Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1de741cb-e671-3b99-b03e-4b53456a4151.roa
File:                     1de741cb-e671-3b99-b03e-4b53456a4151.roa (raw, json)
Hash identifier:          XllvpxOOsj+Q/XujWLQcVXKBds88baVA873CbPc9Leg=
Subject key identifier:   A0:41:F0:90:DC:E1:26:D6:18:84:C4:0F:78:4F:82:EA:64:1E:7F:DA
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584FB3A69133870EA1EE499D7E67
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1de741cb-e671-3b99-b03e-4b53456a4151.roa
Signing time:             Mon 02 Nov 2026 02:00:13 +0000
ROA not before:           Mon 02 Nov 2026 02:00:13 +0000
ROA not after:            Sun 31 Jan 2027 02:00:13 +0000
asID:                     13768
IP address blocks:        64.34.156.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b3:a6:91:33:87:0e:a1:ee:49:9d:7e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Nov  2 02:00:13 2026 GMT
            Not After : Jan 31 02:00:13 2027 GMT
        Subject: CN=1abd94f5-72b9-4466-a0e3-ddf39553c99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7e:7f:ed:f3:81:e8:c2:7f:eb:6d:04:3c:68:
                    55:38:a8:cc:36:a5:6c:9a:45:59:6b:02:97:b7:53:
                    ee:74:25:c0:c4:f8:92:34:ea:8f:25:95:9a:94:f3:
                    35:2c:3a:38:e3:8a:c6:a1:bc:b9:ad:26:7a:3a:74:
                    4c:12:1e:64:b5:10:ce:74:81:f1:0b:ca:05:54:5d:
                    7d:22:ea:e5:87:fa:41:7f:74:21:57:0e:12:c4:67:
                    35:72:ef:9b:6c:9f:7a:9d:63:c6:d4:9d:eb:34:71:
                    81:d7:7e:f5:cd:a3:ef:ff:3d:ab:3c:2d:b4:67:87:
                    aa:16:ff:13:ae:94:1d:d5:14:4c:86:89:e8:7d:79:
                    b3:d2:1a:4c:09:76:2c:2b:76:73:82:72:56:d7:41:
                    2a:c4:c2:5c:ad:91:cb:54:93:3b:ed:73:56:25:a1:
                    ad:85:5a:15:27:11:0b:48:5f:43:6c:67:26:be:4b:
                    78:95:e5:9f:f1:12:c4:5d:3a:97:18:d4:54:3f:ba:
                    40:a0:ec:15:b7:47:dd:47:c5:b8:8d:d0:4f:f8:4c:
                    ca:50:d1:42:6c:a1:44:40:d2:37:31:67:c1:2c:76:
                    ce:9a:f1:e0:0e:9f:73:11:90:7b:c5:67:92:97:8e:
                    db:d6:d8:65:bb:81:82:53:b9:43:72:5d:bd:6b:35:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:41:F0:90:DC:E1:26:D6:18:84:C4:0F:78:4F:82:EA:64:1E:7F:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1de741cb-e671-3b99-b03e-4b53456a4151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:29:42:ac:b5:e5:60:cb:03:8b:1e:1b:41:3e:04:4f:6a:3e:
         e6:30:b6:1e:4c:f7:15:79:d6:8e:59:28:c3:25:9d:2d:82:71:
         fd:a6:94:c6:19:22:4c:2f:93:8f:5c:f9:81:5b:ad:34:5f:dd:
         fc:91:fd:6f:c7:39:8b:84:80:d3:6a:19:92:c4:0c:d4:15:01:
         76:36:19:82:58:6b:21:57:57:b3:50:d5:d9:6a:92:0c:d5:85:
         ee:07:15:8c:88:41:f3:d4:ab:b7:d9:1e:d8:45:8f:ed:a1:9a:
         7a:23:5b:86:c9:5c:4d:0d:84:45:c1:1c:06:a0:0a:34:36:d5:
         d4:1c:d5:52:29:78:9d:81:c7:48:90:ea:f3:a8:77:9e:89:54:
         b4:ea:fd:e7:f2:24:5c:7e:de:16:5a:e6:1d:37:46:3f:c2:f2:
         ae:2f:66:65:31:73:f1:2f:20:45:3e:f7:54:e3:b9:6f:8b:cf:
         08:d3:47:94:11:a3:c8:ea:f2:21:5d:f1:ce:33:ac:b4:fb:b4:
         fd:fc:73:bc:c1:c9:f2:06:4f:f6:b4:ed:99:8a:07:fc:11:57:
         76:a2:80:38:90:12:20:f2:08:82:6c:4f:9a:9b:3f:a4:f7:a3:
         ea:c1:32:f3:bf:66:49:96:ee:3a:4a:0b:ac:02:b3:14:21:bd:
         91:87:7b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----