Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c2c6782c-0e2a-365c-b4b2-b9f3912498fa.roa
File:                     c2c6782c-0e2a-365c-b4b2-b9f3912498fa.roa (raw, json)
Hash identifier:          Nxt/zmbCV8hNHISmdyTHPYnbQ0RO9Pg/LKrP71GAW5A=
Subject key identifier:   D4:81:8D:1B:D7:BC:84:CC:69:D2:7A:07:77:53:DE:79:0B:E1:3F:74
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848F9268006FD745F501997D680
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c2c6782c-0e2a-365c-b4b2-b9f3912498fa.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     393698
IP address blocks:        207.126.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:80:06:fd:74:5f:50:19:97:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=3d4cb39c-81b9-4699-9282-d6df5e5c8625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:10:2e:b1:58:94:20:86:bc:51:44:6f:f7:4c:
                    62:ff:86:b3:2a:7c:74:18:af:8e:33:4b:31:12:b2:
                    9c:2c:60:ae:00:46:9f:44:37:30:80:fa:fe:f6:19:
                    54:35:b1:59:81:01:b9:1c:21:4d:87:4f:28:58:28:
                    2f:1a:2b:3f:45:56:66:c0:30:e7:5d:34:c6:24:53:
                    43:cb:1e:9f:cc:5c:46:d1:00:44:01:93:78:f6:eb:
                    e6:4c:3c:14:62:66:15:f5:a7:e0:3a:07:55:07:06:
                    14:59:4e:00:88:6f:63:30:e1:48:2e:87:cd:45:c1:
                    a5:a6:72:7f:c2:02:d3:86:8f:1d:13:f2:c6:ef:39:
                    12:43:7d:bd:78:30:4c:8a:9d:32:4a:3d:63:ab:08:
                    96:9e:da:4d:eb:57:02:71:01:37:fe:4d:8d:e2:d6:
                    57:62:f5:22:fa:65:e9:ae:92:3c:cf:6f:fa:95:fe:
                    79:e3:12:74:be:2f:57:2f:31:ba:ed:36:c4:f2:58:
                    79:a5:14:40:e6:0b:97:93:28:81:4b:99:1c:45:10:
                    7a:80:52:96:49:f4:f6:76:ab:fc:71:a3:86:87:7d:
                    a2:70:73:3d:8d:16:26:0c:cc:35:79:68:67:81:20:
                    79:29:52:2a:fb:77:33:20:94:8d:86:df:ab:90:43:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:81:8D:1B:D7:BC:84:CC:69:D2:7A:07:77:53:DE:79:0B:E1:3F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c2c6782c-0e2a-365c-b4b2-b9f3912498fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:50:ce:0b:d1:94:50:8b:97:ec:86:cc:75:49:e7:53:b7:07:
         e1:c6:f6:88:32:ca:28:68:4b:ee:0f:cf:75:eb:96:fa:3f:47:
         3c:80:97:ea:94:c5:11:8f:20:e6:67:22:a7:59:36:0c:1c:87:
         17:bd:34:eb:f8:5f:0d:89:c8:3c:2c:0c:0e:0e:71:89:d4:1b:
         1f:db:c5:3a:09:d9:5e:02:a0:f8:e2:36:4d:4e:49:91:e2:12:
         3b:59:fa:5d:85:d8:11:71:07:d6:4b:a9:5d:ee:e4:f0:5c:3a:
         ed:b4:4a:1c:4b:5b:21:01:e4:73:2e:cd:c5:5d:15:cb:b4:1d:
         c7:8f:2a:ac:5d:a8:70:aa:0d:25:4f:c6:4c:ca:5c:56:4b:d0:
         67:b1:bd:3f:19:f9:29:0d:82:37:ce:a7:65:dc:9f:19:8a:fa:
         51:49:27:c2:64:9b:11:d6:0b:82:e9:5e:2a:32:3b:c6:f2:97:
         9b:68:3a:43:17:a3:b9:0a:da:f6:a8:44:d2:8c:72:ad:8f:ae:
         b8:c2:e2:9f:08:67:58:3d:84:ee:ad:21:4a:fb:fd:49:e3:30:
         88:c9:97:32:73:7a:70:82:aa:f1:f2:f2:1e:d9:00:df:15:bd:
         9c:45:d4:d4:54:1c:41:d6:30:f7:65:45:b9:96:0e:14:91:e3:
         0c:81:e6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:59:34 2025 by rpki-client