Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/fd357df7-1d12-3bb8-83fa-af16700b3a9f.roa
File:                     fd357df7-1d12-3bb8-83fa-af16700b3a9f.roa (raw, json)
Hash identifier:          GZ5O3wy7CUk2+crrHrtRCmUB7eUi3eNeOcZwpFDzBYE=
Subject key identifier:   D1:95:77:BA:C9:FD:14:38:32:BE:E0:63:01:7B:B1:BF:98:4E:E3:32
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F43285848F4F6945D3B0331C14DD10A80
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/fd357df7-1d12-3bb8-83fa-af16700b3a9f.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     13984
IP address blocks:        216.213.102.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:94:5d:3b:03:31:c1:4d:d1:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=c20dc57d-1f76-4d05-9a0c-36fdea378e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:09:57:c2:70:87:af:2a:31:12:fe:a9:e3:
                    61:05:41:d2:f0:7a:ad:e3:ce:c4:36:ee:cf:ba:b1:
                    9f:7e:d3:a8:0c:7f:48:51:10:bc:ea:89:d9:df:14:
                    94:f5:ef:46:f7:cc:7a:46:82:cf:15:a7:a9:cc:5d:
                    8f:6c:0d:52:76:1c:e3:98:54:89:16:58:d3:24:12:
                    c0:16:40:8e:7d:ad:2b:97:12:57:ec:59:2f:fc:ce:
                    6a:97:43:7f:35:66:ed:7d:74:1b:4c:a8:08:ce:80:
                    c3:0a:91:2a:d3:d0:4f:a9:17:1a:10:81:ca:80:67:
                    ac:6c:07:7a:31:03:b6:03:3f:23:ec:b7:8a:a5:7b:
                    63:f4:a2:4b:03:8a:f2:eb:46:0e:e8:ea:4c:2d:7d:
                    e9:a3:ed:5d:72:41:bd:9f:4c:00:4c:13:39:d5:e5:
                    cb:03:f6:70:23:e5:4a:ef:c5:3c:50:71:c2:28:76:
                    1f:fd:5f:cb:16:cb:3f:27:1d:6f:58:ba:3d:51:2e:
                    4d:e4:74:2f:b7:ae:4c:78:19:eb:7c:76:78:6c:1d:
                    36:f1:eb:1c:28:73:06:ca:76:bb:1e:c3:70:88:5a:
                    03:55:60:35:7e:51:1d:ea:af:18:49:99:ac:40:48:
                    59:1b:9a:59:b4:05:e2:43:9a:63:a6:8f:66:b2:3f:
                    3e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:95:77:BA:C9:FD:14:38:32:BE:E0:63:01:7B:B1:BF:98:4E:E3:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/fd357df7-1d12-3bb8-83fa-af16700b3a9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:64:c1:90:64:54:6d:2a:8e:a3:43:33:44:88:b8:ac:cd:ef:
         17:b9:e8:86:88:2d:1b:bd:1d:b3:f8:1c:ac:df:85:1a:36:52:
         e8:dc:80:cb:c0:f7:9a:1c:0f:e7:ce:ee:75:52:1f:f6:2a:75:
         9c:82:eb:95:67:67:ff:d5:b8:b3:dc:e9:7d:29:08:8b:08:4b:
         3e:53:ee:a6:34:9f:f7:69:1a:e1:d3:e4:dc:ee:e9:b9:34:4c:
         e4:6f:d1:69:1a:72:87:7f:a4:e7:a9:4a:3a:0c:51:0c:89:8f:
         9e:82:e0:81:8b:fb:d5:b3:14:db:54:1a:97:e1:25:66:15:40:
         8d:05:7e:64:87:f5:1e:2a:3d:1a:4d:fd:83:27:ae:35:91:71:
         1d:42:43:91:07:28:46:18:93:23:8c:ae:0d:38:5b:f9:da:9d:
         2d:8b:25:53:26:04:bf:06:d0:38:a9:52:f8:10:82:50:5c:f3:
         b6:33:5b:ff:cd:9d:e2:8a:b2:30:bb:d9:85:bf:dd:90:cd:43:
         8a:22:a2:8a:a1:4c:dc:c0:e5:05:71:01:bd:06:a7:1c:dd:f5:
         2f:c6:88:62:31:67:bd:7c:8b:cb:36:f1:e8:ac:22:83:80:11:
         e4:17:4e:3e:64:8d:67:64:7c:ef:8a:7c:60:ba:25:52:ac:4e:
         8f:98:21:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:40 2025 by rpki-client