Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/4c628079-fafb-3220-8e72-17c3324878ee.roa
File:                     4c628079-fafb-3220-8e72-17c3324878ee.roa (raw, json)
Hash identifier:          V/GRbR5sV939vWCF1SBiT7XCsQdOL688ymY7idvJKI4=
Subject key identifier:   0D:A3:E6:4F:36:2E:05:D7:F5:B8:60:E1:D1:AB:AE:E2:03:51:79:D5
Certificate issuer:       /CN=4190a890-d7ce-4ea4-a558-53090be01bab
Certificate serial:       010D0C9F432858483E1ABCC1B11AE6B8B82F62C0
Authority key identifier: AA:A8:98:B8:A7:9B:46:D4:9B:4E:1D:A2:5B:03:C8:B4:B1:21:E0:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/4c628079-fafb-3220-8e72-17c3324878ee.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     15967
IP address blocks:        185.248.213.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:bc:c1:b1:1a:e6:b8:b8:2f:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4190a890-d7ce-4ea4-a558-53090be01bab
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=d78069f6-cc67-4676-ab3d-b5c6f28a21e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:b0:62:a2:c8:ea:66:e2:8d:8f:a5:10:bc:
                    7a:b4:fc:66:83:50:c1:06:56:53:1d:a4:cc:22:9f:
                    3d:7b:1d:d7:a1:c6:92:e8:6d:72:e5:e8:20:a7:2c:
                    74:95:37:fe:39:72:9a:61:a9:51:00:12:c8:5c:c4:
                    d7:48:2a:a7:0c:b4:bb:a5:65:92:a5:69:bb:fa:0d:
                    b8:26:3e:56:5a:56:4b:28:40:b7:69:89:5f:cc:5e:
                    7d:b5:78:c3:9d:8b:dc:32:09:ef:99:1c:51:f2:ce:
                    e1:b2:6a:54:53:12:0a:38:55:d2:eb:40:49:e9:f5:
                    15:ef:17:f5:18:ea:6a:f6:de:eb:0c:fe:f9:ff:2f:
                    09:10:43:e9:76:95:32:4f:14:39:31:13:9b:52:f4:
                    df:e3:bb:80:74:f0:5f:d0:7a:d8:c5:d5:b6:ca:e9:
                    a1:27:5b:47:33:61:f7:c4:d7:d0:20:23:7c:dd:75:
                    83:63:72:47:3d:9f:ff:c5:12:69:09:f7:e5:4f:ec:
                    ae:b4:e8:06:49:f7:46:ae:53:4e:fc:61:29:c5:00:
                    de:3e:e4:e9:6c:2b:9d:8a:a3:d7:d4:0c:56:7e:dd:
                    e1:7f:9a:5c:88:3c:16:9e:21:b5:53:c1:ad:ae:58:
                    37:98:0e:e5:c1:49:70:2f:48:6b:db:98:4a:35:bf:
                    7b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A3:E6:4F:36:2E:05:D7:F5:B8:60:E1:D1:AB:AE:E2:03:51:79:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/4c628079-fafb-3220-8e72-17c3324878ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/4190a890-d7ce-4ea4-a558-53090be01bab.crl

            X509v3 Authority Key Identifier:
                keyid:AA:A8:98:B8:A7:9B:46:D4:9B:4E:1D:A2:5B:03:C8:B4:B1:21:E0:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:cc:bf:61:5f:d0:57:3f:f0:56:1d:3d:57:cb:ed:89:3c:a2:
         76:e8:26:78:91:21:9a:d7:fc:00:2c:be:1a:10:74:12:ce:52:
         95:12:a0:aa:27:03:71:94:c2:35:61:c8:28:ff:af:9f:c9:d0:
         aa:d2:92:ed:55:80:55:df:89:9c:80:78:ef:d2:33:de:96:6b:
         52:6c:54:3b:9a:6c:d7:a9:be:60:ac:75:3a:06:9b:0e:b4:48:
         df:b4:66:78:dc:e5:2f:aa:42:17:08:ff:cd:3e:e4:42:b7:b5:
         3d:82:2c:ce:15:b5:0d:db:a5:e7:cb:5b:12:f6:28:7d:33:3e:
         ac:27:10:19:8a:c1:36:e5:51:23:95:63:21:cc:d4:31:0c:34:
         5b:b8:2e:e2:6f:6f:dd:7a:2b:42:cd:94:71:0a:57:85:b2:70:
         ce:9a:ee:3e:71:b0:a7:a5:8d:ce:d8:75:8f:76:1c:b7:d4:5c:
         22:09:09:09:96:f8:ee:36:ed:d9:35:bb:c9:5e:90:00:0f:24:
         0a:ba:cd:f2:ac:7b:3c:9f:0b:14:fc:4f:17:ff:ee:e8:68:f6:
         75:6b:9e:c1:72:00:75:af:aa:31:ec:00:ed:f5:52:22:fe:ad:
         ed:e6:d4:a9:73:39:42:9c:77:4d:6c:6d:86:8e:21:ac:91:e5:
         64:b9:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:24:11 2025 by rpki-client