Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d12da4ed-9714-396c-85fa-8a540d069e87.roa
File:                     d12da4ed-9714-396c-85fa-8a540d069e87.roa (raw, json)
Hash identifier:          Q8eskjCPweC1uqr8YMt1CzyC07OqZ3nWQtkoMXFlwYY=
Subject key identifier:   20:40:9D:58:14:19:52:11:91:04:B1:1D:6F:F5:84:B2:DB:C0:B5:68
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AFB1DFEB6BADB24A595400
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d12da4ed-9714-396c-85fa-8a540d069e87.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        97.69.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:b1:df:eb:6b:ad:b2:4a:59:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=d46ea77e-9a32-4028-947f-0eb3a55a4865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:19:1a:d0:37:5a:9b:c4:94:da:f3:86:2e:
                    d5:87:25:0f:bd:9f:f7:24:43:08:a3:bd:6a:d0:92:
                    57:b9:bb:ca:e8:9d:2d:be:13:65:d1:82:bc:c1:1a:
                    b0:35:fb:0c:a8:b8:6d:a8:c4:03:3a:61:7e:0a:16:
                    76:3c:a4:08:0a:d5:38:e6:bd:f0:88:9c:c4:83:e6:
                    94:84:cd:7c:64:3f:b7:f8:5a:0e:af:8e:c1:29:a7:
                    37:8f:c2:4a:9d:8a:8f:14:57:6f:00:32:d7:c6:5b:
                    ff:0a:fb:70:85:58:b0:07:b4:86:b7:b8:80:78:ae:
                    5c:54:70:39:b9:28:35:2d:3d:73:74:27:77:3f:b6:
                    8b:96:00:a5:04:fd:74:d8:b1:62:42:3a:86:ce:92:
                    09:cc:66:d4:d5:ac:9c:e0:fd:b0:f8:1d:11:e8:b6:
                    2b:f7:ad:2f:80:7a:c9:1c:ec:2c:a5:5c:d9:e4:c6:
                    9d:7d:de:29:81:9f:bd:f1:0b:9a:41:91:42:ce:89:
                    b4:48:c0:0a:4f:d9:79:fe:8f:c5:bb:03:68:97:92:
                    a7:55:43:05:b4:65:bf:21:c5:e5:6a:b9:28:11:f6:
                    d7:d9:17:00:da:77:71:67:4d:46:05:15:8e:23:fb:
                    30:34:ce:34:53:1f:6a:d1:4b:d7:b4:15:c9:15:27:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:40:9D:58:14:19:52:11:91:04:B1:1D:6F:F5:84:B2:DB:C0:B5:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d12da4ed-9714-396c-85fa-8a540d069e87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.69.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:fa:bb:be:de:e4:b7:e6:a6:b1:e3:ab:0a:ae:89:7a:65:37:
         a5:e1:54:6d:05:61:2f:81:8e:0b:34:65:0e:fe:a2:9f:60:c4:
         cc:03:b2:d0:18:0e:25:6f:c8:c1:05:09:48:dc:90:7d:3b:19:
         2b:d1:b5:40:6d:63:4f:7e:6e:53:50:25:54:c4:71:57:31:b4:
         28:6b:c4:87:b8:d4:30:da:29:93:42:5b:97:ba:01:2c:4b:e6:
         0f:75:ec:f6:43:23:74:d8:6d:a0:29:f0:55:f2:09:d5:ad:e3:
         8c:c9:ea:07:75:ff:85:76:87:6c:94:3e:39:65:a3:de:20:f2:
         c2:30:54:56:e4:e9:69:c2:c3:14:d2:97:34:95:40:5a:24:f7:
         42:3b:b3:ed:e3:f3:51:47:51:d7:35:a8:a3:b8:b7:14:67:ce:
         a0:b3:15:b5:b8:cb:83:73:0f:2b:a4:1f:2f:aa:24:64:d6:09:
         3d:f6:24:82:db:31:8a:1e:82:66:8b:52:32:40:03:d6:ea:df:
         7a:78:ab:5c:27:e5:bf:06:34:7c:be:98:cc:38:87:ea:d1:15:
         ec:4d:fb:50:f6:eb:99:c1:dd:6d:ff:cd:83:6d:ee:06:87:1f:
         5f:59:3a:04:34:2b:6b:e8:53:e6:4f:72:ed:21:c6:61:00:29:
         aa:47:1a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:12 2025 by rpki-client