Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ebdbc886-534d-30c7-b222-dc3d598d0362.roa
File:                     ebdbc886-534d-30c7-b222-dc3d598d0362.roa (raw, json)
Hash identifier:          TjS/kjmmzEv4kbRlmq//doI/wdXFufZ7nUrie4g251w=
Subject key identifier:   54:FC:9A:C1:95:1C:B8:1D:96:3C:4A:6F:43:35:1D:E8:DD:16:B0:CC
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584FB24111A229E1E9066893C780
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ebdbc886-534d-30c7-b222-dc3d598d0362.roa
Signing time:             Sun 01 Nov 2026 14:00:13 +0000
ROA not before:           Sun 01 Nov 2026 14:00:13 +0000
ROA not after:            Sat 30 Jan 2027 14:00:13 +0000
asID:                     64267
IP address blocks:        198.1.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b2:41:11:a2:29:e1:e9:06:68:93:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Nov  1 14:00:13 2026 GMT
            Not After : Jan 30 14:00:13 2027 GMT
        Subject: CN=921b7e91-0090-4019-86c3-dbc89ac7f2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:da:c7:61:36:b2:07:21:4f:d1:81:1d:76:
                    8a:d2:f1:52:05:6c:1a:69:b7:25:40:67:7b:2f:a4:
                    37:5d:66:33:a1:2b:52:f8:66:a8:41:dd:1b:23:22:
                    71:21:bf:30:ee:f6:67:83:81:aa:3c:d8:ef:14:aa:
                    57:ae:1b:23:8f:7c:23:00:95:e9:67:dc:4f:99:27:
                    47:30:65:b8:59:6e:a6:be:18:e5:c4:57:16:67:9c:
                    19:d3:7a:75:76:f7:62:0e:c5:66:a7:6e:73:67:8f:
                    b3:c3:23:ad:28:7d:7b:af:0e:a9:e9:bb:eb:c2:0a:
                    25:f7:8e:c6:7c:12:e2:88:f9:a7:e2:65:55:4d:99:
                    ca:7c:09:6a:b8:78:02:27:1a:79:55:1b:5b:68:55:
                    4a:19:dd:c6:82:aa:e3:ec:04:71:0e:44:5a:b2:59:
                    d0:71:78:8f:3d:e5:7a:6f:96:f4:a3:9c:91:b9:c4:
                    95:9d:ef:48:fe:c0:f8:a5:99:71:f2:b1:27:69:79:
                    48:10:94:f1:79:65:19:d0:ce:80:83:5a:1c:ce:36:
                    b7:77:14:77:c5:b8:97:56:36:30:00:87:32:75:ca:
                    f7:4f:41:ec:07:da:5c:a0:ba:f8:eb:65:81:ea:0e:
                    89:58:57:de:0b:f2:d9:9a:60:f3:89:fc:e2:12:c6:
                    05:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FC:9A:C1:95:1C:B8:1D:96:3C:4A:6F:43:35:1D:E8:DD:16:B0:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ebdbc886-534d-30c7-b222-dc3d598d0362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:17:31:7f:9c:50:72:67:f0:c7:bc:e0:d7:0a:ad:6c:16:79:
         89:6b:6b:ee:87:26:ae:59:af:14:be:fc:45:cd:9f:aa:3d:ec:
         27:3c:ba:e5:78:34:ea:ef:75:77:2f:92:59:fe:e3:75:ce:12:
         ae:f0:0d:5e:43:96:ad:ac:a8:2d:ff:eb:0c:94:c4:96:db:1a:
         c5:9a:7f:e1:50:d3:73:91:81:a1:a1:e3:7d:e6:8f:64:b0:6d:
         ea:5a:09:07:4c:d3:f4:c6:ca:27:4c:9d:07:ae:3d:7c:c6:dd:
         a2:42:79:eb:b4:a4:2f:7e:17:88:a0:f1:66:41:47:65:07:68:
         fa:7e:43:a6:47:1c:e4:51:f6:de:fb:72:0d:bf:e9:c5:a7:3c:
         30:7b:d9:8b:0f:10:a2:b0:ab:67:fb:c4:d0:28:21:02:05:26:
         c6:d9:10:db:be:c7:70:fb:2e:a2:d9:cf:42:47:85:d5:65:f2:
         9f:e2:2c:ae:f6:2b:e6:f2:3d:9c:4a:2a:60:7c:22:d5:c6:d8:
         43:b7:b7:98:a8:ea:27:45:fe:e5:b8:f4:ed:e1:34:6b:80:d7:
         38:04:7c:62:92:dc:fc:e0:cf:c2:e8:85:3a:81:de:08:94:c4:
         6e:db:16:b9:ee:16:1c:42:29:8f:0a:e8:6c:3a:ec:22:15:a2:
         f7:da:86:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----