Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/00fd0ec8-504c-3dfc-a5a7-b3bc21a6c0af.roa
File:                     00fd0ec8-504c-3dfc-a5a7-b3bc21a6c0af.roa (raw, json)
Hash identifier:          bSiMdokKYfQv4d3TMcautbWMUbhvuERoXy5l46JonWs=
Subject key identifier:   50:E6:C2:BC:82:DE:A6:51:7B:9D:7D:47:AC:0C:BA:D0:72:1B:2D:8E
Certificate issuer:       /CN=95bf95d5-1c9b-4cea-8142-cc1a4699c7a6
Certificate serial:       010D0C9F43285848186763E76D25543AF5332280
Authority key identifier: 2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/00fd0ec8-504c-3dfc-a5a7-b3bc21a6c0af.roa
Signing time:             Wed 04 Dec 2024 13:54:36 +0000
ROA not before:           Wed 04 Dec 2024 13:54:36 +0000
ROA not after:            Tue 04 Mar 2025 13:54:36 +0000
asID:                     14325
IP address blocks:        69.64.96.0/20 maxlen: 24
                          209.25.208.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:67:63:e7:6d:25:54:3a:f5:33:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95bf95d5-1c9b-4cea-8142-cc1a4699c7a6
        Validity
            Not Before: Dec  4 13:54:36 2024 GMT
            Not After : Mar  4 13:54:36 2025 GMT
        Subject: CN=c1376573-2b1d-41b7-acf4-6391ce04c0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:85:8a:d2:6f:66:c9:11:f3:78:f4:1b:ed:
                    6e:26:a8:96:29:49:38:e9:36:ab:50:b5:ae:e8:1b:
                    c8:f5:90:29:f8:7c:74:be:e2:5d:22:20:31:44:52:
                    48:83:5e:32:2f:0c:c3:05:ed:78:48:9e:6e:03:28:
                    79:8c:b0:e8:a4:f8:1b:ef:f6:47:26:93:19:19:1c:
                    5f:2a:db:34:90:fb:46:79:87:7a:6c:92:d1:10:46:
                    1f:c9:b3:07:83:98:34:99:a2:52:63:ba:2a:d1:50:
                    c8:68:8b:b4:30:59:96:fb:d8:96:ef:3d:e5:70:58:
                    d2:02:40:3f:9b:b5:55:4c:8e:90:af:0b:e6:03:5c:
                    ef:57:4b:32:e1:71:93:67:47:c9:0f:0b:12:9a:4e:
                    a9:69:e7:7d:4c:90:7c:3a:ba:ae:f0:a9:84:73:d4:
                    d7:6a:04:64:2b:51:5b:a1:18:54:9d:3a:9b:42:aa:
                    12:b0:ad:fd:09:89:f0:18:37:48:f9:02:6a:31:a7:
                    a1:1e:11:d5:9f:41:5c:b1:58:ac:ae:77:8c:83:3e:
                    29:d4:f1:74:60:4b:ab:cb:4c:10:05:d1:37:1a:85:
                    3c:6f:52:57:fc:d4:4b:ac:9c:e4:f4:c4:4d:a3:79:
                    b0:14:d2:e8:e1:55:28:2d:08:6f:6d:42:3a:f3:ea:
                    b3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E6:C2:BC:82:DE:A6:51:7B:9D:7D:47:AC:0C:BA:D0:72:1B:2D:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/00fd0ec8-504c-3dfc-a5a7-b3bc21a6c0af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.crl

            X509v3 Authority Key Identifier:
                keyid:2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.96.0/20
                  209.25.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e1:96:95:7f:90:17:f3:b2:87:36:58:7a:2a:55:59:82:20:
         a1:cf:38:33:c6:c2:a0:67:9a:30:a4:d7:37:bf:00:d6:31:83:
         30:2f:a1:b3:7b:64:a2:7b:de:75:e8:ba:cf:bb:be:42:4e:80:
         76:c6:6a:ed:fa:48:36:64:e0:d7:0b:bd:23:a8:e3:f4:ce:b1:
         04:47:c5:3a:91:e0:ee:cf:d1:7c:93:43:81:31:0c:82:d2:b4:
         39:58:df:62:42:5c:5d:40:35:cb:b1:23:9f:bd:3f:3e:a5:c9:
         47:e9:d2:b9:41:50:df:76:a1:14:6b:74:0a:c1:76:b7:c2:38:
         9b:b1:d3:7e:7c:a7:ab:98:4d:96:3f:60:06:8d:7a:3f:8a:69:
         38:75:54:ad:bc:fe:f0:a3:42:36:b3:ba:ed:69:c1:41:c3:96:
         82:77:89:e9:59:bd:10:1e:4d:e6:2a:97:77:3f:81:6b:20:a1:
         d2:c7:b7:ca:9d:7d:a1:74:30:d0:b3:d0:9c:da:a1:34:30:bb:
         43:88:d5:5f:b9:5e:7b:a2:29:5f:f2:52:65:ab:6c:4e:4d:c1:
         11:e6:56:b4:e6:30:d9:fe:3b:d6:ae:17:af:ed:3f:ac:55:b4:
         20:a8:c1:24:36:b1:f7:c1:61:97:d4:fa:28:93:30:cd:71:26:
         ea:af:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:51:49 2025 by rpki-client