Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/14cde163-2f01-359d-a08e-6adc12a938e9.roa
File:                     14cde163-2f01-359d-a08e-6adc12a938e9.roa (raw, json)
Hash identifier:          s3HaR06AAZ+fOKCc0MISJPI0AVCXXd1j3GG3H/vqxAE=
Subject key identifier:   49:3B:ED:74:4F:70:59:97:89:BC:59:A8:B3:DF:C0:8C:93:DB:CA:04
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858492134569F91CAB1A0988F6C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/14cde163-2f01-359d-a08e-6adc12a938e9.roa
Signing time:             Sun 09 Mar 2025 10:20:57 +0000
ROA not before:           Sun 09 Mar 2025 10:20:57 +0000
ROA not after:            Sat 07 Jun 2025 10:20:57 +0000
asID:                     15321
IP address blocks:        207.164.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:56:9f:91:ca:b1:a0:98:8f:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:57 2025 GMT
            Not After : Jun  7 10:20:57 2025 GMT
        Subject: CN=7dbf3559-b4e7-40a4-89f7-5f1d54af4976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:e4:55:b6:a8:73:c0:f1:c1:14:40:29:b1:
                    fc:48:ed:a1:b8:ae:a0:70:6a:f4:bc:96:14:46:f9:
                    d6:98:c8:65:f1:ac:6c:24:8f:97:b5:93:f0:f7:da:
                    02:32:ab:cb:e5:b5:ac:7e:2c:4b:f7:95:2c:b0:be:
                    38:fa:c5:15:6a:76:54:0b:37:ca:61:fe:42:a8:47:
                    ba:61:a4:24:bc:a8:2f:d9:c1:b2:4a:0f:1f:83:7c:
                    c2:07:53:c4:69:2d:ff:03:9f:b6:d1:08:59:56:a4:
                    02:e1:30:82:15:50:ed:80:e3:86:44:0e:86:4d:72:
                    f7:04:db:7c:43:92:64:a9:39:7a:43:37:4e:cd:54:
                    64:ac:c7:8b:52:9e:cb:b8:db:d1:e9:67:46:6a:47:
                    50:0d:49:35:15:6d:44:a3:0d:8e:e2:76:b5:28:fd:
                    06:92:fe:0d:ed:83:b8:28:a4:55:78:70:62:61:1d:
                    ed:2d:0c:76:1f:1f:13:fc:40:73:20:9f:18:ed:81:
                    e6:0c:28:df:37:1a:1a:22:f6:95:62:19:5e:a3:4d:
                    28:75:7f:31:ba:22:e5:3d:e5:dd:70:da:66:d5:d6:
                    e8:fb:40:ea:f1:1a:f4:0f:c5:72:67:67:5f:b3:3f:
                    0f:07:a9:e8:1c:5b:2f:b3:05:31:54:bb:9a:50:d5:
                    2a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3B:ED:74:4F:70:59:97:89:BC:59:A8:B3:DF:C0:8C:93:DB:CA:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/14cde163-2f01-359d-a08e-6adc12a938e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:6f:14:99:72:80:1e:a6:7f:ae:0c:57:c2:b3:ae:70:50:e2:
         27:63:2d:18:6e:e6:75:11:79:6f:97:2b:78:b5:99:30:21:ce:
         95:a5:ac:af:03:d7:b3:07:b5:e4:47:d7:ca:d6:08:b4:f2:a4:
         09:e2:d1:fb:8e:24:08:67:87:f4:79:3c:59:6b:4c:20:0b:f5:
         63:9b:41:6d:4e:2e:dd:35:e0:a7:d4:0e:cc:87:80:33:f2:85:
         a4:f4:5b:1d:0b:d5:ee:98:02:c8:b3:8f:27:cf:c1:ba:3f:0d:
         d7:44:3b:8a:75:9c:70:90:62:86:09:8b:84:6e:3e:3b:56:55:
         4f:24:ee:cc:7d:a3:3b:a6:02:7b:76:13:e2:a2:f8:1a:7a:b6:
         00:6b:88:de:bd:54:44:eb:76:42:d9:6a:6b:00:fa:f9:b9:3e:
         62:82:97:ed:fe:21:ed:63:79:72:53:38:4a:25:17:03:60:94:
         2e:3a:bc:cd:9c:be:a6:23:9e:2d:77:84:5a:4b:ac:63:f8:72:
         dd:16:78:97:21:c9:f2:56:eb:84:d5:20:b0:39:58:aa:cc:98:
         4a:ed:b6:68:e6:b9:c8:59:f4:44:6d:2b:72:6c:10:4a:b3:73:
         44:a6:3d:18:e9:ee:eb:cd:32:d1:15:d7:fc:98:b3:10:cf:d1:
         06:10:58:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:48 2025 by rpki-client