Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/402d1434-f06e-3831-9fd6-20002d1cb7ab.roa
File:                     402d1434-f06e-3831-9fd6-20002d1cb7ab.roa (raw, json)
Hash identifier:          UaoiwnMNrGzQLU5pMavs+5KuTfz7lrjmYrNinlQALu4=
Subject key identifier:   70:EE:78:9D:C0:E5:2E:BE:5D:A8:33:85:2B:47:09:B1:D4:45:62:BE
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858487CEB3B7316EC380CFBCECDC0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/402d1434-f06e-3831-9fd6-20002d1cb7ab.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     393249
IP address blocks:        206.87.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:3b:73:16:ec:38:0c:fb:ce:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=a518e695-a167-44f5-aeeb-cb8a8e2829ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:0d:6e:f8:5a:bb:bc:5f:35:cd:ae:fb:69:
                    90:d6:58:96:c3:19:b6:28:b4:0e:69:0b:5e:a6:b1:
                    94:ef:8e:66:1e:6d:f4:77:47:3f:4f:e1:83:de:cc:
                    27:50:39:17:98:95:72:fb:ac:8c:d4:c6:b4:62:c3:
                    b9:90:5d:be:b2:57:42:47:de:36:11:7b:8c:09:43:
                    f8:10:8c:ee:8c:63:b8:98:f1:50:1d:ca:a8:ff:83:
                    6f:23:e0:20:e4:02:21:00:40:5e:62:e7:5a:1a:0d:
                    3e:95:a1:de:19:a2:d6:f9:b7:6a:c3:28:08:eb:37:
                    c4:68:2d:5c:03:fa:e1:34:40:6e:c2:89:63:61:ae:
                    57:2b:c8:73:c3:ed:97:35:49:1f:0a:fb:89:55:5d:
                    5d:36:3b:f8:d0:3b:d1:6d:86:33:63:74:bb:85:1e:
                    29:82:91:04:81:1c:46:fe:f2:f3:3d:fe:bb:ef:b4:
                    6d:d9:52:ea:78:ee:1f:2b:0d:fc:de:15:ba:f2:30:
                    af:02:f5:8a:85:65:96:7e:9d:b1:88:c8:5f:df:21:
                    92:fc:79:fe:80:1f:69:d9:86:36:96:ee:6f:08:ff:
                    9e:ce:34:c6:e6:36:2c:dc:f2:dd:9c:b2:c0:10:2e:
                    f4:88:5f:a0:36:c4:f2:a8:d4:c3:65:44:76:d8:89:
                    e3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EE:78:9D:C0:E5:2E:BE:5D:A8:33:85:2B:47:09:B1:D4:45:62:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/402d1434-f06e-3831-9fd6-20002d1cb7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.87.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4a:b5:67:88:ff:ba:5e:0b:3a:08:90:e0:fd:bd:64:b2:7c:
         96:ec:be:c0:12:b8:87:a0:60:b2:86:f0:dc:3a:ae:28:45:7c:
         25:ad:88:9d:b1:8c:c9:9b:32:09:0b:1d:2a:4f:43:52:2b:85:
         9c:61:ae:e6:51:89:d4:bf:65:1f:93:bf:14:1e:e5:3f:24:39:
         ce:ee:67:a8:1e:51:c5:6e:4d:22:a9:d8:1b:b9:a6:b0:af:b6:
         fa:77:ad:31:68:f2:23:f9:b1:81:43:c7:01:9c:fc:fb:32:6e:
         84:4f:e2:7c:f0:47:af:0a:2f:cd:78:33:aa:de:44:88:9f:68:
         fd:6a:b6:27:c3:83:e5:f9:cf:00:eb:b9:ac:bb:0c:50:cd:c6:
         b0:38:6d:ac:30:88:6f:34:f3:ba:09:35:9e:f8:36:31:22:79:
         1d:a6:48:6a:c3:cb:02:d5:95:c3:37:5e:f3:3c:7c:17:c5:c0:
         fd:e9:e2:e5:94:6a:0d:67:66:a6:8e:be:6f:fd:58:80:b7:fc:
         e8:30:05:e7:36:1e:c9:42:8a:3b:8a:55:52:bb:c6:2a:73:86:
         f7:e0:d1:8e:0c:be:f6:ba:8a:70:44:f0:70:18:d9:0c:20:9f:
         8d:8d:38:a6:c0:96:05:47:bd:2f:65:be:d4:8b:a9:39:84:69:
         0a:70:10:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:41 2025 by rpki-client