Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/34b0bbcc-77a8-3218-a432-5cf0b28b087b.roa
File:                     34b0bbcc-77a8-3218-a432-5cf0b28b087b.roa (raw, json)
Hash identifier:          +1ZFR+ZaknSzYMhlgljwKkraObr0eCB5tN+PXsUGcOM=
Subject key identifier:   D7:7D:9D:B7:63:7A:93:59:67:B9:39:30:93:31:DB:8C:E6:76:8D:96
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584862659046E0DB002ED57C0F00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/34b0bbcc-77a8-3218-a432-5cf0b28b087b.roa
Signing time:             Tue 31 Dec 2024 02:00:40 +0000
ROA not before:           Tue 31 Dec 2024 02:00:40 +0000
ROA not after:            Mon 31 Mar 2025 01:00:40 +0000
asID:                     852
IP address blocks:        173.181.250.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:62:65:90:46:e0:db:00:2e:d5:7c:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Dec 31 02:00:40 2024 GMT
            Not After : Mar 31 01:00:40 2025 GMT
        Subject: CN=0711848a-269d-4b71-87f7-017c30d6fd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:c9:e6:86:4f:ee:22:f3:a1:16:31:ee:e0:
                    52:cd:bd:1a:28:1c:e1:36:23:bb:ce:3d:0e:76:e9:
                    2f:16:bc:ad:52:89:2e:de:f8:4d:9e:a0:ca:7d:a0:
                    3c:7c:0c:b3:cb:34:d8:f9:08:74:96:3e:0d:94:41:
                    65:60:d6:83:c4:ab:cc:07:b0:f7:c7:4c:4c:ca:be:
                    1a:2f:dc:92:69:10:78:cd:de:ea:11:f8:fb:22:af:
                    8b:5e:00:69:0b:03:5c:a1:27:1a:bd:5b:8b:7c:68:
                    c2:7b:9a:f9:c1:9d:e2:31:9a:ef:be:34:23:8a:ff:
                    09:f6:d6:af:c2:7a:c4:b8:04:50:36:ab:c1:aa:b6:
                    3b:6e:17:5b:0c:60:42:18:de:ca:4d:fb:f9:cc:77:
                    f7:88:1d:3f:9f:81:61:0b:67:c1:91:91:ef:54:30:
                    09:81:93:53:92:bc:a0:16:01:bd:8f:8a:52:9e:1d:
                    e1:fe:e7:1a:6d:f1:62:23:da:c0:5c:ce:a9:3e:4c:
                    a9:ae:ce:5a:58:ce:84:85:ea:c4:21:0e:49:e8:af:
                    8c:52:96:a9:8e:e1:27:eb:4a:c7:9d:c6:e9:78:b4:
                    98:e2:e2:7f:52:5b:4d:18:c4:8b:7a:81:08:6c:42:
                    02:a1:8d:72:8d:04:91:b4:43:d0:79:e2:7a:11:61:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7D:9D:B7:63:7A:93:59:67:B9:39:30:93:31:DB:8C:E6:76:8D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/34b0bbcc-77a8-3218-a432-5cf0b28b087b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.181.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e1:d1:d8:94:d6:f9:9b:c2:a9:48:ec:b1:85:5e:f3:8d:d2:
         6b:52:46:dc:7f:0d:5a:ce:3b:9c:d2:04:99:d7:64:65:47:44:
         08:ce:17:b1:66:ab:59:b0:74:04:fe:bc:bf:3b:26:35:4b:10:
         3f:87:6a:cc:af:ca:6b:9a:66:06:c7:92:3d:b0:4d:e3:d4:65:
         bf:b6:46:38:09:97:d5:3a:30:0b:49:52:66:8e:89:aa:48:28:
         ba:5e:7c:bf:e9:99:8e:59:e7:02:9d:8f:cb:0d:83:5e:db:78:
         c7:cb:be:30:e6:07:8e:e6:c0:0a:67:ed:56:65:e1:31:40:54:
         b4:c1:34:e1:90:2c:1a:9b:9c:65:f7:1b:da:71:76:1e:3e:e4:
         be:2d:06:88:f6:3b:5e:8e:48:fc:63:59:7c:58:3c:3a:f9:1b:
         39:17:59:87:b7:8f:c4:84:1c:9d:c9:af:75:93:f0:6f:73:6d:
         3b:ad:4d:ab:b1:b1:11:47:4f:7b:ec:b6:36:8b:c5:6f:35:e7:
         06:64:19:56:81:eb:21:59:07:e1:6a:3d:cb:30:02:3e:55:ea:
         7e:e5:e5:5a:13:34:39:49:88:0b:77:44:d9:e6:c5:a5:84:c8:
         6b:47:3b:5a:14:10:0d:fa:38:3f:48:95:9c:db:d0:33:2c:10:
         d4:1a:52:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:11:23 2025 by rpki-client