Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/12db1193-9d44-361d-8ae6-c1a08fbbd83f.roa
File:                     12db1193-9d44-361d-8ae6-c1a08fbbd83f.roa (raw, json)
Hash identifier:          3rxiTZ3abSOvUxC9/p06Z8VshQKxo7HNgKqh+vWs690=
Subject key identifier:   6E:D3:66:42:29:F4:19:59:D1:BA:1E:AE:2C:E1:8D:04:5D:C8:02:A4
Certificate issuer:       /CN=b4b63a03-6fed-4e8c-898c-a5155d0a90ea
Certificate serial:       010D0C9F4328584886B082A67342428ACCF29900
Authority key identifier: 66:DD:B8:F3:43:CD:51:B7:14:93:08:A1:88:86:0F:38:A7:49:24:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/12db1193-9d44-361d-8ae6-c1a08fbbd83f.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     22439
IP address blocks:        70.36.96.0/24 maxlen: 24
                          70.36.97.0/24 maxlen: 24
                          70.36.98.0/24 maxlen: 24
                          70.36.99.0/24 maxlen: 24
                          70.36.100.0/24 maxlen: 24
                          70.36.101.0/24 maxlen: 24
                          70.36.102.0/24 maxlen: 24
                          70.36.103.0/24 maxlen: 24
                          70.36.104.0/24 maxlen: 24
                          70.36.105.0/24 maxlen: 24
                          70.36.106.0/24 maxlen: 24
                          70.36.107.0/24 maxlen: 24
                          70.36.108.0/24 maxlen: 24
                          70.36.109.0/24 maxlen: 24
                          70.36.110.0/24 maxlen: 24
                          70.36.111.0/24 maxlen: 24
                          70.36.112.0/24 maxlen: 24
                          70.36.113.0/24 maxlen: 24
                          70.36.114.0/24 maxlen: 24
                          70.36.115.0/24 maxlen: 24
                          70.36.116.0/24 maxlen: 24
                          70.36.117.0/24 maxlen: 24
                          70.36.118.0/24 maxlen: 24
                          70.36.119.0/24 maxlen: 24
                          70.36.120.0/24 maxlen: 24
                          70.36.121.0/24 maxlen: 24
                          70.36.122.0/24 maxlen: 24
                          70.36.123.0/24 maxlen: 24
                          70.36.124.0/24 maxlen: 24
                          70.36.125.0/24 maxlen: 24
                          70.36.126.0/24 maxlen: 24
                          70.36.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:82:a6:73:42:42:8a:cc:f2:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b63a03-6fed-4e8c-898c-a5155d0a90ea
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=3d11dd2b-0cda-46e4-bd5b-d72e166cdcf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:8b:3e:da:c6:ac:44:90:5f:d2:7a:45:c6:
                    46:ff:b8:e5:c0:43:4b:a4:60:28:e0:ee:14:ed:12:
                    1a:93:4f:66:7e:8f:71:f1:08:cd:c0:a7:6f:45:ec:
                    80:da:01:19:0f:64:03:f5:10:10:58:fa:9f:2d:07:
                    55:ab:83:76:48:f7:4c:d7:1a:a5:cf:e5:98:25:49:
                    64:36:f8:d3:6e:a4:57:8f:68:11:b0:9b:cf:88:e0:
                    aa:7b:8c:7a:e1:4c:a4:1a:87:bc:9f:d5:b9:ea:e4:
                    11:3e:bd:fe:4b:0b:f2:26:e8:f3:e9:cf:8c:61:80:
                    59:fb:2c:a7:8e:b7:a7:21:a8:4b:44:ed:d4:86:bf:
                    90:ca:cd:14:0a:37:02:95:a7:95:f1:d5:87:80:7f:
                    eb:e6:4b:e4:2b:a6:77:dd:93:d3:d3:5e:74:08:c5:
                    a2:17:eb:be:57:91:14:72:e9:69:f7:e9:10:91:39:
                    40:f9:b4:77:88:32:d9:65:b8:f4:ca:f2:ba:03:e6:
                    d6:d3:a7:f5:66:e0:7c:5d:b7:8d:96:4c:af:5d:cf:
                    df:c4:93:54:28:dd:78:4c:a8:66:fb:7a:2b:17:f7:
                    e6:3e:37:17:ad:0d:73:0b:d5:44:80:53:88:1a:30:
                    9d:dd:6f:f8:0a:1c:e9:d4:49:b4:fe:ca:3e:9c:9f:
                    70:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D3:66:42:29:F4:19:59:D1:BA:1E:AE:2C:E1:8D:04:5D:C8:02:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/12db1193-9d44-361d-8ae6-c1a08fbbd83f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.crl

            X509v3 Authority Key Identifier:
                keyid:66:DD:B8:F3:43:CD:51:B7:14:93:08:A1:88:86:0F:38:A7:49:24:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:55:70:f5:fe:82:a3:08:6a:07:f1:97:94:79:40:1c:47:3e:
         d0:31:a4:4f:72:a0:d9:f4:8d:6a:c5:a6:83:81:6e:66:15:0e:
         b1:78:fa:e3:b1:34:cc:47:b3:af:ed:ab:25:a7:cc:b9:6e:47:
         77:98:06:33:86:45:45:ff:cc:c1:e8:ab:a5:40:58:a4:2d:f4:
         05:59:ba:27:e7:d7:3a:3c:aa:4c:35:7c:08:fa:d3:90:93:a9:
         6c:66:45:2e:4d:0a:75:78:41:c8:07:73:38:9e:bb:15:a6:3c:
         96:d5:a2:dd:16:5c:37:78:01:6a:ac:0b:7c:f3:54:69:06:4d:
         b0:1b:9a:05:29:68:2b:80:41:ad:3b:2a:20:d2:44:f0:16:13:
         50:db:36:5e:31:ba:13:92:cc:6c:bd:6c:18:74:d1:00:a8:12:
         67:0d:6b:2b:5b:e8:54:b8:28:5b:54:ce:00:68:1b:37:16:4d:
         ff:2c:c3:12:ef:2d:cd:a4:ea:1b:6f:eb:d5:43:7a:f1:a9:1e:
         a7:e9:35:e7:df:7f:2f:82:7f:30:9c:44:51:f6:f2:d9:1f:90:
         86:cc:a3:ea:e0:ed:e6:4b:8f:3c:7c:0c:e4:d9:b5:32:69:8f:
         56:c8:52:ac:8d:d8:c0:32:28:2c:26:4c:45:3b:8a:9b:0d:d6:
         99:c0:85:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:00:23 2025 by rpki-client