Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/268da158-9a66-391f-9373-38ce0074d565.roa
File:                     268da158-9a66-391f-9373-38ce0074d565.roa (raw, json)
Hash identifier:          ntwgBeUR2iZdD7YV8vi3tWoxPAwm1pmlIKjbvV3jADM=
Subject key identifier:   9D:88:02:FD:07:FB:7C:17:62:D8:75:6B:37:B7:7C:BA:05:79:17:50
Certificate issuer:       /CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
Certificate serial:       010D0C9F4328584882809EED99CCEC869351CB00
Authority key identifier: E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/268da158-9a66-391f-9373-38ce0074d565.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     14333
IP address blocks:        206.168.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:9e:ed:99:cc:ec:86:93:51:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=ec0d94bc-a675-45b5-abd9-24af93a736c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:76:ca:e6:e7:1f:b5:c7:39:01:0b:80:ae:6a:
                    f3:d0:76:86:64:e8:07:30:fd:b8:d5:b8:f8:68:b3:
                    61:d3:9c:59:0b:fe:3e:a9:fd:bc:d1:86:29:27:36:
                    49:af:e4:61:80:36:83:7e:4e:6d:49:1f:fb:82:6f:
                    39:dd:8f:0d:37:6b:a8:9d:d2:66:6d:a3:bb:ec:08:
                    1e:23:10:6d:95:4d:3e:de:87:81:76:91:68:e3:c0:
                    8e:dd:5e:1e:2a:2d:9c:c8:36:f6:7a:5c:bd:98:4a:
                    b6:a2:6a:11:57:9f:11:d7:53:3a:9f:5a:a9:9c:54:
                    9c:e9:63:f8:32:c8:4a:09:ca:cb:d7:77:18:bd:0a:
                    7e:59:f0:93:7b:67:4c:99:07:4e:44:c8:b5:f8:ba:
                    d7:25:3f:ff:29:31:2d:77:f8:27:be:77:f7:76:9f:
                    75:98:f9:a4:59:ee:dc:f2:92:f7:c9:1e:ea:52:4f:
                    66:4f:0c:64:1a:05:fb:ea:bb:ee:92:2c:6a:c0:5e:
                    77:87:70:94:21:a9:68:e8:84:94:d3:3c:d4:35:20:
                    96:ad:1f:63:06:49:04:ab:65:c2:c7:a4:0c:86:34:
                    f1:b4:0b:de:fc:ca:8e:94:20:e7:47:93:6b:70:fd:
                    31:5b:26:81:1f:b8:19:be:af:18:17:4d:96:cc:81:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:88:02:FD:07:FB:7C:17:62:D8:75:6B:37:B7:7C:BA:05:79:17:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/268da158-9a66-391f-9373-38ce0074d565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl

            X509v3 Authority Key Identifier:
                keyid:E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:59:39:12:75:aa:1a:70:b3:be:cc:72:21:54:ff:ef:59:af:
         07:4a:20:ed:ae:18:f8:c9:91:4f:5b:59:d2:9c:60:81:cd:58:
         5d:ce:99:ea:bb:36:03:22:15:75:13:17:6a:54:1c:e7:cb:b3:
         36:75:75:94:c9:bb:c6:cb:c8:77:c1:97:f1:66:03:e6:b3:71:
         f1:7a:75:31:44:6e:6b:37:32:17:1a:e8:66:bb:36:52:75:bd:
         74:da:f2:09:a5:f6:a5:9e:6b:fa:bc:e2:26:7b:d9:8e:3a:1f:
         1a:85:d7:40:63:e5:24:00:33:bf:d2:ba:03:96:65:27:8e:41:
         39:03:d3:bf:a6:e2:b7:af:6b:86:16:6a:74:35:37:00:3a:49:
         f0:e4:3c:07:53:22:b2:6e:71:4b:88:ac:0c:01:49:af:a5:1b:
         34:ee:d3:a2:cc:02:b7:96:57:6f:9e:a7:4e:be:03:05:85:27:
         89:b9:9a:be:6f:ac:f2:50:44:12:85:8f:a4:4d:52:e6:2b:5d:
         4f:32:e6:4c:6e:01:3a:a7:93:8b:6f:3f:98:c6:87:4c:98:3f:
         bf:38:e8:b3:aa:92:c6:63:03:10:be:e7:d0:a1:e0:d6:9e:65:
         be:78:f2:2b:6c:2f:31:eb:46:b5:25:22:ef:c0:8b:49:0e:56:
         ad:9b:21:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:25:29 2025 by rpki-client