Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5b1df215-3a15-300d-8c51-08b60db4667a.roa
File:                     5b1df215-3a15-300d-8c51-08b60db4667a.roa (raw, json)
Hash identifier:          9Kh4j2/jT68HpAjHLfgof3YcujwXpmwEEifQxIUFnZE=
Subject key identifier:   E3:85:66:D3:3F:9D:01:F4:1C:7F:3C:B2:52:26:41:90:88:01:D8:E1
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285848E59BD02BA4D4AF296DD2E200
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5b1df215-3a15-300d-8c51-08b60db4667a.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     16417
IP address blocks:        207.54.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:d0:2b:a4:d4:af:29:6d:d2:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=044ed14f-c073-4ca6-a0c3-17273c3a42a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:65:49:73:d4:ad:60:32:b1:85:94:21:e1:
                    7a:55:66:53:61:51:4c:b7:d1:9f:1c:97:91:f2:c9:
                    73:42:b9:0f:e3:b7:3f:20:25:f8:57:20:c3:8e:ec:
                    57:0e:ca:26:17:81:25:ce:3f:c0:05:40:83:50:da:
                    41:79:7b:1d:8d:00:19:e0:b7:02:3f:80:58:64:b2:
                    22:d3:a2:1c:ab:b0:2c:5d:b4:0f:50:38:ee:2e:ff:
                    f5:79:24:8c:4a:ee:82:79:94:17:aa:17:02:61:68:
                    bb:e4:d4:9d:51:10:89:b4:6a:02:88:db:64:b7:30:
                    b9:9b:11:86:24:c6:15:66:21:c1:be:83:0b:e7:87:
                    ff:2d:03:2a:3b:d2:ff:e3:47:14:56:41:de:64:63:
                    0a:12:ff:b0:0f:5a:81:e0:77:36:74:da:0c:56:bf:
                    89:df:ba:df:9f:6c:28:12:2a:10:2b:88:c8:7a:27:
                    83:3f:9e:9d:2f:c8:1f:2c:73:1d:c0:22:cd:0b:79:
                    10:2a:55:bc:da:fd:09:5c:c7:5a:38:0f:d5:30:8b:
                    27:b5:63:f4:9a:94:1b:47:32:0b:c7:60:c6:d1:04:
                    45:10:94:cb:00:8f:c5:19:6d:21:d2:c6:24:7e:c1:
                    fc:48:1b:6b:93:30:fb:1c:32:64:b9:e4:2b:26:6c:
                    59:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:85:66:D3:3F:9D:01:F4:1C:7F:3C:B2:52:26:41:90:88:01:D8:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5b1df215-3a15-300d-8c51-08b60db4667a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:82:4f:c4:06:3f:09:a4:02:06:e9:ed:5e:7b:4b:6b:6c:34:
         06:df:2f:d7:7b:53:6b:5c:d9:9e:f3:90:65:45:33:81:a0:63:
         8e:02:e4:9e:05:6e:05:7d:0d:e7:9f:c3:e2:70:00:7a:df:c9:
         7c:48:8c:77:84:4c:3a:68:c0:92:b2:24:65:65:9a:40:3f:0c:
         b1:31:c0:fd:13:ae:7e:24:d8:b6:34:bf:cd:60:54:d2:06:83:
         a1:88:5f:02:79:ca:67:e2:82:30:d9:96:02:bc:9c:91:77:b8:
         a4:ec:b1:7c:b6:82:53:5a:f1:bf:84:05:c1:bd:62:12:70:ef:
         05:13:9b:d5:0f:5b:41:8e:54:cd:d4:a4:75:4d:2a:9e:9f:6f:
         e8:9d:b0:ca:b6:d0:e7:f8:42:79:4e:52:f8:35:82:eb:8d:21:
         5c:0b:20:09:d3:64:f6:38:d3:37:31:f6:d8:91:d9:2b:5f:9e:
         37:35:8f:c2:e1:dc:0f:8b:f3:c5:ae:dc:f6:81:59:d9:54:53:
         76:88:ee:d3:25:fe:a5:2e:05:0d:aa:f8:85:a4:f0:cd:1c:c4:
         e5:16:6e:12:1e:84:51:d3:f9:24:79:56:38:95:6d:ec:8c:b2:
         13:45:00:91:70:0e:01:f2:37:5d:bf:e1:25:68:58:8c:81:d3:
         e2:1a:78:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:41:39 2025 by rpki-client