Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/d06bcbc2-ac72-3d3f-973b-8fd7cee1e84e.roa
File:                     d06bcbc2-ac72-3d3f-973b-8fd7cee1e84e.roa (raw, json)
Hash identifier:          btEOaqa7AgLC1l1Rag7l4yHz28aiUoRcPogwghRL0+Y=
Subject key identifier:   D7:1C:7E:DD:DA:74:80:2C:EA:D5:58:0B:DA:46:2A:1A:0A:73:0F:BC
Certificate issuer:       /CN=e2213668-8973-4471-a19a-d7e8374ada63
Certificate serial:       010D0C9F4328584819CFD9F657CC83634D128940
Authority key identifier: C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/d06bcbc2-ac72-3d3f-973b-8fd7cee1e84e.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        69.64.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:d9:f6:57:cc:83:63:4d:12:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2213668-8973-4471-a19a-d7e8374ada63
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=06fdf319-fdf3-4cd6-8168-86862d6a543f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:1e:10:e9:83:b3:ae:67:84:09:8d:ec:a9:
                    33:5f:ae:e9:d9:af:59:0d:4c:75:c7:9a:3a:01:b6:
                    50:fa:c9:a7:eb:01:7e:58:77:ed:b4:8e:11:aa:2a:
                    a5:87:33:0d:46:c2:9a:cd:b6:a8:0e:5d:36:f4:df:
                    c8:8c:f4:50:ae:1b:94:02:75:b9:da:58:42:d0:a3:
                    79:b0:e0:e7:f0:95:b9:90:a0:c6:a2:4d:3d:7b:40:
                    09:33:78:23:92:d8:e9:4e:02:a4:ea:01:b9:b3:5a:
                    d0:0d:4b:be:fe:9f:59:0a:d2:a9:0e:61:27:ab:f6:
                    73:6b:e8:c9:e5:e0:bd:52:b5:b8:18:fe:a4:b9:88:
                    18:15:29:c4:c6:63:e9:5f:36:f3:69:1a:91:b9:e8:
                    f3:7b:55:f9:2b:90:34:4e:56:f0:d6:57:16:f3:b8:
                    cc:23:b6:3d:2f:4e:37:58:0d:0b:ab:45:9b:05:7f:
                    b6:ba:12:b2:b7:69:a4:70:9d:16:7a:dc:85:14:7a:
                    09:2b:54:c7:91:c8:9f:88:f2:56:89:05:12:98:77:
                    24:68:8c:0f:25:7c:74:07:c3:d6:9d:6c:87:eb:4d:
                    b2:1d:88:1b:ba:b3:e2:41:18:7c:5d:f6:a0:01:cc:
                    f2:cd:c3:f4:68:ae:ae:0d:1c:97:e4:a8:10:6e:49:
                    98:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1C:7E:DD:DA:74:80:2C:EA:D5:58:0B:DA:46:2A:1A:0A:73:0F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/d06bcbc2-ac72-3d3f-973b-8fd7cee1e84e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl

            X509v3 Authority Key Identifier:
                keyid:C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:e6:54:cf:ea:53:50:68:fe:dc:01:5b:1f:37:be:d6:8d:81:
         87:26:b9:63:92:16:70:4c:cc:20:9d:3c:c3:70:44:b3:65:c6:
         81:f4:c2:27:91:f9:bb:73:82:b9:03:d7:d6:a3:33:f8:35:3c:
         52:dd:dc:86:25:a5:c1:e8:0b:e2:18:a9:18:de:ac:2e:bf:40:
         0e:86:f9:5b:2f:64:fa:fa:f0:46:cb:34:35:96:9d:a9:f2:9f:
         89:58:2e:6d:10:d7:48:39:01:6e:22:c9:28:d3:ee:df:4a:9e:
         b1:d3:5d:c4:e6:42:8b:db:bd:94:b6:de:38:c1:5b:bc:5a:5d:
         4f:00:29:ec:5e:ad:56:07:91:a7:ce:2d:93:34:b0:df:71:af:
         39:e9:d7:63:ce:1a:e7:cf:10:ec:db:48:f8:0e:09:40:17:e5:
         8e:55:11:d1:39:42:c1:77:19:2d:ff:fd:31:7c:89:bf:b4:ab:
         28:99:95:e8:83:98:58:a4:a8:02:0e:85:07:69:50:ee:73:5b:
         d3:fd:13:e2:5d:a7:64:8a:db:ba:3f:a9:47:98:e7:a3:e8:d3:
         a8:44:7a:ae:09:55:40:67:56:45:5d:04:28:38:fa:76:82:47:
         ea:9a:2b:ec:78:7b:ab:4e:89:7d:e4:6b:59:9e:d1:ae:90:25:
         80:0c:88:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:34 2025 by rpki-client