Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ed7df9a4-04c3-3d84-b603-9d74f9abcb3d.roa
File:                     ed7df9a4-04c3-3d84-b603-9d74f9abcb3d.roa (raw, json)
Hash identifier:          gY7r+mXAxXwPKHYJ2kBbm7tZnDpENDruwWlTCOjrpd0=
Subject key identifier:   87:F4:46:5C:0B:77:F7:3D:19:96:00:69:A0:33:02:28:27:59:B6:2A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D299CF567F231DF6E026980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ed7df9a4-04c3-3d84-b603-9d74f9abcb3d.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        198.235.217.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:29:9c:f5:67:f2:31:df:6e:02:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=c3fb58ce-2f6b-4309-b641-1c91e7e7ac78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2e:15:8d:68:e3:e1:a8:c0:fa:9a:85:97:e7:
                    91:65:96:08:5d:60:3b:7c:bc:30:60:e4:6d:0c:d4:
                    95:58:68:df:5c:cf:7e:f9:b5:89:b3:6c:e5:29:27:
                    0f:1f:51:1e:19:b6:da:f7:56:76:95:04:40:a8:50:
                    0a:be:dc:97:67:8b:2e:16:76:f2:3a:d2:b5:27:10:
                    c6:b3:0a:fe:26:01:ff:74:92:0f:61:0b:db:c2:57:
                    ea:66:07:31:17:cd:4f:8b:c6:86:16:33:79:17:0b:
                    6d:48:3d:b6:09:f3:ff:73:a9:48:fb:3b:d6:b6:16:
                    6b:bd:aa:d1:ba:4d:88:04:53:ff:4b:2e:4b:51:a6:
                    13:31:3c:ec:c4:15:b8:d9:f1:de:91:ac:0f:ff:fe:
                    68:4f:1a:37:7e:0e:89:0c:98:d4:77:b4:a8:ce:88:
                    8e:f0:56:a0:e6:45:f3:07:b0:31:5d:ca:10:50:74:
                    5c:68:d9:b1:85:74:e6:d8:27:14:09:37:80:f5:c4:
                    40:37:7f:6b:c2:7f:1b:9b:75:09:20:5e:62:7a:f0:
                    ac:79:ba:ea:94:f9:83:3d:8e:80:dc:2d:b1:16:ae:
                    c0:67:51:ab:70:ae:95:d2:48:e7:f8:77:d4:9f:40:
                    26:9a:67:f7:51:4d:ca:6f:08:6c:6f:7c:10:55:54:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F4:46:5C:0B:77:F7:3D:19:96:00:69:A0:33:02:28:27:59:B6:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ed7df9a4-04c3-3d84-b603-9d74f9abcb3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d7:06:65:21:e9:ba:43:06:f3:06:43:bc:cc:c8:92:a3:7d:
         2d:54:11:62:3c:e9:61:ab:c1:1e:5f:61:9b:76:24:51:15:7e:
         5f:43:68:32:11:04:31:c2:41:0f:bb:ba:f6:82:3d:a4:81:59:
         f1:c0:93:91:3b:11:26:e6:1a:96:0b:e6:6a:85:5e:c1:b7:5c:
         ab:9b:fe:45:2a:7e:fe:b6:33:d0:de:84:c1:49:d2:47:89:18:
         e7:7c:09:d9:57:ea:99:20:39:85:75:21:1c:af:a0:c5:b0:f4:
         fc:0c:32:1f:45:33:1a:71:0b:81:e9:cc:9c:50:da:83:ff:66:
         ba:f7:f9:ce:90:6f:e2:db:23:46:3d:7d:5d:9a:ad:79:8e:6b:
         2b:93:7c:53:f0:8e:35:02:b0:2c:fa:7c:7a:34:3c:0e:ee:35:
         69:93:00:bf:fa:d2:1f:39:39:28:90:d7:58:67:ec:06:ca:d9:
         36:27:21:22:e2:f4:63:52:2d:d5:4e:33:cc:5e:9f:60:7c:bc:
         5d:f7:a2:af:d2:95:97:b4:84:2b:67:07:9f:a2:6a:a4:db:17:
         32:52:42:77:ef:57:e5:25:2b:22:c2:79:98:c1:c3:a4:cf:d8:
         7d:aa:b0:0f:5e:e8:e4:6b:62:4d:f6:aa:e8:66:6c:c1:2e:5f:
         f0:87:6f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:39:43 2025 by rpki-client