Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca9374bc-36ce-3c49-aaad-74ef848230c7.roa
File:                     ca9374bc-36ce-3c49-aaad-74ef848230c7.roa (raw, json)
Hash identifier:          85j8iEc7C59B7Bf+T6Ei7krZvpcY5hHCGV/qBrK2Lzc=
Subject key identifier:   D8:D7:D9:DC:1F:54:8B:C4:75:A7:4B:98:55:A2:14:66:89:63:44:0E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921346C1B324E95CA70401880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca9374bc-36ce-3c49-aaad-74ef848230c7.roa
Signing time:             Sun 09 Mar 2025 10:21:07 +0000
ROA not before:           Sun 09 Mar 2025 10:21:07 +0000
ROA not after:            Sat 07 Jun 2025 10:21:07 +0000
asID:                     3848
IP address blocks:        216.208.117.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:6c:1b:32:4e:95:ca:70:40:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:07 2025 GMT
            Not After : Jun  7 10:21:07 2025 GMT
        Subject: CN=ef30a454-72f1-407a-89b6-efeb92bf8fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5a:6a:f4:f2:55:98:b7:05:9b:86:d1:84:0e:
                    75:51:4e:cc:a5:56:a1:75:cd:6f:13:94:02:22:b3:
                    56:58:cf:19:b5:94:63:55:58:ac:cb:b1:43:c4:68:
                    92:2c:fa:69:85:50:1d:b9:95:68:8c:ef:1f:b2:b2:
                    24:82:56:f6:58:e9:a7:2f:9d:23:e6:d1:a4:7e:d4:
                    ad:47:b3:48:ba:59:b7:dc:29:6a:8b:a2:95:7b:5b:
                    78:8f:9e:e4:a3:f9:23:6a:31:f7:74:27:f4:49:ee:
                    cc:4b:58:59:34:31:ac:83:7f:aa:60:59:70:ce:e9:
                    24:50:f7:3f:73:71:8a:18:43:4d:3c:2a:89:fe:39:
                    f9:d9:10:be:1b:c6:67:dc:4a:5a:cd:3f:31:fe:39:
                    72:ce:5b:11:3f:c5:14:f0:a2:d4:e9:60:88:68:2f:
                    48:3d:e9:73:46:79:be:cd:9a:b4:3d:3f:cb:cd:9f:
                    3b:7c:c0:3a:88:3a:f7:42:db:1e:9f:dd:30:38:de:
                    a7:2b:33:24:85:68:e2:a2:e3:7e:b8:20:39:1d:81:
                    1d:26:9a:6d:bf:48:2c:09:15:f7:56:5f:32:da:d2:
                    6b:f5:33:80:af:07:d1:0b:7b:d5:c8:7f:a0:84:7c:
                    6a:5f:49:1c:ad:c1:10:87:d4:7a:29:9c:af:c7:2b:
                    f8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D7:D9:DC:1F:54:8B:C4:75:A7:4B:98:55:A2:14:66:89:63:44:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca9374bc-36ce-3c49-aaad-74ef848230c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8e:28:cc:27:86:2c:42:5c:da:78:89:9f:1f:bf:ff:5e:7c:
         a5:a6:e8:f3:98:d6:e9:9d:ba:b1:6d:1f:c9:7b:7d:97:24:d7:
         f0:c9:aa:05:ad:d6:cb:69:5d:a0:23:b0:f5:68:8a:c3:29:0e:
         6e:16:52:31:95:28:47:d5:04:ed:d5:73:f5:0a:80:c6:97:90:
         ae:ec:3e:3b:42:1a:47:e8:b4:fb:79:e6:7c:cd:6b:45:e5:d9:
         aa:4c:13:a8:72:93:fa:15:20:a6:35:4b:a1:dd:af:dc:3a:19:
         5b:2b:b4:22:94:be:1c:24:87:f6:51:b3:e9:32:01:a4:38:df:
         d8:c2:7a:70:d9:54:f8:6f:b4:e0:bf:81:0f:2e:0e:8c:3d:f3:
         26:17:59:09:eb:5c:21:ad:4d:e9:f3:28:2e:29:a8:45:d0:af:
         77:23:10:6c:74:33:ae:12:85:9a:cc:97:c8:cd:42:b8:cd:bb:
         d7:c9:4e:3a:37:52:eb:fa:c1:33:cc:45:b3:b5:f6:ec:8b:dd:
         db:81:d0:cf:9e:4f:44:0b:62:20:8c:59:fd:1f:f8:01:0f:c2:
         fa:5b:0d:65:16:3e:48:e6:8c:f8:9c:3e:82:e2:2a:37:4e:9e:
         14:8b:5a:52:ca:87:39:75:d8:b7:dc:ef:85:37:45:e1:0f:f2:
         24:57:3e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:16 2025 by rpki-client