Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/86f1eabc-ab18-3751-abf8-3d8feceef5b6.roa
File:                     86f1eabc-ab18-3751-abf8-3d8feceef5b6.roa (raw, json)
Hash identifier:          ovHUnIq2Sh9uq/Yh8btz1UDevVMkYYLMGPxBOgKCwOQ=
Subject key identifier:   86:CD:AF:44:E5:0C:B2:89:7D:E7:E9:4A:61:03:0D:E2:C1:D9:27:C8
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F432858491D71825AB872A4D98D910D00
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/86f1eabc-ab18-3751-abf8-3d8feceef5b6.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     19107
IP address blocks:        216.234.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:82:5a:b8:72:a4:d9:8d:91:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=4adc4993-0c27-495e-8079-79f820c3a0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:61:a2:85:90:0b:0a:fb:4b:0a:65:ec:ed:
                    7e:f6:41:ba:10:88:17:d1:2b:d4:65:cd:77:37:0b:
                    67:18:64:32:f3:e1:35:4c:51:27:4c:af:c4:a8:81:
                    7f:d3:ce:43:c3:dd:4f:8c:09:7d:66:39:79:71:a3:
                    fb:d7:92:d5:80:34:0c:3d:fa:30:00:9e:83:90:87:
                    81:82:c9:aa:1b:e1:ea:f1:aa:04:c4:f6:2f:5e:78:
                    ab:f3:6d:69:1f:7e:80:6a:79:f6:35:e3:a1:0f:6c:
                    e4:c7:e9:8d:dd:7f:8c:f9:e4:45:78:fc:6d:96:5e:
                    be:5f:9f:84:97:c3:f2:a5:97:f7:44:ad:64:88:a5:
                    c6:7f:85:8d:b6:7d:08:6e:37:bb:70:e1:3a:d0:0f:
                    bf:ac:01:cc:bf:4e:76:fb:09:09:b5:b4:ed:88:a0:
                    26:fd:18:a9:b2:f0:94:a4:ef:16:d0:c4:90:6e:e8:
                    e6:4f:07:10:75:5b:30:ea:59:b1:91:f0:e8:1f:ed:
                    c7:22:33:52:36:71:8f:5c:dc:ae:d3:3e:14:58:30:
                    1c:af:c4:a2:0e:83:83:4b:9d:af:9c:af:76:b6:6a:
                    f0:7d:0c:eb:31:0c:2e:69:60:fc:4a:a6:1b:0e:78:
                    97:ec:6c:f2:36:04:5a:8b:64:db:25:88:d0:b6:c5:
                    fb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CD:AF:44:E5:0C:B2:89:7D:E7:E9:4A:61:03:0D:E2:C1:D9:27:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/86f1eabc-ab18-3751-abf8-3d8feceef5b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b8:9c:ec:fe:62:3b:e3:23:a0:67:df:77:3d:8e:0b:17:84:
         8c:d5:c7:55:8c:fc:66:8b:a0:f1:c0:e0:09:24:91:a2:46:e0:
         7d:99:28:b1:cb:fb:96:11:57:fc:d5:45:d9:c5:5d:63:8a:c4:
         bc:2d:7f:0d:39:1b:ce:27:6e:69:e4:04:fb:0f:49:3e:4b:9b:
         b7:6c:5b:ce:4d:2b:97:98:8d:c2:78:fa:5b:d2:81:3b:2c:21:
         72:b3:46:07:2c:2f:a1:64:3b:a0:6c:20:de:e6:4e:19:b7:d6:
         b6:d7:e0:f4:1e:e0:f4:8c:b3:c5:8f:6f:ed:a6:99:59:73:a6:
         11:23:1e:6a:65:12:4a:52:22:3a:17:44:4b:ec:a1:a4:db:59:
         ed:2e:0d:e8:99:72:64:53:1a:3c:dc:db:23:62:e4:e5:56:84:
         be:86:f9:b0:dc:f1:c9:a4:79:6b:c3:28:6e:27:9b:89:52:db:
         bf:1d:d7:e4:aa:d5:b7:ca:e0:36:73:dd:cf:2b:c3:59:18:ca:
         71:d2:d4:e3:fd:6a:ba:db:01:04:3e:94:c6:66:1c:bc:ff:a1:
         9d:98:ff:8d:f2:50:7e:22:d9:6c:31:a5:5d:09:cf:2c:c7:48:
         89:ff:5c:9d:3f:2e:2e:3c:2b:4c:44:1c:87:d4:22:ff:15:b7:
         14:ce:4c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:52 2025 by rpki-client