Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/0df870b6-0fcb-3b1b-b191-eeb555d79440.roa
File:                     0df870b6-0fcb-3b1b-b191-eeb555d79440.roa (raw, json)
Hash identifier:          i5WOoJvTL7Vvs1tF5F8T+IdeIA+12dQwDYJ9NBfiJfk=
Subject key identifier:   11:C4:16:A1:1F:34:D5:10:AC:92:C7:1E:23:54:14:E9:62:98:3A:71
Certificate issuer:       /CN=bbc10cdd-c548-4bd0-aafb-ae57822b4599
Certificate serial:       010D0C9F43285848274F6AEF4D2F66DD7FFE8D40
Authority key identifier: BC:F8:A0:07:28:56:E3:62:62:B3:92:B7:99:FD:3E:20:EB:18:6F:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/0df870b6-0fcb-3b1b-b191-eeb555d79440.roa
Signing time:             Mon 09 Dec 2024 22:03:26 +0000
ROA not before:           Mon 09 Dec 2024 22:03:26 +0000
ROA not after:            Sun 09 Mar 2025 21:03:26 +0000
asID:                     16276
IP address blocks:        64.39.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:4f:6a:ef:4d:2f:66:dd:7f:fe:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbc10cdd-c548-4bd0-aafb-ae57822b4599
        Validity
            Not Before: Dec  9 22:03:26 2024 GMT
            Not After : Mar  9 21:03:26 2025 GMT
        Subject: CN=026575af-e675-452f-b74b-61ceab0a76d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:59:e5:02:83:2f:d8:bc:1f:6b:38:9a:3e:6b:
                    83:54:bb:6c:0a:b9:9e:a7:39:0b:47:5d:44:be:45:
                    c3:fb:da:6c:fe:79:ac:e7:cb:48:2f:9a:9b:eb:d6:
                    8b:40:b8:3a:8c:1a:11:fb:75:ab:a0:7f:e8:41:ad:
                    fc:60:52:a6:5c:a1:62:fe:2a:c9:f9:a1:06:7e:e8:
                    0a:64:42:de:2f:75:40:bc:f4:2f:b5:1d:be:5b:0a:
                    fe:e2:91:da:4c:4a:7d:64:ee:7c:42:4e:b2:af:aa:
                    c4:52:12:8c:68:dc:43:70:4d:da:5f:fe:05:9c:8d:
                    31:42:14:46:7b:4b:74:c5:98:89:64:62:24:ee:b0:
                    71:96:ce:a7:67:75:31:fc:23:d6:27:c7:a9:34:e0:
                    ea:2d:34:84:35:46:5e:f7:d8:85:5f:4d:6f:a3:cc:
                    65:97:28:b7:cd:93:3c:5d:dc:6b:18:a7:36:fe:d4:
                    e5:1b:c3:7f:ab:ba:eb:29:85:e8:08:81:88:0d:51:
                    96:d4:ae:eb:5d:21:ed:cf:e1:4a:18:a7:ef:85:e4:
                    c1:39:b2:fd:6b:21:81:d5:de:0d:b7:2d:1d:91:c5:
                    93:ce:72:3e:6a:8e:ee:04:52:90:b0:11:96:a9:8e:
                    c7:6a:1e:e3:5c:35:43:1c:83:e3:30:eb:b3:7f:fc:
                    73:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C4:16:A1:1F:34:D5:10:AC:92:C7:1E:23:54:14:E9:62:98:3A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/0df870b6-0fcb-3b1b-b191-eeb555d79440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/bbc10cdd-c548-4bd0-aafb-ae57822b4599.crl

            X509v3 Authority Key Identifier:
                keyid:BC:F8:A0:07:28:56:E3:62:62:B3:92:B7:99:FD:3E:20:EB:18:6F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d7:16:10:bc:7d:96:ed:b6:17:71:11:b7:b9:f3:f5:c4:5e:
         d9:e6:6e:2e:f8:d5:c0:b2:f0:0a:dc:a0:e6:55:c1:41:1f:f2:
         85:51:6b:5e:08:22:3f:b0:41:7b:b4:94:10:b5:e6:d2:72:f8:
         b3:cc:72:89:b8:b4:3a:74:76:59:07:a0:b1:3e:78:66:58:36:
         68:a4:82:15:c1:8f:86:2f:a4:d0:a3:3a:6d:fe:dc:35:83:3a:
         02:a7:83:1c:85:12:2f:48:69:7f:b7:14:4c:ed:3b:32:d4:ea:
         ce:f3:c8:cd:71:6c:9c:4d:c0:98:a4:a6:fa:c5:86:ef:5d:38:
         21:74:f5:fa:c7:d5:f1:db:90:aa:b0:8a:28:6c:92:58:95:7e:
         84:ae:c1:31:fe:5e:62:54:9e:e8:02:3e:83:ca:f5:83:e2:30:
         22:cc:a7:2c:68:46:d6:19:e7:5e:90:cd:71:d8:8b:20:e3:a3:
         06:0e:68:da:b7:0b:c7:68:79:56:e4:d6:f6:68:bd:a5:8b:24:
         da:d3:80:c7:d3:a0:d8:58:ef:3d:a0:22:03:78:ff:8a:94:97:
         82:23:f1:fa:14:e3:64:8a:d9:18:68:cf:ec:4e:b0:8a:e3:a0:
         12:06:6b:76:8c:f7:49:f3:3f:fc:ec:0b:09:d1:ab:a3:26:25:
         b2:42:a9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:35 2025 by rpki-client