Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cf092be0-1d29-3b19-91ea-c540affe3052.roa
File:                     cf092be0-1d29-3b19-91ea-c540affe3052.roa (raw, json)
Hash identifier:          ceQK04ZaQVerirokyMC0pVHKUCdjxEU8bPFdX8r0npM=
Subject key identifier:   F5:65:02:36:76:C2:59:0A:8F:7C:3A:50:6F:DF:6A:36:20:7A:2C:8A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921345226A092E203510EA8BC
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cf092be0-1d29-3b19-91ea-c540affe3052.roa
Signing time:             Sun 09 Mar 2025 10:20:55 +0000
ROA not before:           Sun 09 Mar 2025 10:20:55 +0000
ROA not after:            Sat 07 Jun 2025 10:20:55 +0000
asID:                     40895
IP address blocks:        207.61.43.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:52:26:a0:92:e2:03:51:0e:a8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:55 2025 GMT
            Not After : Jun  7 10:20:55 2025 GMT
        Subject: CN=5b66adc1-b01a-408d-907f-3aa5d2207c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0e:4e:1c:2d:94:3e:09:ef:88:86:d0:00:22:
                    0c:0e:ac:57:37:44:05:41:39:25:b1:7f:6e:db:6e:
                    09:09:ce:07:c1:96:67:aa:0e:d4:12:a0:64:a4:dd:
                    f7:2f:2b:31:a8:09:32:e6:a3:2c:13:16:7d:ce:48:
                    63:fd:0e:1d:bb:52:73:0a:51:e8:20:64:3d:3e:42:
                    ec:8d:5d:0b:84:50:71:9d:85:e1:a5:80:cd:f9:61:
                    e6:e8:40:cc:44:ce:e3:f5:71:b0:ce:08:4f:0e:e5:
                    1b:53:17:bf:9b:b3:c2:1c:ba:07:e9:b5:d0:3f:6b:
                    f1:b1:9b:94:ab:13:50:9f:bb:f4:c1:69:ed:a8:66:
                    db:56:ff:66:2d:fa:3f:6d:10:fb:ae:a0:be:99:2f:
                    42:bb:94:83:ec:32:d5:fc:76:7d:3a:31:73:66:f7:
                    fa:21:38:b2:b6:d7:33:19:8d:e4:7c:c0:42:c3:3f:
                    77:4b:71:55:ec:8e:de:b7:40:9e:1d:f3:d6:1e:77:
                    e6:55:a2:ab:5b:e8:45:72:2a:20:c7:40:45:69:03:
                    fa:6b:40:4a:f7:66:c4:8f:87:d8:a8:36:cb:c6:3e:
                    dc:b3:fa:3f:74:3f:48:07:c9:87:6e:bf:da:29:a0:
                    7b:fb:d9:31:19:a2:d9:4e:ea:d9:18:95:c7:08:05:
                    64:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:65:02:36:76:C2:59:0A:8F:7C:3A:50:6F:DF:6A:36:20:7A:2C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cf092be0-1d29-3b19-91ea-c540affe3052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.61.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:5b:79:a0:20:d4:c2:a8:31:d6:53:c1:0f:c1:24:a5:f2:a1:
         dc:f3:26:fc:bb:36:9d:3e:41:03:8c:14:24:80:22:42:f0:87:
         55:6c:80:5b:96:84:cc:b7:66:f3:b6:00:7f:e9:eb:56:91:c9:
         86:35:67:b2:f3:57:9c:d4:0d:f3:09:b6:9a:9e:1f:77:7e:51:
         9e:f5:9c:e7:ee:39:c5:27:18:38:7e:d9:db:48:18:21:8c:a9:
         7f:ee:b7:0b:5b:63:e6:ec:47:35:f6:20:dd:d2:dc:98:44:54:
         b2:64:80:1b:ce:16:31:0e:3b:a5:46:28:45:b5:65:bf:df:79:
         86:d9:c4:10:d3:b9:b4:06:c3:9f:99:cb:ff:be:d7:34:7c:38:
         66:02:67:24:c1:1b:66:50:69:00:33:82:3c:e3:41:50:ae:e0:
         85:69:3d:4d:bd:5e:4c:a7:5d:5e:a7:eb:00:54:57:82:98:02:
         88:2c:56:07:1c:68:ae:45:44:1d:90:f3:87:33:3a:53:cb:cd:
         0e:97:da:05:dd:66:16:5a:3b:be:48:5c:f3:ef:0e:cc:fc:96:
         44:a4:c7:27:fe:74:63:3e:2f:9c:50:a5:46:3b:18:93:46:1f:
         e2:7b:7c:56:be:53:44:10:08:32:db:75:54:35:19:4f:c6:77:
         e9:31:75:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:24 2025 by rpki-client