Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8187a495-0953-338c-9ccc-6f0312c102d9.roa
File:                     8187a495-0953-338c-9ccc-6f0312c102d9.roa (raw, json)
Hash identifier:          r6IwQtF+6pxfoef9tLlFumE/wDGLyrzQWEektOHQD9s=
Subject key identifier:   ED:83:D4:03:27:FD:62:E3:9B:F2:42:C0:B0:96:8F:3A:F6:54:F5:D3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1530E641429EF189DEDA0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8187a495-0953-338c-9ccc-6f0312c102d9.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20001
IP address blocks:        76.178.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:53:0e:64:14:29:ef:18:9d:ed:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=a27f665c-ff34-45c5-aefa-03584c2f8fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:18:36:99:81:a6:c6:79:15:04:e4:04:d4:33:
                    51:2d:68:5a:f5:39:da:a1:11:d5:20:a6:73:10:c8:
                    30:d7:ad:a9:46:eb:92:11:fb:03:0d:91:c9:d1:9a:
                    a0:d8:87:38:3d:f0:ac:db:0e:5d:6c:de:e5:e4:21:
                    f0:f3:5b:57:15:41:1b:a8:cf:b3:20:9d:ac:18:5f:
                    94:f2:b4:64:56:10:ee:9e:68:d6:50:6f:c4:37:a4:
                    eb:d8:d6:f9:7d:dc:c8:28:67:e0:2c:a1:f1:05:71:
                    59:ba:4a:71:0d:67:b2:e0:ac:fd:94:11:55:65:29:
                    9b:ce:44:f3:2c:c2:f1:2d:20:5b:f9:07:3f:b6:a3:
                    61:9c:10:c3:f5:25:77:92:fd:f5:0d:87:73:f1:e2:
                    5d:e3:e2:6c:bb:8c:15:dd:4f:d7:e5:b7:a3:c7:90:
                    ca:5b:6c:34:c5:7d:fb:51:c5:92:7a:a6:30:ad:70:
                    1e:d0:44:b4:26:3a:8d:96:81:08:fb:ef:69:a6:17:
                    09:1d:5c:7a:07:f8:27:e7:56:c4:f9:e6:a0:fb:23:
                    03:93:1c:e6:ed:88:21:8b:fe:fa:40:f4:56:13:27:
                    dd:af:ec:c6:32:9f:8e:1e:ea:b3:f8:06:be:de:83:
                    72:82:77:c1:d5:75:d0:b6:2a:bd:54:77:73:f7:78:
                    14:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:83:D4:03:27:FD:62:E3:9B:F2:42:C0:B0:96:8F:3A:F6:54:F5:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8187a495-0953-338c-9ccc-6f0312c102d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.178.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a6:aa:bc:96:3f:c3:01:ba:d6:67:97:33:1f:6a:25:04:cd:
         2f:b3:22:fc:ec:c8:83:c9:36:30:00:16:2d:a6:a2:86:b2:26:
         0e:ee:d8:19:e9:a6:ad:fd:ef:bd:65:b4:c3:eb:aa:fa:d3:e9:
         a7:c3:ac:2e:f2:bc:1b:13:ee:84:c3:a9:df:0c:d3:6d:52:68:
         52:47:af:14:a5:79:87:e4:81:16:68:cb:d5:4f:28:5a:5d:60:
         20:9e:59:10:d4:fa:9d:db:86:34:54:19:bb:b8:3f:7a:5a:97:
         ca:8c:93:10:9a:1e:08:e6:28:4b:fe:28:78:f2:15:8f:17:23:
         cf:5d:68:a6:5a:73:e2:ce:04:ba:64:23:3d:49:5d:8d:91:80:
         5d:c3:32:0f:6b:ee:a1:fd:fe:75:a6:7d:e7:d3:41:5b:d2:e0:
         b0:bd:64:01:01:94:e9:60:42:a8:89:cb:00:bc:14:99:95:16:
         70:fe:04:3b:35:bb:69:c3:dc:7a:2b:cb:61:60:4b:94:f1:41:
         f1:c9:69:05:71:9c:a3:e8:a0:c2:2f:e3:48:7d:21:98:2a:71:
         c9:9c:e0:73:31:d4:17:a1:8a:c5:16:00:03:9b:21:22:8e:eb:
         9f:13:f2:4b:ea:b0:4a:c0:53:b8:9d:ce:f9:6a:76:b2:3b:60:
         1e:0f:96:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:45 2025 by rpki-client