Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/e84dde21-1b41-318f-b19c-d586147f4d6e.roa
File:                     e84dde21-1b41-318f-b19c-d586147f4d6e.roa (raw, json)
Hash identifier:          WEfOsJ3fTVnNxsUccIuPi6YA1lyAg0eal6X90VteX5o=
Subject key identifier:   FD:12:48:A9:F5:B3:A4:89:0B:B6:E1:3D:25:F2:48:5C:E5:AC:73:83
Certificate issuer:       /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial:       010D0C9F432858481B6CBD8056D8A77648CC9A80
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/e84dde21-1b41-318f-b19c-d586147f4d6e.roa
Signing time:             Thu 05 Dec 2024 15:52:49 +0000
ROA not before:           Thu 05 Dec 2024 15:52:49 +0000
ROA not after:            Wed 05 Mar 2025 15:52:49 +0000
asID:                     376
IP address blocks:        132.213.211.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:6c:bd:80:56:d8:a7:76:48:cc:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
        Validity
            Not Before: Dec  5 15:52:49 2024 GMT
            Not After : Mar  5 15:52:49 2025 GMT
        Subject: CN=6e70a31c-e86a-4ec7-ba41-a15e3e810bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:5e:db:e0:a8:da:9f:0d:b2:bf:78:db:8b:
                    04:ff:fb:a7:92:8d:9f:87:f3:07:bc:8d:8d:a6:b5:
                    9b:e8:47:7b:96:31:cb:79:7d:6c:63:82:b1:a1:1a:
                    50:4f:06:55:e6:ca:57:e3:7f:af:74:ff:33:a8:b2:
                    e0:61:99:36:20:5f:5a:53:54:4b:b3:2f:2e:9f:c6:
                    53:f7:b0:2a:16:74:59:23:7b:81:b6:6a:e0:e2:10:
                    9e:5e:d6:5b:ed:4c:a2:e4:dd:a8:7e:d5:15:3d:48:
                    56:23:dd:49:16:fc:42:4c:23:e6:78:7a:67:43:c5:
                    53:d8:29:00:94:72:87:55:f6:30:c6:7a:42:99:51:
                    de:72:0d:c9:bd:3d:fd:65:e8:48:0a:91:17:78:00:
                    ad:fa:26:eb:1f:49:f5:3b:0c:36:9c:8d:88:29:75:
                    09:a4:7f:35:b2:26:dc:94:0a:80:c3:e3:1b:02:84:
                    b1:8c:1c:14:a6:e1:8a:c5:b7:e5:56:41:37:e1:d9:
                    fd:3e:db:9e:f1:ad:93:7e:92:27:f0:9d:7f:fb:4e:
                    06:46:05:82:28:d0:84:f7:f2:6e:cb:b7:0f:48:b9:
                    b0:88:74:70:07:7a:5f:3b:dd:fa:bf:01:c6:60:a2:
                    d5:bd:11:80:74:25:b8:1a:59:3a:fd:6e:ae:20:28:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:12:48:A9:F5:B3:A4:89:0B:B6:E1:3D:25:F2:48:5C:E5:AC:73:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/e84dde21-1b41-318f-b19c-d586147f4d6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl

            X509v3 Authority Key Identifier:
                keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.213.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:10:6a:ed:a2:14:db:6f:d9:dd:a9:1f:ef:a5:9d:8f:ca:2e:
         27:ff:05:26:b4:5e:38:7e:63:92:87:bb:30:e3:49:86:a1:4e:
         3d:58:6d:53:bc:e7:7c:10:8b:c1:5e:a3:09:a5:65:63:20:cf:
         bc:b9:6f:ff:19:21:d6:80:e6:0d:83:75:68:18:c8:e5:17:a1:
         58:7f:e0:36:cb:28:25:0f:22:90:87:13:28:5c:55:e2:93:c4:
         b0:09:bf:25:cd:98:0e:8a:b2:37:fe:ab:f5:82:c1:f1:7b:1f:
         c3:08:05:af:21:00:e9:a9:d9:ab:8b:60:75:92:5d:f8:54:40:
         d9:b3:da:c8:a0:ab:03:cd:d5:b0:06:1a:a1:f1:93:4c:8b:a3:
         bf:95:ec:27:36:7a:26:b8:7e:ef:6f:c3:c7:95:50:90:5c:3f:
         d7:e1:47:4d:41:83:1b:a1:a3:0d:ad:83:e1:fc:09:55:f9:d7:
         fb:3b:df:bc:f3:df:71:53:b9:72:24:a8:ff:4d:52:9a:c7:92:
         42:60:20:80:83:31:b5:eb:c4:89:28:59:b1:d1:c2:f8:b8:61:
         dd:cf:46:25:ae:0a:e3:41:77:ba:69:fe:37:7d:d3:76:3d:5c:
         dd:19:06:aa:4e:10:70:f5:53:ea:7d:21:1c:fa:0a:74:ca:d8:
         76:9b:da:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:05 2025 by rpki-client