Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6e27952a-3d5c-334f-a00f-870d6745139b.roa
File:                     6e27952a-3d5c-334f-a00f-870d6745139b.roa (raw, json)
Hash identifier:          /1xj+3VnYp1gZFpFkbjC76UaGDwS+vyWpLgOJWV0oW4=
Subject key identifier:   34:61:03:93:83:AC:9A:68:05:9A:A6:4C:12:27:45:46:E5:A5:F4:22
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848B78B8EFA3CF80AADBCBFD300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6e27952a-3d5c-334f-a00f-870d6745139b.roa
Signing time:             Thu 30 Jan 2025 14:00:51 +0000
ROA not before:           Thu 30 Jan 2025 14:00:51 +0000
ROA not after:            Wed 30 Apr 2025 13:00:51 +0000
asID:                     212238
IP address blocks:        166.88.140.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:8b:8e:fa:3c:f8:0a:ad:bc:bf:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 30 14:00:51 2025 GMT
            Not After : Apr 30 13:00:51 2025 GMT
        Subject: CN=40240cc7-7386-4ea3-9dfa-853012d33464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c0:a7:1a:13:c4:fc:6a:71:c4:f4:5f:a4:7f:
                    b9:6e:b3:02:26:2b:5c:d3:6f:39:77:73:a5:61:c6:
                    d0:11:58:b5:21:93:b1:18:1c:d9:80:f7:8f:3f:20:
                    28:c4:8c:5b:ff:9d:1d:10:bf:84:0c:4d:31:99:23:
                    07:9a:7f:12:01:ed:96:3e:81:67:14:00:6c:c7:dc:
                    06:00:51:79:12:9d:08:67:5a:9f:1e:d6:93:43:9e:
                    f5:f9:d3:7c:1c:5b:49:96:1e:67:04:23:dc:09:6e:
                    5e:10:e7:5c:79:e8:d7:7c:57:c4:dc:74:e1:90:2f:
                    2c:e4:99:96:ab:f0:af:51:cd:2e:60:77:20:f6:88:
                    88:3b:5b:52:a9:7b:e2:77:02:c3:ac:a9:ea:fe:f2:
                    35:f6:72:bb:eb:d2:33:86:8d:cf:3c:b5:77:e5:ab:
                    37:83:7d:5f:6c:8b:60:41:72:af:83:77:b1:b2:65:
                    b0:51:09:65:46:89:34:2b:71:a0:a7:ed:24:1f:20:
                    5e:3a:79:4a:49:ff:6a:67:8b:da:0f:26:27:b1:a1:
                    f5:ce:03:fe:5c:3f:60:dc:b2:18:32:3b:48:49:c7:
                    60:5e:e5:94:53:70:a4:d4:96:f0:57:84:af:ec:28:
                    60:2b:8e:f6:33:71:34:5f:2f:c0:a9:37:e5:8a:aa:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:61:03:93:83:AC:9A:68:05:9A:A6:4C:12:27:45:46:E5:A5:F4:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6e27952a-3d5c-334f-a00f-870d6745139b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:6d:c7:1a:24:8c:62:e0:c5:30:bd:d8:72:5f:9b:1b:c4:66:
         50:f2:76:45:04:9f:68:81:d6:ce:ee:26:7f:ef:0b:99:2d:84:
         f3:1a:50:28:8a:58:ae:cd:b8:63:9b:67:1e:18:71:61:e8:b5:
         0a:ef:cd:e6:b8:5d:5b:4d:ac:8e:70:12:b4:8a:89:68:40:be:
         4b:31:3e:8f:44:b7:9b:4e:3d:f9:93:0b:3f:ba:d9:8b:a7:3f:
         55:68:9c:de:bc:b1:31:b5:93:3a:12:62:15:01:cb:d9:90:96:
         59:b1:3f:77:5c:6b:34:4b:d3:be:28:62:2f:c0:fe:b6:19:e2:
         9e:7a:e4:ca:86:07:24:b3:df:e9:91:2a:0a:8b:63:40:fb:c2:
         34:54:89:9d:05:4d:9b:c1:2c:22:9c:18:12:d3:5b:97:ba:7b:
         b8:19:b4:80:59:69:6d:9a:c9:13:64:cd:ae:38:4f:43:87:f7:
         6b:9a:e2:ab:d3:77:76:9f:18:19:6f:d5:ca:82:27:b9:5a:62:
         25:4c:31:9d:b0:85:e2:39:29:40:1c:28:1c:e8:47:1e:62:66:
         76:7a:4a:f8:26:a1:f0:47:82:79:61:a6:aa:e9:43:18:cb:dd:
         a1:57:3a:5a:a7:52:0c:e0:a9:43:3a:a2:6d:87:6a:c2:f3:5b:
         de:2d:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:37:58 2025 by rpki-client