Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa
File:                     1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa (raw, json)
Hash identifier:          jra5UZYIpy/E5zCaiOZM+kvkE0BM4HvmqLuUF289RBI=
Subject key identifier:   D2:DC:FA:9B:F9:93:2F:47:86:61:B1:B9:42:E6:C4:E9:90:1E:F8:42
Certificate issuer:       /CN=6b72a822-0e8f-45f9-a612-463da7164bf3
Certificate serial:       010D0C9F432858484C103648B455396444D94C00
Authority key identifier: 58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     174
IP address blocks:        69.54.244.0/22 maxlen: 22
                          69.54.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:36:48:b4:55:39:64:44:d9:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b72a822-0e8f-45f9-a612-463da7164bf3
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=595c069b-d99b-4d9a-b302-e0040bd7138b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d1:5b:63:26:38:a9:a4:08:fe:f4:e7:ab:e1:
                    37:09:5e:47:95:36:34:ea:42:a3:47:cf:eb:24:f1:
                    4f:db:48:53:fe:a9:a0:7b:4a:03:48:50:e1:f9:8c:
                    d3:9d:cf:fa:1e:a0:c6:cf:d7:c5:f3:06:48:3b:4f:
                    ba:c4:4f:3f:6e:d3:2e:24:75:33:0f:be:04:37:ee:
                    2e:84:67:b7:f9:ea:91:21:ce:8c:33:6c:c6:2a:51:
                    85:54:77:80:bc:bb:a1:08:ad:d8:f0:c5:09:4e:4d:
                    cd:e7:aa:51:d5:f9:95:d8:6f:02:fc:5d:27:6d:80:
                    8a:f1:56:e3:5f:e4:72:3b:6f:1b:4b:26:85:5e:be:
                    70:cf:17:f0:09:b4:65:7d:d8:6a:46:16:67:9f:24:
                    77:ce:cf:07:5d:26:78:73:cf:2d:c0:e0:6c:e3:e2:
                    aa:40:8b:9c:87:ae:a2:5e:6e:78:41:0e:b5:ef:ac:
                    d6:e4:30:a2:e8:15:88:62:95:a3:a5:d4:fe:d8:2f:
                    f0:4b:3d:37:e7:71:b6:ba:1b:69:ce:4c:18:be:4f:
                    3f:dd:94:db:7d:97:dc:3c:fb:f8:f9:40:2e:ea:2f:
                    a2:e6:2c:4e:02:d0:65:98:e5:d5:6d:54:a2:54:db:
                    cd:17:eb:ed:34:be:a0:cc:f8:fa:0c:35:ce:3c:f2:
                    14:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DC:FA:9B:F9:93:2F:47:86:61:B1:B9:42:E6:C4:E9:90:1E:F8:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl

            X509v3 Authority Key Identifier:
                keyid:58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.54.244.0/22
                  69.54.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:86:1e:88:e4:63:3c:e6:a4:60:50:18:b7:f6:06:af:2a:17:
         72:48:9b:0d:95:de:5a:7e:97:04:ff:dd:04:11:6e:64:12:17:
         f6:08:53:01:c9:5e:2c:37:3e:d1:1b:ad:93:2d:67:3e:2b:c4:
         9d:99:e6:1e:f4:be:dc:f4:b2:0e:d9:7a:d8:c0:55:2f:73:4c:
         be:80:da:7a:39:65:89:cb:fa:36:7d:fd:5f:72:22:2e:48:c7:
         a7:0f:07:8f:12:6b:0d:a5:1a:08:c5:8e:a4:5e:56:af:e5:d2:
         b1:2d:c8:01:ae:d6:8e:fc:6b:8e:15:2d:07:4b:f0:29:3b:b6:
         98:84:00:21:4c:71:08:20:e9:62:1c:04:2f:82:e5:be:cd:a3:
         94:c4:b5:91:d3:24:f3:4f:42:9b:d2:18:e8:ce:61:5c:fb:8a:
         e0:0d:af:7a:bd:e3:d9:9f:9e:d3:42:b8:c4:b3:dd:57:76:ef:
         50:3c:65:0d:40:05:ae:cf:1d:2e:c9:12:73:ba:63:00:96:ea:
         2c:92:29:b9:28:63:e2:e6:2f:0d:25:e3:56:aa:2e:7b:2c:7d:
         b8:0b:4e:60:86:4e:18:11:71:cd:4c:15:88:8a:4a:23:a6:c1:
         28:42:68:cb:c3:9e:5d:b9:7d:25:91:b0:13:ad:fa:37:fe:18:
         09:fe:ba:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:00:22 2025 by rpki-client