Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa
File:                     cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa (raw, json)
Hash identifier:          OdRuEOJWVj0ZXzqmuk00yTPZvcEvryJ7o5fObeJqDsY=
Subject key identifier:   1D:F3:43:85:E4:C5:EF:D1:D1:35:14:84:F9:FA:85:AC:00:C0:1B:6E
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F432858482395437FDFAA1E0980785800
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     11260
IP address blocks:        69.17.201.0/24 maxlen: 24
                          69.17.219.0/24 maxlen: 24
                          69.17.223.0/24 maxlen: 24
                          199.193.230.0/24 maxlen: 24
                          199.193.231.0/24 maxlen: 24
                          207.2.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:43:7f:df:aa:1e:09:80:78:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=6748a449-ab04-47cb-842e-f9d313984d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d2:63:03:37:86:3e:41:3c:b6:5a:ed:be:dd:
                    76:d0:42:45:39:b1:4f:90:85:d3:47:f2:2a:98:27:
                    46:82:da:30:23:a3:ab:c6:c6:3b:64:bd:6c:02:33:
                    00:95:ad:f0:e6:d9:3d:f0:a6:af:8a:77:4a:68:3c:
                    05:1c:a7:03:d7:1e:2b:75:27:87:50:fe:26:bb:af:
                    74:dc:4a:9d:06:72:f9:85:0a:88:bb:65:0b:c6:7b:
                    5e:98:6f:a0:05:50:d9:0e:ae:6f:90:f5:66:79:74:
                    70:ce:61:8e:79:e9:3c:2f:8a:37:8f:7d:06:42:28:
                    58:e2:ee:ce:5a:9d:45:6e:f1:32:cc:02:8b:52:33:
                    19:36:90:07:78:27:bf:f5:3c:57:98:56:a5:c6:d9:
                    39:2e:a7:ee:f7:72:44:49:0c:9e:0e:b5:86:51:e5:
                    42:73:d0:75:68:47:bc:ef:f7:88:7c:06:a5:e6:3d:
                    94:96:0b:a0:35:f3:8e:89:68:d6:da:e0:7f:2d:f8:
                    a1:9d:d6:32:df:e3:df:16:5a:30:53:5b:51:c7:c7:
                    c5:c0:c3:2a:6c:9f:66:89:a4:ff:5c:ef:cf:80:38:
                    b2:9a:33:66:06:77:69:a4:a4:f3:45:5f:54:83:a3:
                    c7:95:d0:93:0d:d9:ab:ea:75:c6:1f:e2:cc:c6:d0:
                    73:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F3:43:85:E4:C5:EF:D1:D1:35:14:84:F9:FA:85:AC:00:C0:1B:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.201.0/24
                  69.17.219.0/24
                  69.17.223.0/24
                  199.193.230.0/23
                  207.2.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:da:75:78:db:6d:d8:c8:c9:0c:eb:a2:82:38:95:08:36:4e:
         05:a2:4c:73:0d:39:a4:23:8a:d3:61:17:bd:fb:30:9b:56:30:
         4b:d0:dc:1c:3b:4e:c1:da:5a:a8:4c:9a:86:14:39:7e:b9:65:
         79:26:0e:cb:9e:57:07:16:4d:c6:c2:df:f1:48:ce:85:5d:12:
         12:c8:e8:10:bb:7b:97:b1:2f:f6:4b:ec:5e:5f:e0:6f:1a:ee:
         69:37:31:a5:2c:fa:74:91:c5:07:58:6d:84:dc:e8:3d:93:0b:
         4d:01:a4:ec:d7:58:10:96:5a:ed:ed:10:15:1b:a9:5b:44:ec:
         61:96:3b:a8:5d:60:82:89:40:5a:af:73:87:9f:db:18:03:09:
         61:72:fc:7e:53:18:17:fd:9e:bd:c4:f2:fd:1c:4f:db:c6:ce:
         8e:ab:2a:80:0b:60:5b:9d:dc:ca:e1:14:07:ac:10:13:3b:9e:
         09:a7:e6:7f:8f:e7:02:29:7c:41:5e:f9:01:1b:1a:54:c5:72:
         c7:63:f3:c7:ba:16:d9:ce:49:90:f8:63:21:9b:60:3e:0c:a1:
         8a:66:86:c3:40:41:11:93:15:ae:d3:67:eb:2c:36:51:bf:32:
         fe:4d:42:41:97:bb:0c:20:27:84:4c:44:dd:98:9d:25:8a:df:
         9d:9f:81:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 14 19:15:19 2025 by rpki-client