Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/0e650d9d-6bd2-3cea-a011-e2351b67eaa9.roa
File:                     0e650d9d-6bd2-3cea-a011-e2351b67eaa9.roa (raw, json)
Hash identifier:          SXuy2zP2uQLq1ZPQ54H57BT264PyjfsjNqZYsW4cl8M=
Subject key identifier:   0D:B7:D6:07:B2:26:E9:08:1F:09:46:41:DF:56:46:0B:7E:28:FF:3B
Certificate issuer:       /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial:       010D0C9F432858480730A251A5BC6DFFA118BABE
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/0e650d9d-6bd2-3cea-a011-e2351b67eaa9.roa
Signing time:             Thu 28 Nov 2024 09:55:32 +0000
ROA not before:           Thu 28 Nov 2024 09:55:32 +0000
ROA not after:            Wed 26 Feb 2025 09:55:32 +0000
asID:                     43260
IP address blocks:        199.96.165.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:30:a2:51:a5:bc:6d:ff:a1:18:ba:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
        Validity
            Not Before: Nov 28 09:55:32 2024 GMT
            Not After : Feb 26 09:55:32 2025 GMT
        Subject: CN=9cf9ee18-4f06-4884-874b-19f326c7d3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:ce:44:de:91:ae:56:52:7d:f4:91:be:78:
                    a7:20:00:b0:b7:a0:57:13:02:f8:9d:81:4d:b8:0f:
                    a2:a3:7c:33:e1:2e:27:ec:24:f2:79:0c:3d:c3:1a:
                    22:6e:b8:52:f7:66:5b:96:b2:a3:3d:cb:34:1a:5e:
                    be:33:57:11:c8:be:b1:d8:31:b7:ab:c4:72:2b:51:
                    36:69:9d:9b:be:0a:3e:5f:6a:fa:f9:be:78:69:29:
                    01:cf:81:68:76:ae:fc:8b:87:07:30:d0:41:9a:08:
                    38:0a:bd:f1:67:48:80:37:f3:ee:f0:0e:db:77:a3:
                    1d:78:5b:f4:7b:d6:ba:77:dd:32:1b:cc:ea:7c:fe:
                    f5:bc:57:b9:d0:1f:10:96:ef:66:d5:0d:02:1f:7b:
                    c0:7b:2c:b6:5b:be:6e:52:03:74:18:0f:5f:2a:48:
                    30:ee:58:72:4d:af:be:14:de:3b:a0:d9:a3:10:dd:
                    93:0d:9e:cf:98:26:57:af:50:31:85:95:a7:91:11:
                    6b:3e:b0:70:a4:5d:71:5c:9c:8f:9a:4e:6b:9d:51:
                    62:fa:be:ad:3b:8b:21:82:4f:bb:ed:ac:c7:46:d2:
                    5d:c5:92:8b:71:fa:5f:09:e6:cf:e3:65:f4:66:f0:
                    7e:b2:b0:f3:64:0f:18:71:2f:ff:af:d3:1a:83:0c:
                    5f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B7:D6:07:B2:26:E9:08:1F:09:46:41:DF:56:46:0B:7E:28:FF:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/0e650d9d-6bd2-3cea-a011-e2351b67eaa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl

            X509v3 Authority Key Identifier:
                keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:4d:8d:78:8d:b8:13:65:2e:6e:cf:43:09:63:6b:de:ab:45:
         cb:93:e7:88:c2:a2:3b:2c:47:9b:cc:6e:23:af:a0:69:47:0c:
         92:35:a0:08:bc:1c:99:62:11:88:4f:c2:d2:df:51:01:3e:3e:
         30:9e:cd:7a:ac:79:34:7e:b9:6e:c1:72:cf:8d:3d:91:7a:6e:
         bf:aa:28:2a:a9:54:c1:9b:2e:84:43:77:46:c4:3f:dd:f7:da:
         db:41:0c:d2:f5:fd:6b:64:eb:ee:4d:43:96:3b:be:9b:b5:a5:
         d9:10:13:6d:01:a1:57:d9:c8:08:a7:7e:7c:ab:71:04:c6:30:
         f4:1c:20:a5:39:50:65:cc:22:77:46:37:fc:91:57:a9:57:bd:
         18:b3:71:3d:76:d1:eb:e6:0c:fc:ad:b4:a8:a2:2f:2f:7e:88:
         b7:e1:e7:9f:53:c1:3f:f4:d8:d6:ed:0d:9d:3d:79:63:a4:5b:
         1c:42:1d:a9:9d:23:a8:c6:2f:6b:af:06:ce:03:6f:e2:c4:47:
         22:8c:9e:94:3c:83:f9:04:37:21:63:84:32:a9:70:63:5f:50:
         79:b1:87:ea:6c:a3:33:9c:16:c0:8c:b1:70:6d:f5:0c:14:dd:
         96:ea:81:2e:73:59:d7:7d:d0:07:f1:ce:7e:c5:2d:9e:da:30:
         e4:e7:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:03:47 2025 by rpki-client