Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/77f01e0e-dba8-3a7f-aaf5-9f678578ec09.roa
File:                     77f01e0e-dba8-3a7f-aaf5-9f678578ec09.roa (raw, json)
Hash identifier:          XKsLLfrrzYUnQLFs5kLb8l7Rfq3tNOKHwsnS2hN2IYY=
Subject key identifier:   31:90:0F:20:A9:DE:A0:4A:6C:97:B5:32:CD:E5:CB:15:07:F2:BD:D2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B773453E94E3ED92B44C70
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/77f01e0e-dba8-3a7f-aaf5-9f678578ec09.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     30336
IP address blocks:        207.236.252.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b7:73:45:3e:94:e3:ed:92:b4:4c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=48081233-0551-41d2-a862-49c4621a5d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:77:64:e3:b7:d4:d6:23:3c:ae:77:95:2d:d5:
                    fd:74:b0:89:6e:71:8f:8b:17:4e:4a:ee:13:28:3a:
                    b7:42:26:c4:34:e7:69:a8:c1:be:2e:b4:5a:cb:6b:
                    bb:f7:1b:ed:02:7c:1c:34:a1:cf:66:46:c0:51:02:
                    f8:f4:f6:99:db:48:4b:23:5f:40:63:ff:fe:91:f6:
                    89:44:db:31:0a:05:9f:16:95:c1:2d:11:39:4a:40:
                    5d:08:21:cc:e9:5f:49:09:6f:0c:67:aa:ba:a3:bb:
                    4d:dd:28:db:4e:c0:ec:37:61:a3:6e:12:0c:ba:d5:
                    14:78:a3:a3:b3:e8:a3:74:ca:a6:3a:10:9d:9e:69:
                    4c:ac:24:17:74:46:72:29:56:fd:73:71:84:eb:64:
                    7b:5e:2a:b3:c4:95:1a:14:c9:20:29:9d:4a:e4:0a:
                    17:91:9f:52:3c:c6:17:23:ba:db:40:1e:70:a1:9c:
                    ce:18:1d:94:c3:50:ad:1c:12:5b:6d:1a:f5:50:5e:
                    21:fc:e2:38:75:02:26:1b:30:b8:cd:f7:1a:0d:08:
                    88:04:e7:65:28:f0:e3:13:06:93:7c:91:aa:43:c8:
                    37:18:1c:fe:39:09:73:a6:95:a6:fc:f4:eb:69:6c:
                    cf:a7:b2:49:57:4b:a2:b1:34:af:fc:53:8c:16:ce:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:90:0F:20:A9:DE:A0:4A:6C:97:B5:32:CD:E5:CB:15:07:F2:BD:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/77f01e0e-dba8-3a7f-aaf5-9f678578ec09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:23:44:5d:79:b7:96:e9:97:fb:a7:83:ed:a6:1f:19:72:24:
         39:2c:1a:1f:1b:07:a2:28:0e:0a:dd:5b:36:a6:04:38:1e:68:
         dd:b5:14:e3:1d:7d:63:6b:82:fb:99:ed:24:69:78:5f:12:9a:
         a2:fe:b1:f3:09:81:b3:d5:0a:a5:e8:c6:65:4c:e1:c9:7e:74:
         80:8e:49:ca:fe:ae:67:88:89:3e:a9:77:f6:93:44:05:94:96:
         1c:97:ff:4f:e6:8b:87:84:96:aa:88:34:4e:f5:f3:9b:c9:28:
         9d:b6:84:6d:ba:d7:0d:c7:df:5a:75:73:fc:ca:ef:c5:a0:7d:
         67:e2:51:44:fa:3e:7b:46:0b:22:ef:96:e2:9b:42:44:42:11:
         bd:4f:b2:01:19:59:e0:f0:b4:f9:27:0f:e4:72:73:08:20:e5:
         6c:1b:d3:f1:fe:3a:11:91:cf:41:03:db:f4:46:7e:a2:05:e0:
         b9:27:0d:c6:56:13:22:8d:02:41:af:4c:4b:04:86:2b:1d:2d:
         ff:ab:19:86:3a:2e:71:bc:ca:dc:ec:16:51:a0:30:26:8d:93:
         50:7f:8b:c0:df:9e:38:a4:ca:79:87:e3:65:96:79:32:24:52:
         5a:82:51:f1:9a:3b:f7:a4:82:73:45:04:a6:6f:e6:32:c4:9d:
         a0:2e:d5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:23:23 2025 by rpki-client