Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa
File:                     dfac5974-f75e-3282-b330-4ac930e4be2c.roa (raw, json)
Hash identifier:          voG6Er3SFZGwHw+8qHSrnh3h/4Lk1wcq/Orpp6Pg7hY=
Subject key identifier:   DB:19:8E:36:4D:01:90:F9:3F:E9:28:49:39:9F:CF:5F:D5:10:A4:10
Certificate issuer:       /CN=e0222b33-d953-40bd-9e16-838d515a3e80
Certificate serial:       010D0C9F432858480644FE328FF01C87CA2BE780
Authority key identifier: 53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     30708
IP address blocks:        208.86.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:fe:32:8f:f0:1c:87:ca:2b:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0222b33-d953-40bd-9e16-838d515a3e80
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=6c0e0485-b9e2-41d9-8dbc-5dafe4bfad37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7a:13:cd:57:6e:6b:96:ee:1f:a4:93:60:02:
                    24:dc:50:e5:d5:76:09:82:f1:54:fe:0f:26:a3:db:
                    43:d6:9a:03:29:67:58:98:8a:ea:dd:55:51:ce:36:
                    f2:d7:b5:64:97:48:60:da:93:cd:18:e1:ec:dd:bc:
                    77:4d:3c:4d:b8:82:f3:0e:0d:f9:e0:8e:bc:98:ab:
                    8e:58:c7:ae:fd:cf:54:b8:b2:ba:25:75:79:07:90:
                    df:e4:c6:28:19:82:fb:2a:65:f2:4b:4c:b7:e4:9d:
                    77:d6:cd:42:5c:c8:a6:99:1a:0a:91:13:6a:5c:3f:
                    31:dd:bf:77:7b:72:1e:fa:3f:23:5e:19:c8:61:3e:
                    9a:9d:a4:9b:ec:83:6f:8f:bb:8d:b1:9a:49:5d:41:
                    04:9e:37:12:ac:fb:1f:5d:7b:86:ed:d6:86:1b:a9:
                    d7:7f:4a:fc:b3:62:c6:1d:61:ae:17:63:24:28:0a:
                    48:3b:be:7e:32:d1:2e:ba:56:f4:9b:76:ab:1e:57:
                    cb:74:43:e3:f2:c4:fa:09:dd:38:94:a2:fa:42:83:
                    b1:e3:a5:9e:28:e2:e2:a5:91:87:94:81:db:f2:3d:
                    48:ed:42:ce:65:bc:1b:43:12:09:a8:39:e3:e1:91:
                    78:6b:4d:0d:d7:c8:b7:ce:07:1b:53:5d:d2:cf:ba:
                    9d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:19:8E:36:4D:01:90:F9:3F:E9:28:49:39:9F:CF:5F:D5:10:A4:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl

            X509v3 Authority Key Identifier:
                keyid:53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:84:fc:d0:ce:d5:5d:cc:ff:87:0a:ea:43:17:e6:9d:36:c1:
         b2:f4:7d:ed:86:5a:90:fa:2f:f3:d7:72:68:64:e9:6b:a9:11:
         1c:0c:f7:dd:50:25:a6:40:ee:22:20:ad:4f:1a:0f:71:2e:95:
         6a:26:23:5d:5e:97:10:2c:23:45:b5:9d:f7:8d:b6:cb:5c:73:
         a3:69:e4:89:4b:e9:46:9f:84:ef:79:ae:38:08:ba:c5:8f:bb:
         72:60:62:7c:3e:49:ca:c4:45:3a:a1:f1:2b:71:29:47:af:5b:
         72:c1:29:80:05:13:4c:42:66:2c:d8:7e:05:94:d2:dd:9d:4c:
         b5:14:00:de:7e:d6:05:d6:b4:05:b6:74:63:d9:88:4d:48:31:
         14:8f:78:ee:b9:e3:b5:7e:66:39:8d:4e:71:86:95:36:00:c4:
         03:70:af:e8:7b:47:e4:05:ce:34:88:ca:6c:03:bf:30:88:fa:
         9a:f8:ef:7f:2d:69:17:4d:07:7e:c0:c4:d8:f3:33:af:30:5d:
         8d:77:04:85:8f:ff:48:e6:24:5e:3c:2d:59:78:cf:9b:d0:2d:
         d9:ad:4d:e8:71:49:b8:fb:d8:dc:8e:b1:b2:ae:65:2f:4c:22:
         72:30:91:4f:d4:39:7c:d8:4a:03:05:98:40:63:b1:34:74:d1:
         1e:ae:4b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:33:26 2025 by rpki-client