Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/9f73b1b0-941e-3f42-871e-535df2f1c194.roa
File:                     9f73b1b0-941e-3f42-871e-535df2f1c194.roa (raw, json)
Hash identifier:          G8kvodEgSsL5tcQOVYfL152v/1mzCA+Y9uDuIAVNHpg=
Subject key identifier:   BD:61:A2:2E:62:AD:97:D7:9A:A2:BD:9F:8C:B8:4E:91:56:9F:61:9B
Certificate issuer:       /CN=60200506-e0ba-4a7d-b096-a86957fd76ee
Certificate serial:       010D0C9F4328584871C07D7082EB1D3B131F1680
Authority key identifier: CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/9f73b1b0-941e-3f42-871e-535df2f1c194.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     32157
IP address blocks:        199.212.8.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:7d:70:82:eb:1d:3b:13:1f:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60200506-e0ba-4a7d-b096-a86957fd76ee
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=89f38654-5a30-4f86-bbe9-0bfd96ab7e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c5:b2:4a:91:07:47:d9:0a:c1:55:c7:e8:0c:
                    ba:f1:63:c6:be:44:54:a6:a4:d7:0a:29:32:e0:2f:
                    e2:33:62:4e:78:86:ce:c1:d2:69:9e:0a:ef:08:65:
                    9e:50:37:33:a2:bb:a4:ff:65:0f:e6:f1:5c:01:c8:
                    25:18:29:64:6c:f2:10:52:aa:16:8b:c4:d0:0c:dc:
                    75:87:95:ab:36:5a:c0:ab:17:0d:0b:43:8d:4c:75:
                    35:2e:ee:d1:0b:39:9d:e7:65:2d:c2:33:e5:3f:d8:
                    42:df:cb:81:e1:db:7d:6d:54:d0:76:10:b5:5a:b8:
                    70:b4:33:ce:3b:d7:7e:64:0e:05:c6:b8:bd:c8:6f:
                    e4:8b:13:73:39:14:ce:6e:c6:6c:c3:16:d5:d4:1e:
                    3a:24:1e:a9:3c:f8:46:46:af:a6:90:ee:aa:0c:e3:
                    17:9c:f7:c4:93:06:94:f1:b0:87:6a:22:e3:20:9e:
                    76:83:a9:c9:01:84:45:55:34:39:46:d5:bc:34:98:
                    e7:99:f2:1d:7e:88:34:28:03:54:3f:ac:7b:03:a2:
                    33:8d:e3:6b:46:80:e4:97:c8:7f:eb:35:83:bb:e4:
                    26:90:e6:d2:ca:cb:a2:ae:da:8a:a5:5b:95:ea:06:
                    51:d9:df:93:79:e8:59:c8:ad:02:a0:e5:05:18:d7:
                    bf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:61:A2:2E:62:AD:97:D7:9A:A2:BD:9F:8C:B8:4E:91:56:9F:61:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/9f73b1b0-941e-3f42-871e-535df2f1c194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl

            X509v3 Authority Key Identifier:
                keyid:CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:9b:c6:63:b2:81:3e:12:c6:8e:d1:64:80:5e:84:81:75:f5:
         ed:77:67:a7:23:b4:e6:49:60:cf:5e:0a:51:d4:24:b2:83:bf:
         5d:0c:ff:fc:eb:e5:44:71:5b:54:88:a5:f4:c1:93:38:35:26:
         50:3f:73:ff:61:81:9b:0f:02:a9:d1:34:52:f3:3d:aa:5e:45:
         74:30:d2:8f:ec:1f:03:c6:8a:5b:a3:f7:9b:1f:b9:f6:7b:74:
         81:38:6d:1b:01:bc:66:c4:1d:98:c4:c4:f6:f3:19:14:82:94:
         2d:05:0b:a5:e9:45:4a:fb:bf:ed:dd:30:c2:79:46:1f:33:4a:
         49:8c:b8:2b:cf:53:f7:d0:ef:f2:60:b1:6c:25:50:e3:6e:90:
         f8:91:19:7a:b4:31:df:53:0c:dc:17:10:72:f3:41:0f:bb:dd:
         86:37:0e:71:e6:3d:08:8a:3c:90:a0:be:a7:5b:33:cf:30:32:
         2b:2d:2b:ea:72:fb:ee:e5:49:7e:f6:94:bc:57:92:94:16:46:
         3a:ef:cf:55:78:51:74:0b:63:b0:6b:c6:59:ed:f9:fe:a2:3a:
         9b:f3:90:f4:8e:4f:ac:5e:61:55:44:26:1a:be:01:40:e4:44:
         cf:6b:7e:cd:36:a1:af:7a:30:66:8c:da:a0:aa:d6:fd:b4:32:
         b9:0a:54:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:07:37 2025 by rpki-client