:4d:d9:b7:68:46:47:6b:d0:a9:68:
                    fa:48:09:37:08:71:82:db:24:83:54:c1:8b:6e:7c:
                    17:3f:3b:a5:b6:54:48:3a:4c:34:2f:28:75:2e:7d:
                    ab:d0:52:98:0e:7f:eb:39:c7:3b:02:0e:aa:91:b0:
                    57:93:cc:03:4c:c6:ac:17:2e:8d:b8:56:77:bb:e4:
                    2f:e9:fa:84:14:f3:58:b4:13:58:8c:df:78:1a:21:
                    6f:5a:3d:06:02:31:3d:d2:30:5b:89:d0:20:02:ce:
                    02:ee:34:23:b5:14:18:1d:e6:f5:c4:35:a1:e1:14:
                    e5:c5:94:8e:f0:80:23:70:21:e7:8d:36:e7:a1:bd:
                    ad:a6:a2:dc:e4:7e:82:95:64:c9:62:3d:b7:ae:d3:
                    d6:02:31:85:83:b0:3f:65:57:8a:b1:30:c1:cd:95:
                    b7:34:ff:d8:ec:98:19:0a:79:70:63:44:86:05:1e:
                    9f:f5:22:ff:1d:ab:46:26:fd:2e:de:38:32:e1:c8:
                    84:5a:f2:ea:49:51:1b:a2:11:7d:d6:d5:1c:27:86:
                    ab:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CF:48:68:54:79:3B:0C:12:A0:BF:CE:61:49:C6:78:02:C3:1A:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/90a5c368-fc18-3f5c-bbb8-ecbf1033fe31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:5b:92:41:c4:7b:1e:6c:62:b6:23:df:01:4d:c0:c4:e5:46:
         fb:14:90:71:dc:73:a2:68:22:e4:e0:d5:6a:18:eb:03:01:03:
         b4:1f:8a:c0:db:55:19:9e:1f:b8:e8:17:cb:e6:0b:2a:94:7e:
         c0:4a:85:c0:90:b5:39:98:59:b1:ee:c7:e1:e5:c7:62:f5:2b:
         25:8f:a2:ea:ac:df:c2:70:ad:74:e8:05:1b:c7:a4:e9:53:3b:
         e6:45:6b:a0:f7:ed:f3:78:b1:d6:96:e9:be:82:82:2d:82:64:
         fb:78:20:08:59:99:05:0c:be:09:4b:9f:4c:13:aa:2a:85:b4:
         a0:36:d5:42:4a:7e:37:6f:07:b8:0f:83:c2:d0:ec:5d:7e:8c:
         08:7f:fa:c2:47:63:ae:2c:0e:9b:6c:c3:50:88:76:e0:f4:88:
         22:ce:45:e1:ea:fc:90:eb:b1:23:66:ed:a9:a1:90:8b:4c:05:
         b8:28:98:48:cb:e8:cc:fe:49:b0:54:a2:fc:e0:bc:15:88:01:
         94:e8:dd:30:c2:15:97:9c:65:94:2b:2b:f1:57:bd:b6:ed:2e:
         75:5d:c3:6e:33:37:ec:dd:b5:25:83:36:3c:68:93:0e:29:ae:
         b0:d2:07:39:9f:85:5e:8a:c9:87:2a:78:72:3c:51:59:f7:7e:
         94:3b:3d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:15 2025 by rpki-client