Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/cad8fe8a-2d46-3dab-a576-1e4e6790edad.roa
File:                     cad8fe8a-2d46-3dab-a576-1e4e6790edad.roa (raw, json)
Hash identifier:          ytxvsscMvd4oOc8VYpwBJckDL2pQIAMXbK5/sDtLecU=
Subject key identifier:   3E:FD:FD:95:FB:B0:00:9B:18:00:42:7C:3D:D9:EB:5E:6F:22:B6:3C
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F432858484EDACE441210331DE7642B00
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/cad8fe8a-2d46-3dab-a576-1e4e6790edad.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     11260
IP address blocks:        142.67.200.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:ce:44:12:10:33:1d:e7:64:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=1611b8d2-87cf-4631-94b4-17919093e485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e1:c2:85:6a:5b:c1:0b:45:a1:8f:e9:71:fa:
                    86:bf:d1:cb:5a:a0:e2:b6:41:4d:5b:8e:88:38:27:
                    5b:45:2f:fb:eb:4b:1b:ce:f6:e7:7a:7a:b8:53:81:
                    ac:0f:9d:7e:ea:23:d7:32:37:5e:5d:89:c5:6c:2e:
                    3e:73:b4:f7:a1:dc:d9:b4:9c:6a:c8:f6:ef:f3:23:
                    11:97:c6:fa:84:b4:e5:64:2c:82:28:ae:19:dc:ad:
                    cc:4a:ee:e5:cb:4a:c3:b7:05:91:70:3b:59:46:53:
                    2f:d9:05:c1:81:37:b4:2c:61:cd:13:02:a0:22:c9:
                    7e:a1:1f:f0:54:8b:cd:67:b4:f9:17:ee:37:d3:b2:
                    4d:87:fd:56:e8:d7:f8:29:74:14:c9:89:a8:23:c0:
                    88:35:da:dc:44:29:61:30:14:fd:c7:ed:f0:a3:68:
                    14:ca:32:fd:e3:03:41:31:06:65:fe:3d:51:17:a1:
                    aa:9b:1b:41:48:63:64:05:66:78:c9:e6:58:70:c1:
                    eb:27:f0:3c:a3:f6:56:26:eb:e6:d4:37:6f:37:8c:
                    33:5c:5d:06:45:c0:af:67:2c:a1:1b:fa:59:c3:b2:
                    89:5c:ec:23:f5:36:9c:c2:a5:86:2e:49:0e:08:7d:
                    8a:1b:16:8d:1b:17:98:96:87:c6:cc:ce:a0:83:13:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FD:FD:95:FB:B0:00:9B:18:00:42:7C:3D:D9:EB:5E:6F:22:B6:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/cad8fe8a-2d46-3dab-a576-1e4e6790edad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.67.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ee:8b:6c:df:c6:c9:f0:00:49:0f:3d:ba:2c:fb:96:39:30:
         50:65:06:c9:5e:8d:c6:fd:6c:2c:60:1b:fe:40:a5:de:ad:9d:
         61:52:23:59:2a:b3:12:90:e5:0c:b6:e4:4f:a3:4a:29:83:d1:
         0c:dc:79:71:df:e9:e8:15:f7:44:04:6b:5d:0b:61:67:60:38:
         09:c7:0d:80:c0:50:9d:84:61:b4:1a:94:4b:4c:3a:d4:73:94:
         19:bc:7e:93:c3:21:7f:cd:d5:7e:e2:b2:c3:25:57:4c:e4:8c:
         c9:43:16:e1:7e:75:1f:e1:b3:01:8e:ec:91:ab:a2:9b:42:8c:
         1e:1b:66:47:f2:2d:2a:2f:63:f6:a3:1f:c6:c3:c8:8c:8c:a1:
         11:07:88:40:34:db:d2:e2:0b:69:b2:17:62:04:8e:e6:56:fb:
         7f:d5:98:39:3c:89:0b:b3:91:1c:b1:08:95:aa:ce:9c:6e:1b:
         7a:3d:df:23:81:4f:20:a3:a2:14:c3:7b:a2:b7:26:42:26:00:
         3f:82:a1:39:d2:e3:43:ce:d7:67:1a:22:a1:96:69:78:b1:2d:
         7e:2b:fa:3a:81:cb:d0:d5:3e:8f:53:32:09:a3:6e:8a:cd:83:
         ee:47:49:11:c4:5d:13:e6:b1:6f:d4:5b:dd:1d:b8:80:8a:9b:
         37:54:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:21:42 2025 by rpki-client