Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/f021a27e-0d4a-372f-b416-5534c39efebb.roa
File:                     f021a27e-0d4a-372f-b416-5534c39efebb.roa (raw, json)
Hash identifier:          U4ZzAbrdwHa8O1+fVAdLb738q/b1v5W7+NttmF7+hNs=
Subject key identifier:   CE:48:38:58:4D:1D:AD:56:6C:B4:38:78:A3:1A:1E:C0:F0:52:7D:77
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F43285848EF61519326B721AC0A46B4C0
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/f021a27e-0d4a-372f-b416-5534c39efebb.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        207.230.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:51:93:26:b7:21:ac:0a:46:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=5316427f-e739-4a97-8f61-e0f6271445d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:97:10:c3:02:52:32:ce:d4:20:79:cf:eb:27:
                    3f:b7:f5:fe:10:cc:83:65:76:04:e1:3b:0e:51:d2:
                    1a:56:df:b0:9f:7c:52:99:de:4a:b9:9f:38:9b:aa:
                    ea:b2:76:5e:a5:29:70:46:06:8a:77:14:86:20:33:
                    cc:4d:b4:6d:d5:a4:87:d5:54:ca:d1:7e:91:57:01:
                    52:41:1f:9f:8c:61:f7:3d:01:2f:81:9b:74:54:08:
                    9c:8b:58:fd:7f:a7:b5:50:40:11:a6:bd:73:fb:17:
                    44:27:f9:0c:17:86:be:30:c0:a3:bb:8f:fe:1f:08:
                    29:bc:9f:55:87:ca:26:5d:a7:59:9a:9c:72:68:8e:
                    be:b5:9d:a9:09:2d:bd:c3:06:da:09:b5:82:c6:d2:
                    01:ac:6f:07:b9:d4:4b:43:a4:7b:8b:ae:a6:56:d5:
                    51:38:1e:b1:a6:ce:28:4e:30:a0:28:61:a5:2e:8c:
                    25:b1:26:7c:6a:11:1e:ee:aa:c2:ce:d3:e6:84:30:
                    79:7a:38:13:b8:23:35:df:27:fc:df:65:71:5e:3d:
                    2f:a1:b4:20:6d:1f:f1:3c:03:21:c4:c8:b7:e0:1d:
                    6f:31:97:37:62:03:43:df:76:19:a2:0d:13:73:3b:
                    2b:cb:fa:31:dc:bf:be:a9:d4:91:af:d3:e5:b1:85:
                    bf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:48:38:58:4D:1D:AD:56:6C:B4:38:78:A3:1A:1E:C0:F0:52:7D:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/f021a27e-0d4a-372f-b416-5534c39efebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:0c:aa:a1:17:9a:db:f8:a9:77:e8:ac:c7:f7:37:bf:8c:05:
         08:0f:6e:52:88:d7:96:7a:dd:5d:2f:b4:6c:ff:95:3f:27:5d:
         62:ca:ea:49:d9:02:91:d4:63:2e:50:d6:a3:24:39:7b:ee:62:
         3a:34:f1:78:8e:ad:99:b5:85:0a:d0:86:32:f9:a7:c6:51:15:
         ea:f3:c6:f9:e4:7f:b9:c7:31:fd:c0:26:7b:cf:00:87:a3:20:
         8f:04:c6:5a:78:6e:1d:ca:ff:d2:56:98:17:c4:0c:7c:08:ec:
         59:97:67:78:31:52:39:8b:f0:75:10:b4:04:12:25:49:f1:be:
         96:56:56:73:62:08:5a:77:4a:ab:36:38:3c:08:04:b1:e0:8e:
         11:13:e1:0f:ab:58:74:c2:80:e3:29:4a:86:27:de:29:99:ae:
         bc:2f:c9:ec:de:66:19:22:43:1d:e5:00:6a:57:0d:84:bf:c8:
         49:fc:ea:2b:5e:4f:fa:0f:4f:16:b5:4f:31:c4:b9:90:32:de:
         96:c7:30:bb:ae:7b:4b:fb:d2:7d:41:0c:e3:e9:58:07:72:f8:
         03:40:f3:94:25:2c:be:b2:3c:fb:e1:d0:1e:4b:0d:c2:ed:68:
         12:5d:7a:8a:5e:1d:08:86:70:26:3c:43:b4:70:0d:bc:fb:93:
         a2:eb:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:24 2025 by rpki-client