Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/07356c7d-a573-374e-8622-9e89b4b40b76.roa
File:                     07356c7d-a573-374e-8622-9e89b4b40b76.roa (raw, json)
Hash identifier:          2vu0nUCYR/1WkfkAZKCLyY9xMqdjfx30og+ZdsRZzm8=
Subject key identifier:   BE:55:63:91:E3:A3:5B:22:5C:05:BB:7E:DE:81:D0:9B:B8:E2:A8:78
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2B864CD0E92027EF7B3040
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/07356c7d-a573-374e-8622-9e89b4b40b76.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     3848
IP address blocks:        216.208.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:86:4c:d0:e9:20:27:ef:7b:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=5b236df9-9131-40bc-acd2-b1909687cccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d2:5c:56:c7:a9:d3:a5:2d:a8:a7:38:e7:03:
                    47:0e:90:29:c1:4e:36:b2:11:c4:79:ca:62:22:ea:
                    66:c4:bb:0c:d8:f7:51:93:7d:d1:2f:b8:e2:c3:c5:
                    9c:d4:63:68:50:3c:e8:28:f8:0d:92:c2:13:04:6a:
                    fb:4f:fe:62:cc:4f:a2:e7:7f:fb:2a:56:0b:4e:e1:
                    a5:93:a8:1a:ec:7b:24:cc:58:f3:39:b6:68:89:bf:
                    3a:d8:41:cf:9d:8b:61:6a:94:18:a5:69:1a:fa:b5:
                    fd:6d:8e:66:40:8c:10:98:69:22:87:64:89:12:02:
                    cf:9a:ea:62:6f:0f:4b:a2:8c:1b:a4:6f:8d:e6:00:
                    fd:f8:b3:e2:49:6a:9c:93:14:00:f5:42:74:31:08:
                    e9:36:42:8e:f7:09:2e:c5:e0:cd:7e:6a:62:4f:87:
                    8b:2d:45:e5:9c:75:80:24:86:a6:f8:7d:e2:aa:17:
                    18:a8:3a:95:fb:f6:70:2c:cf:8e:fc:be:ba:7b:cb:
                    05:bf:ad:13:d6:8f:b6:ea:9a:4f:ca:97:62:b9:97:
                    05:2d:b5:03:ae:eb:45:b8:5d:64:1c:2d:68:d8:5b:
                    24:d4:42:6c:22:9c:b8:f4:64:16:6c:45:d7:72:0f:
                    50:4f:94:2c:21:33:e5:f7:48:2e:cd:4f:17:ad:dd:
                    12:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:55:63:91:E3:A3:5B:22:5C:05:BB:7E:DE:81:D0:9B:B8:E2:A8:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/07356c7d-a573-374e-8622-9e89b4b40b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f5:38:8f:f8:74:ce:72:32:ae:43:9b:18:c1:40:88:32:69:
         2f:07:12:02:55:2f:e2:e2:f2:6d:9c:b9:9f:bf:1d:74:4f:26:
         62:ee:08:51:46:17:d1:bc:55:55:26:a1:38:43:51:19:1f:59:
         80:ec:ba:20:42:5b:41:4d:88:28:85:f3:63:27:2f:d6:eb:24:
         f1:2a:d1:e0:22:61:ec:c7:88:3f:82:ff:0e:54:79:e7:d8:c3:
         72:2a:fa:a3:30:24:e0:64:33:5a:84:2d:9c:1a:0a:31:b7:66:
         43:15:07:2e:d5:d7:af:09:b0:05:af:cc:5a:81:58:ce:78:18:
         58:62:9c:b2:ca:0d:db:86:b2:b7:3e:bc:4f:e6:e2:d8:f0:fc:
         2f:2c:ed:69:52:44:06:57:33:94:c4:0b:d4:76:ce:39:23:f9:
         01:8b:21:5e:50:45:d2:16:c0:0e:f0:e0:58:26:d4:4d:5e:61:
         0d:f2:e2:18:6f:8b:7d:59:a2:bd:16:9e:33:35:ee:5d:f6:90:
         b3:90:6a:ec:cd:0b:9e:51:31:1a:10:e9:95:66:17:62:97:df:
         bb:61:c4:ad:25:9b:32:e5:3e:b2:3a:70:a0:f9:a1:78:9d:31:
         66:ca:61:e9:9d:e9:57:1e:d0:12:6e:59:8b:d9:04:b5:4a:f5:
         95:17:3d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:44 2025 by rpki-client