Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS60117.roa
File:                     AS60117.roa (raw, json)
Hash identifier:          yGM8hDwlWQjBmEiiQtWsgvX+pCNgesQLEjeY14yZmYo=
Subject key identifier:   D7:2F:2E:DE:9F:55:86:D1:14:38:07:70:86:E1:7B:CD:E3:E7:BC:A4
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       5E3E2F6E03F5FEF2A8E709422014CB48AC28C590
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS60117.roa
Signing time:             Thu 05 Nov 2026 11:39:52 +0000
ROA not before:           Thu 05 Nov 2026 11:34:52 +0000
ROA not after:            Thu 04 Nov 2027 11:39:52 +0000
asID:                     60117
IP address blocks:        207.180.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3e:2f:6e:03:f5:fe:f2:a8:e7:09:42:20:14:cb:48:ac:28:c5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Nov  5 11:34:52 2026 GMT
            Not After : Nov  4 11:39:52 2027 GMT
        Subject: CN=D72F2EDE9F5586D11438077086E17BCDE3E7BCA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:78:b7:ec:03:1b:c5:cf:f4:68:2b:7c:50:
                    ef:c0:36:ee:5e:8c:29:fa:dd:aa:7b:f9:9a:7f:42:
                    d0:5e:9f:44:12:74:61:87:f9:26:9e:39:f8:d0:29:
                    b7:e5:f6:51:32:7a:6d:e8:f3:40:62:88:e7:ff:9e:
                    50:95:82:39:da:93:d2:5c:49:5e:60:fe:22:2a:d7:
                    55:4e:a1:d1:81:3d:39:82:c8:c3:4c:06:49:a0:30:
                    4e:3d:79:83:7a:66:cd:cc:a9:9f:f2:12:ef:54:49:
                    b9:e8:a8:53:4d:80:96:9a:dc:a5:8d:b2:c1:7c:60:
                    35:53:73:df:77:1e:b0:05:fd:2d:19:46:49:f6:8c:
                    42:70:33:cc:86:87:d7:c3:95:5e:0c:f6:8a:c0:90:
                    c4:f8:60:06:2e:a8:06:26:e1:64:83:a1:2d:12:8c:
                    c1:ea:14:c7:fa:6a:19:da:57:66:21:49:ac:45:21:
                    a0:1a:e2:d2:1f:59:1b:22:fb:6e:35:53:fa:8a:5f:
                    70:6f:3e:f8:9f:9e:6f:e3:58:75:62:9b:9d:07:96:
                    9b:5d:b0:a9:df:e7:89:6c:20:d9:7a:10:82:af:92:
                    ea:b5:43:49:66:a0:5a:7e:06:6c:38:50:62:bd:73:
                    b6:86:8f:0a:9a:e9:ea:2c:71:01:ae:ad:1b:93:fb:
                    dc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2F:2E:DE:9F:55:86:D1:14:38:07:70:86:E1:7B:CD:E3:E7:BC:A4
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS60117.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:74:17:44:4c:70:4c:4b:a3:00:8b:6e:e7:cf:f9:6c:ee:c9:
         be:55:07:09:d5:38:ce:c7:19:0e:58:0c:07:f5:82:df:11:90:
         27:28:7a:7a:ab:35:ff:60:34:75:b3:e5:2b:af:a4:c0:8c:00:
         16:11:c7:b9:ca:de:f8:86:1f:2a:38:f4:9b:25:db:2a:0f:40:
         18:8f:24:34:5d:5e:1b:29:c4:ba:ae:44:01:7c:17:50:e9:97:
         fc:14:1d:29:b5:77:49:87:f8:39:8d:93:0a:a5:60:70:46:fd:
         6b:3d:c0:f9:7e:9c:60:b9:42:d0:5a:41:3e:53:97:4f:9c:b9:
         4b:4d:3c:81:1f:6c:1f:0d:20:96:ef:fa:3e:e3:5e:56:75:74:
         cb:53:44:8e:09:6b:2a:d1:95:57:65:0a:e5:24:a9:f5:62:42:
         54:3c:35:2d:f7:c7:ec:62:98:00:15:a6:3b:21:d3:5a:dd:c4:
         14:8b:6c:26:67:bf:ab:2a:95:a1:ef:80:f3:d2:19:98:f0:8d:
         94:bc:23:8f:2a:22:b9:75:4a:94:36:a3:b2:a0:c9:9e:83:ac:
         34:b5:ca:21:b6:bf:0c:a0:44:ff:00:ae:bb:d5:0b:0c:f3:2b:
         a9:9e:73:c7:aa:f4:ef:4b:63:f9:12:72:a1:91:4c:7d:d4:0b:
         59:87:2c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----