Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/efa85352-f35c-30e0-843c-54ae2ccbec9a.roa
File:                     efa85352-f35c-30e0-843c-54ae2ccbec9a.roa (raw, json)
Hash identifier:          IA40EUCQUKhqDkO8rNzeFWhaLuKoNFK4GJtBGp7IbCI=
Subject key identifier:   8C:0F:53:1E:FC:45:6A:3B:6D:60:13:10:77:47:9D:F3:9D:EC:3B:A1
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F43285849350E9529AFCA4AD9D9E28060
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/efa85352-f35c-30e0-843c-54ae2ccbec9a.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     56274
IP address blocks:        198.208.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:95:29:af:ca:4a:d9:d9:e2:80:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=6fd22214-49c0-4991-bf10-8d99e427b236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8b:ed:19:77:70:86:65:9f:d6:77:7f:16:85:
                    45:67:c4:52:36:93:5c:5f:4f:d3:65:ec:79:02:b6:
                    6c:75:d2:10:08:b5:e5:e2:28:00:3f:0c:28:2c:9f:
                    d7:77:d8:8f:9d:ca:76:c1:a7:41:d5:02:b2:ed:23:
                    e4:21:3d:1f:e8:9c:89:e5:13:e6:4d:ef:dc:24:b1:
                    02:65:0b:06:38:6b:3e:c6:9b:59:ce:6c:87:22:07:
                    26:d1:56:d8:0c:80:10:b7:90:dc:ba:e2:d4:50:9f:
                    51:8d:dd:50:17:9f:f5:de:0b:27:ad:f4:e5:56:cd:
                    2c:ba:b6:fd:5e:8b:d4:37:74:58:55:61:66:1b:fb:
                    ae:19:28:80:69:76:86:30:02:32:8a:39:07:96:dc:
                    fa:14:51:79:0a:c8:a8:70:63:80:cb:87:b9:7f:8f:
                    1d:81:38:5b:58:3f:46:c7:21:5d:7b:9f:8e:11:0f:
                    35:a9:d7:c3:c0:db:bc:e6:5c:e0:ee:89:9f:1b:33:
                    7c:8b:ce:37:4d:78:67:14:c6:e5:54:21:3d:c2:fb:
                    9d:cb:e4:4e:10:26:c0:24:0c:f5:8a:92:4a:09:76:
                    f3:68:c5:d3:b4:d6:f5:eb:1a:1d:3d:72:df:1a:5f:
                    a9:c1:4d:54:c9:ee:58:d8:ab:09:37:b8:69:eb:21:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0F:53:1E:FC:45:6A:3B:6D:60:13:10:77:47:9D:F3:9D:EC:3B:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/efa85352-f35c-30e0-843c-54ae2ccbec9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:21:94:7c:7e:61:99:b1:ad:c2:6c:72:2a:29:79:c1:b6:6b:
         bb:f1:3f:a7:7b:93:36:35:e6:26:48:c4:03:bf:73:d8:b4:bb:
         7c:6b:4e:d6:75:e8:6b:ea:b5:c3:cf:c2:13:ce:d2:be:da:2f:
         e1:c5:58:87:5e:e5:42:99:09:a8:9b:6b:91:3c:d0:02:23:66:
         da:88:7b:cc:a5:56:97:69:b5:03:49:13:05:91:00:f6:eb:28:
         c6:4a:b4:b5:66:fc:48:bd:ad:0c:e7:29:96:9c:d3:ef:91:b7:
         e2:9c:56:e4:41:43:39:1a:1b:58:c2:c5:fa:bc:16:05:6b:bc:
         98:85:96:ae:b5:c1:e8:80:ac:21:43:24:ff:94:d2:3c:2d:1b:
         b6:e9:95:ff:76:3e:5a:6d:16:c6:02:5a:13:15:3e:a8:cb:66:
         bb:0d:a8:fe:40:00:1c:ca:c5:29:17:1b:af:86:ab:62:0c:a9:
         e1:f1:08:2a:ea:4f:49:67:22:53:f0:7f:2f:3d:35:0b:a0:cd:
         21:95:f6:f8:94:e2:85:71:9e:cf:d4:e1:b5:7e:7d:6c:55:92:
         c6:e5:79:7e:35:bc:83:5f:0d:01:54:79:38:b8:0d:17:f0:d4:
         ed:60:2c:e1:80:d6:aa:16:9b:7f:59:36:ea:ef:7d:5b:8b:d0:
         00:d1:16:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:28 2025 by rpki-client