Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/20476913-9c8c-312f-bcc1-4f9bf6fb665c.roa
File:                     20476913-9c8c-312f-bcc1-4f9bf6fb665c.roa (raw, json)
Hash identifier:          QRYgruMOC0Cjpt5booLQmnG3ZskqZjCJxvvSbvT/Hu4=
Subject key identifier:   C6:73:A4:35:DE:87:DC:A8:CC:79:EF:6C:E3:3B:5F:AE:8D:90:58:59
Certificate issuer:       /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial:       010D0C9F432858480214F4049722D12B33E9C280
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/20476913-9c8c-312f-bcc1-4f9bf6fb665c.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     11550
IP address blocks:        162.219.196.0/22 maxlen: 24
                          173.243.176.0/20 maxlen: 24
                          199.96.120.0/22 maxlen: 24
                          204.89.253.0/24 maxlen: 24
                          216.249.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:14:f4:04:97:22:d1:2b:33:e9:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=3a4d6c8a-1d81-4d70-bf30-12c82b105f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:5a:b2:a4:79:d4:3e:6c:86:53:c1:9f:2d:
                    75:e2:94:13:77:10:53:ef:9e:bb:0d:b7:bc:02:b4:
                    72:5c:5f:51:65:88:a8:94:fd:09:55:a8:00:04:13:
                    aa:17:3e:2a:db:a4:90:bd:2f:6c:28:4e:63:2f:d4:
                    7d:b3:09:5e:e8:02:1a:b2:49:94:59:46:5a:d8:d1:
                    27:e2:e0:72:f4:8f:cf:62:cf:04:05:21:69:d4:48:
                    09:76:ba:09:97:54:1d:5a:3a:07:ab:09:7d:42:b2:
                    8d:00:a4:a8:8f:ce:bf:f5:9c:65:6a:08:c4:67:81:
                    8b:56:a3:af:5d:cc:9e:a1:6f:7d:05:84:92:9d:5e:
                    6b:60:74:aa:55:db:81:58:69:f1:5b:03:84:df:bd:
                    29:8c:92:08:9e:1a:12:ff:ef:1e:2c:18:8d:63:1e:
                    89:6e:15:2c:69:0b:c7:42:80:c4:ae:e5:d5:39:c2:
                    51:b6:36:be:0d:dc:24:a5:eb:ae:84:69:d1:1e:5c:
                    96:5b:71:2e:f9:3e:44:d1:c8:d9:1a:86:6f:6d:97:
                    35:e9:ae:59:3f:b2:db:2a:1c:8a:a4:60:33:b3:c9:
                    6b:d4:1e:74:f6:6a:66:d0:63:28:2b:00:5e:91:1e:
                    fb:93:71:be:cf:06:53:63:e2:b9:52:81:97:de:06:
                    dd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:73:A4:35:DE:87:DC:A8:CC:79:EF:6C:E3:3B:5F:AE:8D:90:58:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/20476913-9c8c-312f-bcc1-4f9bf6fb665c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.196.0/22
                  173.243.176.0/20
                  199.96.120.0/22
                  204.89.253.0/24
                  216.249.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ad:2f:74:63:0f:6a:c9:8f:9b:9c:d2:43:60:f6:b2:9c:58:
         50:ea:3c:65:ce:ff:39:f7:e5:aa:4d:b9:80:c8:73:22:ee:a6:
         21:b8:18:71:8a:b7:6c:7c:3b:d7:55:db:90:fa:e4:bf:08:b1:
         e6:2f:0a:b5:9f:da:ec:da:c1:10:10:f1:27:5f:b3:b4:a7:1b:
         44:15:64:eb:71:28:c4:35:15:24:99:8d:92:69:66:91:c8:b0:
         5e:24:43:a0:91:64:94:c9:89:40:0c:17:6e:cb:f6:88:ce:ac:
         a4:85:3f:b3:2d:99:b0:64:75:51:68:ee:1f:94:ec:06:97:63:
         c2:aa:9a:9d:8c:0b:d6:07:ad:77:41:30:30:47:e9:f8:9a:bf:
         3b:78:12:85:62:cc:48:ba:21:0f:5f:cb:35:fa:64:f8:77:ae:
         74:7f:f2:f1:47:9e:01:7f:4f:d5:7e:a0:0d:13:11:fb:e2:70:
         87:53:bb:e1:f7:31:3f:ce:6e:27:8e:c1:33:70:2f:95:ee:0f:
         d7:88:8e:b3:79:52:72:86:58:1f:db:a7:55:b5:57:a1:80:31:
         93:a4:99:93:73:78:a3:6b:6e:04:3c:b1:bc:eb:d5:9a:40:8d:
         df:2d:e3:e8:44:d9:32:f2:60:b3:9a:ab:29:50:5a:5f:96:30:
         6d:3c:9a:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:38:23 2025 by rpki-client