Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfb642ee-a14a-3d63-9166-9af9383d0765.roa
File:                     dfb642ee-a14a-3d63-9166-9af9383d0765.roa (raw, json)
Hash identifier:          7qsmnkOp2D47VU302CBTkyYanmmyWkHjTjcBcjipE9Y=
Subject key identifier:   1C:84:FC:6B:73:D9:69:BD:10:1E:C0:FE:B8:D8:03:3E:0D:28:A6:06
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285848A830ADDC0EE3E610105F7D40
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfb642ee-a14a-3d63-9166-9af9383d0765.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        216.115.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:ad:dc:0e:e3:e6:10:10:5f:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=27f81ce0-a723-40a6-867f-107e529d0989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c9:1d:da:59:6d:c3:d7:29:8d:88:44:3b:3d:
                    2c:c2:ac:66:4d:d6:be:47:57:b8:57:34:c6:2a:79:
                    ed:b7:f9:28:c9:db:e3:0f:46:41:47:61:9d:31:09:
                    b5:4e:e4:2b:f8:a8:52:b0:73:b3:e7:17:7c:8d:57:
                    c5:c6:a5:65:0a:5c:55:7e:fa:bd:f5:01:26:ab:60:
                    25:a6:da:57:eb:cd:6f:c0:0c:ad:6c:c7:d9:9a:21:
                    c9:2e:e7:2b:e7:7a:20:6b:72:f8:85:98:c6:ab:44:
                    d2:32:1d:0c:34:fd:ac:d8:e5:f9:13:49:cb:77:80:
                    32:39:59:ff:22:43:05:2d:75:a8:40:3c:6f:e1:c5:
                    6e:7c:c0:76:84:67:d0:65:de:ce:97:ee:26:37:7f:
                    07:95:d4:94:f4:5d:94:fd:69:2a:1a:3c:7b:b8:45:
                    ba:f8:4b:35:b4:25:0a:99:85:54:a8:0d:b3:08:6b:
                    38:9c:dc:ef:10:64:ca:57:91:68:ef:d8:e6:58:09:
                    b6:80:91:1b:64:9b:41:2c:5b:ba:03:8b:9f:f1:d1:
                    54:0e:17:fd:71:be:63:9c:bb:98:0c:46:22:17:b1:
                    60:10:56:f6:cb:87:53:45:0f:11:5a:20:49:68:f1:
                    7d:2f:57:39:82:f7:2e:ac:b7:21:16:77:97:3a:81:
                    c0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:84:FC:6B:73:D9:69:BD:10:1E:C0:FE:B8:D8:03:3E:0D:28:A6:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfb642ee-a14a-3d63-9166-9af9383d0765.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.115.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:4c:6d:f0:2f:0d:1b:98:34:52:c0:17:50:34:26:e0:7b:8b:
         e0:87:bc:3d:c3:e2:2b:d6:75:c4:90:51:19:8a:d8:e9:63:cb:
         5f:0f:62:fb:30:8a:b6:8a:a2:55:79:8a:30:e1:56:e1:56:b0:
         13:d6:d5:70:79:70:50:15:f9:6d:8c:40:bf:89:ce:be:03:57:
         11:7a:41:55:62:14:ba:3e:62:32:bc:45:71:ac:a2:81:d2:94:
         4d:45:c1:0a:1d:9d:f1:2d:c7:79:6e:b4:4e:89:bb:72:30:52:
         8a:7c:91:34:4f:47:d1:de:c1:6a:c6:56:a2:16:3e:fc:df:78:
         6e:e6:bd:1c:1b:98:f1:aa:33:b4:30:0d:fd:8c:eb:4c:74:9f:
         38:4e:f1:dd:b8:ff:5c:26:c2:01:31:07:4d:57:8d:f7:40:f1:
         1f:a9:87:53:d9:93:ca:d2:b9:f3:98:0e:32:56:d6:ed:29:9a:
         84:fb:f6:c7:dd:fd:42:86:cf:44:b6:1c:06:a0:71:58:81:b0:
         78:19:74:3d:22:7f:14:f9:15:5d:55:40:e8:d0:29:3d:64:fd:
         33:05:25:22:19:1a:ad:c4:15:4f:75:fa:8b:56:4a:45:0f:f9:
         17:72:6a:98:2b:7d:8c:ed:87:07:78:a8:fd:51:c0:4f:a1:06:
         17:5a:d4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:57 2025 by rpki-client