Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/941b2fd3-2e63-3220-ab7e-5c4069b63402.roa
File:                     941b2fd3-2e63-3220-ab7e-5c4069b63402.roa (raw, json)
Hash identifier:          PznGoUqTshKU61RJuoZDbVaCQdZQ5sFfPLJUrVW2SAg=
Subject key identifier:   4D:F4:F7:25:4A:00:D3:F6:97:E4:46:90:17:F0:C5:39:15:11:64:F8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B7253F8ED3C0A64ADAA900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/941b2fd3-2e63-3220-ab7e-5c4069b63402.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     36522
IP address blocks:        207.164.165.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b7:25:3f:8e:d3:c0:a6:4a:da:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=66a1dad6-1c1e-4e70-a7a0-fec96d1446ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7e:9d:37:9b:af:e1:da:e4:f6:87:1e:42:39:
                    7e:e0:f8:32:9f:54:e1:bd:d6:35:ee:d8:a1:97:dc:
                    ef:3c:39:b1:53:52:21:a9:bd:6c:c9:98:37:72:df:
                    ab:9d:c0:37:27:43:10:d7:fb:2a:a0:af:c6:32:1b:
                    15:15:5b:87:4f:e1:76:24:1d:72:ec:b8:ae:72:8a:
                    a1:e3:7e:7e:af:cf:5f:e1:fb:7b:07:24:d4:33:a6:
                    7e:85:73:bc:55:94:1b:f2:6b:75:dc:c4:c4:90:8c:
                    bb:5d:89:46:94:c4:2e:4e:ef:84:74:aa:06:c6:22:
                    99:f6:8e:72:bd:a3:eb:f8:33:b7:9f:1c:e5:b4:19:
                    b1:c7:7b:03:34:4b:89:47:db:68:7f:cd:fd:dd:3c:
                    b4:a8:36:4f:de:6f:09:49:37:f6:f4:e9:17:cf:b8:
                    4e:06:db:ed:f0:bf:8b:06:0a:b2:97:e7:48:ed:a3:
                    8b:5c:8b:f6:b0:e4:2a:21:91:ab:fe:ec:cb:7c:05:
                    4b:16:c5:43:44:2a:6d:3a:d6:5e:80:ac:a3:b1:e8:
                    f7:b5:5b:1b:8c:06:87:3a:60:c7:d3:9f:2d:e1:44:
                    f1:52:4d:90:ac:ab:ad:31:aa:4b:86:79:ce:73:a2:
                    47:6f:80:68:48:62:11:05:05:c3:f8:48:53:49:3a:
                    16:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F4:F7:25:4A:00:D3:F6:97:E4:46:90:17:F0:C5:39:15:11:64:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/941b2fd3-2e63-3220-ab7e-5c4069b63402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b4:57:0a:85:08:d1:a6:6a:67:57:6e:cb:fc:30:4f:6b:f4:
         37:bf:d1:bb:02:74:e0:74:0a:98:9a:09:52:4c:85:4c:9e:07:
         87:1c:6f:0b:d1:2c:51:69:ca:d9:f5:2a:2b:e1:9d:85:8d:c2:
         4c:ea:11:e2:e7:0f:d1:5e:07:cf:ff:e6:76:d7:65:f1:ee:37:
         01:56:05:b4:53:d9:63:93:19:4f:e2:7a:1c:04:9c:ad:60:0c:
         1b:eb:3d:1f:ff:0b:fc:72:f1:89:6f:50:af:8b:cb:95:6d:ad:
         ba:83:0d:14:a1:6b:dd:8d:e4:c1:32:1d:e8:06:fd:1e:58:13:
         37:cb:61:73:f4:f1:0c:71:21:38:bb:9c:cc:cf:fd:4b:dd:75:
         47:a4:52:44:61:3a:e7:74:35:78:94:aa:f9:59:62:e2:ba:b8:
         92:c6:91:3d:e9:c2:55:36:99:8e:a6:ab:31:93:75:44:93:8e:
         63:11:4f:8f:f9:94:2b:52:db:7a:05:fc:33:1f:ce:25:24:5a:
         ac:5f:8f:91:8f:7d:6b:f4:61:bf:09:ec:58:f0:ff:b6:22:4d:
         5a:62:40:70:a6:ac:b3:05:5f:eb:54:cc:8c:dc:b5:6f:dd:d6:
         63:12:64:9b:c4:33:ee:15:71:08:16:76:21:8f:df:88:82:46:
         ba:24:10:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:23 2025 by rpki-client