Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/26322910-31e2-3284-82e4-3af775262b6e.roa
File:                     26322910-31e2-3284-82e4-3af775262b6e.roa (raw, json)
Hash identifier:          TJYGGPAshk9QGAtOLKMtvDd7diI9WzTjuDgle8UfBVM=
Subject key identifier:   45:C0:2D:47:D6:CF:25:6B:A1:49:A2:89:A5:66:FD:D5:36:86:1F:30
Certificate issuer:       /CN=7ede7b70-d745-425d-975b-bb0eb6368430
Certificate serial:       010D0C9F432858492E13C178151319B738494900
Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/26322910-31e2-3284-82e4-3af775262b6e.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        107.180.192.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c1:78:15:13:19:b7:38:49:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=8502211e-4f6e-4e79-92eb-a2cb5e733d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:47:a0:4a:d1:61:a3:8e:d5:39:93:82:9e:
                    bd:a7:1a:02:ee:69:52:8b:89:73:3d:a8:a1:2a:e8:
                    54:61:11:31:b0:20:d7:a8:7b:48:7d:05:24:d0:dd:
                    fc:09:10:d0:4c:ab:f1:4f:9d:df:95:3c:22:6c:24:
                    1a:e6:06:6c:b3:4d:0a:eb:db:33:6a:d8:23:3f:ef:
                    2a:ac:1d:c7:e3:d8:9e:03:92:85:94:f2:60:23:e3:
                    b6:be:16:96:91:52:89:6f:d5:17:41:04:9a:84:ae:
                    a4:b8:45:38:81:e5:64:41:59:fa:2b:e9:d0:5e:04:
                    f1:8a:97:ca:cd:94:5e:2e:fd:45:0d:cd:1c:bd:c9:
                    b7:82:db:2e:4d:e0:8b:0d:ac:f2:b0:cf:8f:e6:1c:
                    a8:eb:91:ff:7a:33:8f:b8:b3:0e:d2:fe:62:07:d6:
                    2f:af:a1:99:87:82:4f:1c:bd:94:79:15:05:c2:40:
                    a4:af:fe:2e:e6:10:1a:a3:07:8a:a6:86:52:5f:bc:
                    42:27:87:01:76:f6:f7:11:1b:1d:6b:d0:a3:f6:85:
                    49:3e:7d:7a:3d:90:1a:58:9f:b7:a0:68:36:ba:72:
                    40:7d:d3:62:e2:e7:dd:e7:b9:09:23:6c:aa:4d:f2:
                    76:6a:9a:4c:07:c8:f7:dd:f5:e7:6a:53:6b:af:64:
                    13:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C0:2D:47:D6:CF:25:6B:A1:49:A2:89:A5:66:FD:D5:36:86:1F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/26322910-31e2-3284-82e4-3af775262b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl

            X509v3 Authority Key Identifier:
                keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.180.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9a:55:36:49:c1:74:58:36:af:6a:09:f8:df:43:a3:be:eb:
         9a:9b:0e:27:a2:bd:5a:e0:a7:e8:7d:91:40:73:93:07:8e:dd:
         b8:4e:ba:dc:df:22:ef:7a:7d:0f:da:d1:ee:7a:2b:12:cb:11:
         a1:b5:4e:56:14:76:0f:52:75:3b:6e:d7:a7:4c:53:80:4d:ee:
         20:22:b1:d1:48:a8:50:28:1a:33:c3:56:7a:f2:e6:c4:b9:d6:
         2e:d9:32:50:db:ed:ce:ee:16:8d:51:af:96:7b:91:16:e1:9f:
         a4:d0:05:be:1e:0a:4e:19:9e:18:fc:ed:7d:4a:be:3b:1d:26:
         c5:fe:96:a1:00:a5:b7:0f:4a:f6:5f:46:da:32:72:f2:03:e5:
         ea:57:68:be:65:30:48:53:dd:41:29:0b:53:1f:1e:33:20:d2:
         44:37:e3:6d:80:ca:e4:19:49:24:03:7c:9f:32:af:08:e3:5e:
         cd:c7:7f:d3:7b:b7:91:d8:69:9c:10:1c:c2:d2:57:e9:69:f4:
         5e:d6:8f:cb:8b:80:13:45:b1:29:42:fe:67:3c:a3:82:99:a1:
         7c:f0:52:4b:21:03:0c:51:e8:e4:82:02:ba:d4:ed:4c:24:b2:
         03:65:c5:fa:74:df:1c:98:f6:13:ff:15:bc:a6:46:bb:77:3b:
         04:df:1d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:43 2025 by rpki-client