Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/252678ac-8848-3d4e-bfeb-2c9f69233f63.roa
File:                     252678ac-8848-3d4e-bfeb-2c9f69233f63.roa (raw, json)
Hash identifier:          DwZSx1G79LTSTwpTO7sAcNa1vs4FIT/jvng5EttCm1E=
Subject key identifier:   37:24:E1:C8:F8:3A:63:B4:77:50:8A:23:B7:3C:6B:7F:5A:E2:FA:0D
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D703E4C22A479483CCB11AC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/252678ac-8848-3d4e-bfeb-2c9f69233f63.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        207.102.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d7:03:e4:c2:2a:47:94:83:cc:b1:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=ff2b7942-1424-4315-8031-9eb9e46fca81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:33:2a:6b:c4:ed:38:63:ad:c5:46:f9:b4:
                    df:60:af:35:58:31:08:63:71:96:b4:b1:8e:31:d8:
                    ad:31:c7:d5:c9:fd:53:52:8c:ce:42:ab:62:e8:95:
                    d1:42:5e:04:3c:34:9a:14:c6:2b:65:be:fa:35:14:
                    d0:4f:cf:c8:16:a1:28:af:52:7e:0b:d8:26:c2:26:
                    75:d0:3b:24:06:13:2e:22:10:ae:0f:ff:b6:2b:64:
                    70:ab:bd:1f:a8:c0:74:d9:cd:05:c1:61:02:03:9d:
                    d1:54:37:b7:43:b4:55:2f:cf:36:fe:e9:d3:72:28:
                    8d:19:86:98:00:42:c6:59:62:cc:e8:bc:3e:d2:95:
                    c5:29:22:85:ca:25:13:9c:f2:38:d4:03:e3:5c:30:
                    bc:79:6a:bb:a3:ae:6d:b5:c0:db:88:d7:62:a6:93:
                    54:aa:15:f5:d4:2c:7b:bc:32:cb:e8:1b:ce:44:83:
                    fa:8b:29:bb:3d:05:f5:a7:55:01:e8:3c:ae:09:61:
                    05:0b:37:e6:b7:43:d5:8d:9b:10:bd:fc:66:47:c8:
                    7c:f7:c8:e7:84:71:4b:16:f0:c7:a5:c4:71:a8:2a:
                    b1:2d:4f:5d:81:13:ae:12:f2:2d:5d:3d:26:51:e8:
                    75:55:ec:07:12:38:01:ed:af:bd:63:5b:4d:35:db:
                    c7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:24:E1:C8:F8:3A:63:B4:77:50:8A:23:B7:3C:6B:7F:5A:E2:FA:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/252678ac-8848-3d4e-bfeb-2c9f69233f63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:49:05:51:3c:55:19:de:8d:d9:e6:d2:6f:40:e3:e6:ce:50:
         f9:52:f3:91:19:82:24:3e:4c:85:b6:7d:94:32:c7:19:43:24:
         c9:b0:3b:eb:a5:c1:e0:54:ca:ba:06:79:e7:1f:33:e6:e0:fe:
         1d:cb:c0:55:b2:5e:0f:99:83:2b:8d:90:a2:71:64:e8:78:b3:
         86:79:7e:84:2f:58:9a:5a:e1:1c:70:4d:9c:de:e5:9f:92:f9:
         ae:94:a2:05:28:b5:30:0e:8f:04:df:64:a9:fa:51:0e:05:3d:
         21:96:4e:87:a6:01:82:99:f6:25:ef:7f:60:a3:65:62:1d:33:
         9b:44:ec:61:dd:10:10:42:e6:c8:25:30:c0:ca:da:f0:6c:c0:
         f1:ed:47:cf:63:6c:44:00:f1:d0:49:26:ac:3f:29:a9:66:92:
         3b:a9:3c:13:e5:6b:c1:4d:41:63:5d:d9:f6:a3:35:19:66:bb:
         2b:80:68:49:e7:37:2f:1e:f3:fd:a4:8f:12:11:82:ec:26:d2:
         69:9d:a1:97:50:54:46:3f:3e:1b:45:ee:cd:ef:0f:8c:77:52:
         01:b6:66:ac:e0:13:38:78:a3:e5:1f:29:e9:6c:95:f4:78:4d:
         8a:b7:a8:05:68:0f:c5:06:48:2a:cb:28:56:66:68:95:41:5f:
         17:b7:6f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:52 2025 by rpki-client