Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/6b7dcf99-4b56-331e-b7c1-cb3c8cd424f3.roa
File:                     6b7dcf99-4b56-331e-b7c1-cb3c8cd424f3.roa (raw, json)
Hash identifier:          ILrjkNdWo/5Nn9nSEv7/14C121CtmWutxbOf8zSxrLU=
Subject key identifier:   29:7F:A8:03:1E:A8:83:E2:10:03:9A:6C:08:F0:78:06:8F:C2:22:FD
Certificate issuer:       /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
Certificate serial:       010D0C9F43285847F17B31AC96A7BFBF455B5100
Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/6b7dcf99-4b56-331e-b7c1-cb3c8cd424f3.roa
Signing time:             Wed 20 Nov 2024 15:17:59 +0000
ROA not before:           Wed 20 Nov 2024 15:17:59 +0000
ROA not after:            Tue 18 Feb 2025 15:17:59 +0000
asID:                     198949
IP address blocks:        198.51.243.0/24 maxlen: 24
                          198.51.244.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:7b:31:ac:96:a7:bf:bf:45:5b:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
        Validity
            Not Before: Nov 20 15:17:59 2024 GMT
            Not After : Feb 18 15:17:59 2025 GMT
        Subject: CN=054b1e2c-1bc3-405e-86e4-3e42d09daf21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8a:af:8b:6e:7a:f2:a1:36:cd:3a:e6:94:e8:
                    7c:da:92:5d:a1:f0:5d:af:b7:fd:43:77:5b:a3:ca:
                    23:6a:20:80:96:e7:e6:3b:4d:0e:ca:50:fb:2d:54:
                    ab:51:3f:72:67:1a:40:c1:26:2f:56:69:a3:1a:8c:
                    72:05:bb:36:36:49:2f:5a:6a:6d:db:2b:7c:fc:90:
                    07:30:c2:5b:c0:d3:5f:c8:10:04:a2:11:16:61:c1:
                    b8:6e:4e:a4:be:e1:ac:f7:7a:82:f5:13:aa:70:8f:
                    e2:45:c8:b3:4a:3c:47:cf:56:55:ce:f4:fa:91:8b:
                    ff:c2:8d:1a:bb:7c:55:4a:3d:16:6d:b5:d6:f8:10:
                    d6:b1:6e:e5:6f:48:b2:0a:92:c3:36:7d:6e:b0:e7:
                    ab:04:8c:86:05:43:90:bc:4a:b2:76:e1:60:06:3b:
                    79:6e:e0:ed:ac:a3:7b:6e:d9:35:02:35:c4:29:df:
                    6b:d0:f2:f3:11:57:7f:d3:e4:b0:f6:0f:28:ac:c9:
                    74:98:27:95:71:c1:b1:54:14:7d:a9:25:79:ba:03:
                    8f:52:00:50:f8:80:10:40:58:2d:d7:ac:99:72:8b:
                    01:58:ab:80:7d:16:b7:0e:7f:49:10:0c:c0:df:83:
                    e9:27:6a:0e:76:5c:8c:6b:07:26:e4:b0:7c:26:9b:
                    7a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7F:A8:03:1E:A8:83:E2:10:03:9A:6C:08:F0:78:06:8F:C2:22:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/6b7dcf99-4b56-331e-b7c1-cb3c8cd424f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl

            X509v3 Authority Key Identifier:
                keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.243.0-198.51.244.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:77:30:a8:05:40:28:07:22:b7:ba:58:8a:04:5d:a9:e9:f5:
         2b:af:3c:51:4e:26:16:a5:a3:d0:2c:71:11:eb:75:2a:19:2d:
         7e:da:16:c0:cd:8a:18:38:50:d7:5d:7c:13:32:88:f2:56:5c:
         9f:cb:19:d2:d0:b9:d3:f4:c6:8d:40:3b:1e:99:8c:c8:90:5e:
         c3:e9:1d:e1:8d:e9:db:34:8f:64:24:80:29:17:3b:df:f5:16:
         1b:da:37:7b:7f:ff:ac:cd:73:47:fc:6f:23:6b:9e:a8:1f:04:
         92:d8:46:71:44:8d:14:43:9b:3d:e5:04:97:00:d7:25:82:63:
         1f:65:19:c7:04:63:24:7b:c5:2f:e2:02:9d:47:10:db:63:25:
         06:e6:c7:7d:90:a1:c9:bc:f4:8a:33:c3:90:6b:ca:b5:5e:57:
         35:a3:3b:72:a2:32:05:18:ca:97:c7:fc:41:af:05:0a:5b:c3:
         3b:c9:08:6c:57:25:52:81:de:a4:c8:9f:9f:0f:6f:87:bc:03:
         d0:1b:01:00:a3:8d:74:fb:02:5e:63:a1:9a:0f:18:30:ca:a2:
         02:28:b1:15:00:c3:00:f2:a2:8a:a6:6e:df:6f:8f:c9:9a:a9:
         46:00:76:0a:5e:a3:ae:e6:56:c5:e4:fa:11:60:00:56:26:0b:
         70:04:d8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:49 2025 by rpki-client