Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7bf96e67-c2fb-3e4f-a4d2-3fdc81859287.roa
File:                     7bf96e67-c2fb-3e4f-a4d2-3fdc81859287.roa (raw, json)
Hash identifier:          GknDD4ijAUKv9futhlSZcUEvFO/zLFQodZSQRV7/QWc=
Subject key identifier:   84:1D:90:70:EA:7D:BE:E5:BD:0E:4A:E5:38:F4:95:6E:83:66:CA:42
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285848C5820F541AD51E637411BB00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7bf96e67-c2fb-3e4f-a4d2-3fdc81859287.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        207.126.144.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:0f:54:1a:d5:1e:63:74:11:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=78438164-8585-477a-b3c0-6bd1d7578a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:3c:1f:8b:11:d9:76:68:95:d5:e2:65:03:
                    c5:e8:9a:f7:03:89:bf:37:e5:0f:f4:b3:a8:37:27:
                    43:e5:96:c8:44:2b:44:e9:df:28:50:ab:ec:d9:61:
                    26:3d:a2:60:6a:4d:d3:ff:e5:0f:d6:3d:77:46:18:
                    8f:58:9a:fe:de:7b:e3:a3:8c:ae:9f:c5:6e:53:91:
                    a5:a3:53:b0:3f:c0:45:c1:fb:aa:5d:40:e8:03:88:
                    3f:66:5a:d7:9d:16:1d:29:ce:1d:ee:f6:2c:4b:94:
                    60:93:4f:e7:a5:cd:2c:34:18:25:87:6d:ac:b7:8f:
                    41:24:85:f5:46:68:1c:f1:97:20:09:69:a5:c4:59:
                    de:75:46:83:7e:c8:c3:42:10:9b:90:47:6b:49:71:
                    0b:9a:0f:24:24:d6:67:23:8c:85:dc:cd:19:56:fe:
                    be:14:81:04:23:01:44:87:8e:dd:3e:9b:f4:7f:84:
                    13:95:fc:d1:4b:41:c5:c6:2f:56:b8:b4:a9:38:46:
                    27:9b:ef:cc:82:97:3b:ae:d3:a0:c0:2b:9f:da:35:
                    7c:68:b7:49:50:cb:c3:01:ac:f3:18:0e:20:b6:d3:
                    5b:6f:02:4a:59:31:a7:36:d4:24:df:30:6d:3d:37:
                    00:8f:98:10:49:6f:25:e0:d1:a6:27:27:10:0a:45:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1D:90:70:EA:7D:BE:E5:BD:0E:4A:E5:38:F4:95:6E:83:66:CA:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7bf96e67-c2fb-3e4f-a4d2-3fdc81859287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c7:29:4d:c2:45:9c:83:ae:e9:03:24:84:7b:8f:05:a6:01:
         5e:e4:9d:27:af:fa:dc:d0:c3:55:7d:26:0b:fe:98:7f:a2:a3:
         90:32:22:ff:ac:9c:7a:98:e4:5f:71:45:59:24:61:04:94:6d:
         58:1c:de:fe:85:83:ce:0d:4c:96:0f:ef:f9:cc:ab:86:7c:35:
         7f:f2:68:6f:70:1c:26:46:19:76:24:bf:d0:b5:58:43:3d:5e:
         3c:c1:99:11:9b:01:c2:96:71:5d:62:82:08:33:71:7f:65:24:
         dd:4a:5a:97:5f:0b:7c:51:a5:50:6d:74:7d:55:6d:e8:da:49:
         95:b0:a1:01:ff:a1:ed:b8:eb:a3:d9:c7:8f:c3:57:b1:21:67:
         bc:99:c7:db:95:5a:31:ae:21:f1:06:71:30:17:f9:a1:ad:32:
         bc:ed:2c:31:0d:3d:43:1e:e1:b1:21:34:8a:6f:75:91:ca:d9:
         94:a6:b1:93:1e:57:82:ef:3a:25:58:34:4f:74:d1:32:b5:d9:
         99:58:75:3e:f1:84:38:cd:d4:1b:fa:ac:e0:df:5b:bf:53:61:
         fc:04:3a:00:81:43:69:b0:01:a3:f0:5c:fc:a3:e5:9a:2d:0f:
         1f:3d:db:3e:f5:ad:e5:4d:db:ba:0d:76:eb:56:b1:54:ac:1e:
         58:b8:26:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:26:16 2025 by rpki-client