Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/d924e41a-9907-3a14-8ffd-e0cba482d05c.roa
File:                     d924e41a-9907-3a14-8ffd-e0cba482d05c.roa (raw, json)
Hash identifier:          RGKQHQvClBZHMVumR22uPm7Ha9F9SiEHl4hgnWMTshs=
Subject key identifier:   3B:B7:67:FE:32:2F:71:04:4E:20:9B:B1:FF:2E:3D:10:7C:D3:B5:98
Certificate issuer:       /CN=bd1b51cc-6012-4051-ac58-1514226329e4
Certificate serial:       010D0C9F432858487DA01958610C297DEC4CA600
Authority key identifier: 9F:34:A0:AA:FC:F1:DE:55:BA:2D:D5:AF:61:9F:1E:B4:57:D6:8A:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/d924e41a-9907-3a14-8ffd-e0cba482d05c.roa
Signing time:             Thu 09 Jan 2025 20:05:31 +0000
ROA not before:           Thu 09 Jan 2025 20:05:31 +0000
ROA not after:            Wed 09 Apr 2025 19:05:31 +0000
asID:                     21976
IP address blocks:        134.210.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7d:a0:19:58:61:0c:29:7d:ec:4c:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd1b51cc-6012-4051-ac58-1514226329e4
        Validity
            Not Before: Jan  9 20:05:31 2025 GMT
            Not After : Apr  9 19:05:31 2025 GMT
        Subject: CN=50847eb4-789e-409b-b071-e75444144f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:d0:92:db:52:d7:e0:d1:69:b5:f8:ea:7d:
                    25:3e:de:4f:d6:42:09:33:c7:c7:54:8f:c3:ab:a4:
                    c3:0c:ec:c9:f3:42:86:fd:07:93:34:4d:9f:f5:af:
                    66:bf:fb:45:c1:de:90:30:46:4e:43:21:91:f5:74:
                    b3:50:4b:fb:90:d6:13:2c:fe:ce:24:15:25:2b:59:
                    22:8a:27:24:41:51:7d:89:9f:f5:bd:8e:a8:a7:b9:
                    d0:77:f2:69:1d:c8:7a:03:dd:96:22:9b:04:87:3e:
                    16:ba:80:e8:ea:06:a9:51:74:1e:13:56:a8:9c:4e:
                    37:c9:69:7d:3c:e4:ab:26:99:de:b4:4b:20:de:a1:
                    58:13:e7:1e:f7:d7:68:50:90:f0:8c:dc:29:5d:fc:
                    12:fe:43:61:f1:63:d1:06:c0:ac:ab:20:77:c7:a2:
                    2e:9c:0f:3c:f7:18:46:44:aa:45:96:99:c6:4a:50:
                    44:b2:f6:b3:b6:ec:6e:13:19:0d:3b:4d:9f:ee:b1:
                    dc:ef:00:57:84:c9:f8:52:af:12:97:bd:c4:6b:c1:
                    d2:5d:89:e4:95:2b:dd:f3:14:2b:4d:30:1e:55:a0:
                    96:e2:37:2a:a4:a2:1d:60:c4:3b:22:1c:90:fb:49:
                    e8:07:16:2e:72:e9:4a:20:62:16:11:b3:4f:1d:17:
                    90:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B7:67:FE:32:2F:71:04:4E:20:9B:B1:FF:2E:3D:10:7C:D3:B5:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/d924e41a-9907-3a14-8ffd-e0cba482d05c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/bd1b51cc-6012-4051-ac58-1514226329e4.crl

            X509v3 Authority Key Identifier:
                keyid:9F:34:A0:AA:FC:F1:DE:55:BA:2D:D5:AF:61:9F:1E:B4:57:D6:8A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.210.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5b:18:1b:a0:ea:52:3c:67:26:61:96:ef:3b:16:eb:72:c3:
         96:d2:e8:69:66:41:35:44:e7:2c:8d:fa:86:b9:32:13:44:19:
         f1:01:03:b4:2f:9d:ba:54:e0:ab:2f:e5:26:4b:4a:71:cc:73:
         e3:de:99:6c:b4:5c:6b:ed:ec:27:52:6a:38:64:a5:7a:f1:9f:
         3a:5c:f0:1f:c3:82:ac:70:20:eb:68:19:7a:62:cc:c7:16:33:
         b4:6b:95:a9:fc:0e:c8:a8:d3:00:d4:9a:5c:52:2a:55:16:95:
         71:41:d5:5d:41:cd:61:c5:2f:ec:43:95:e1:9c:84:f9:d1:33:
         58:f5:37:48:d4:1c:dd:36:65:fc:28:b2:7a:a5:d3:ef:6d:09:
         2d:8a:ce:8c:e9:b1:2d:14:48:4b:15:ff:ba:39:bc:26:ea:93:
         b0:b3:3d:7a:47:2c:f1:53:b3:47:25:ad:3a:79:85:ff:34:82:
         2f:b5:b8:0e:87:05:2e:05:a5:00:02:ca:07:36:37:43:cf:80:
         84:ea:c6:20:d3:b6:24:30:3d:d7:4b:03:43:fa:37:34:86:c7:
         0d:0e:23:f9:82:6f:08:34:96:b1:29:4c:71:1a:a0:83:12:1a:
         da:75:09:1a:7a:79:06:dd:d4:0b:bf:3e:9c:16:08:9c:ac:15:
         c4:dc:fd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:54:46 2025 by rpki-client