Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e0886d41-341c-3c8c-8449-ced120a87ae1.roa
File:                     e0886d41-341c-3c8c-8449-ced120a87ae1.roa (raw, json)
Hash identifier:          wsGBkpTVNMke8y/va9/WFtSrHyZLLFOeaFRpeeIVPl4=
Subject key identifier:   9B:FA:CB:4A:E5:C6:28:28:DF:32:4F:9F:1C:3F:F9:63:B0:38:0C:DE
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F432858483F802AEB04BEEBF5BAA96500
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e0886d41-341c-3c8c-8449-ced120a87ae1.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     174
IP address blocks:        63.161.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:2a:eb:04:be:eb:f5:ba:a9:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=4d24be6e-cb70-4366-bbcf-47dc1f9e1b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4f:b0:a2:1d:7b:42:72:06:5a:c7:a0:d0:7f:
                    b5:d5:70:a0:11:93:06:20:b8:60:0f:85:fc:51:80:
                    25:aa:8a:1c:7e:d9:d8:e3:b5:c1:1d:2c:46:54:de:
                    f4:69:22:56:bf:f3:07:74:71:95:7c:f0:21:7e:ba:
                    87:f7:4d:2e:f0:a2:61:ef:ca:37:ae:9c:3b:3e:78:
                    b8:83:fa:6f:63:28:b8:94:af:45:f8:61:3e:30:cb:
                    3a:5b:59:30:89:1b:cb:f0:8b:39:89:fa:05:bb:f3:
                    96:8f:fb:3e:cf:5e:d6:f1:0b:9b:1a:19:62:69:11:
                    55:33:77:a5:dd:db:4c:ee:41:c5:4c:da:af:98:4c:
                    3b:96:c3:dd:6c:cf:f3:ca:94:ac:5f:f6:35:92:22:
                    4b:f3:fc:ee:10:8a:12:e2:e7:7a:2a:61:75:ad:47:
                    8d:d1:f0:ac:15:53:b0:3a:d6:80:74:a2:a5:c3:6f:
                    27:83:15:a6:48:87:1a:7f:a5:76:3b:d1:dc:34:32:
                    a2:12:55:92:14:50:83:7f:2c:59:f6:66:ba:ee:22:
                    e7:d7:16:d6:04:3b:ad:ce:22:ec:0b:2f:57:63:f8:
                    ea:29:9c:c2:19:3f:73:d2:14:49:84:6d:5e:09:98:
                    57:cb:fd:4c:27:dc:bf:d4:36:cf:7b:33:81:9b:09:
                    54:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FA:CB:4A:E5:C6:28:28:DF:32:4F:9F:1C:3F:F9:63:B0:38:0C:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e0886d41-341c-3c8c-8449-ced120a87ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.161.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:86:a5:5a:fd:05:53:29:65:ea:50:fe:a0:6e:6b:6d:d4:52:
         3e:8f:1d:55:fd:06:77:c8:b3:a7:f6:ae:d1:ea:a9:d7:c2:0e:
         9d:a3:a7:ac:7f:5a:bb:d4:aa:61:e2:c9:5b:94:a6:1b:7d:71:
         8e:9e:a9:88:e7:54:8f:ac:26:fd:10:cc:4b:07:71:03:2d:ff:
         76:dd:62:5e:4a:f7:d9:09:97:8b:e1:01:2a:34:d4:44:39:a3:
         45:56:9a:f8:39:42:10:23:b5:5a:3e:a5:d5:20:6a:5a:6f:66:
         7a:fa:f1:fb:2c:3f:06:0a:eb:6e:c2:08:31:ee:03:4b:30:a3:
         cc:d8:05:3e:b2:58:a1:ce:56:04:8a:a9:f6:3d:35:1b:c4:97:
         61:24:7b:85:20:63:25:1d:a8:64:56:64:21:75:40:cb:5f:6f:
         77:47:ea:65:70:18:94:c4:68:90:c4:1f:df:69:b5:8e:9a:28:
         ed:bc:0f:80:27:76:84:f0:f3:c7:8f:4b:bd:59:bb:69:58:0f:
         0a:f4:a6:6f:9e:c1:e4:5f:02:4c:f5:5e:74:80:46:a0:cc:c8:
         ae:ae:3a:84:d4:a5:e0:78:0b:19:22:52:61:94:8d:1a:b5:d8:
         a1:07:ff:ec:e2:c5:fb:eb:c1:5d:e5:81:0d:01:b5:09:f9:f5:
         fd:b0:a7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:23 2025 by rpki-client