Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/64c65df4-753e-36c5-80bf-7109c52b9941.roa
File:                     64c65df4-753e-36c5-80bf-7109c52b9941.roa (raw, json)
Hash identifier:          XkFGedn3N3TypCOy6r6e37M6Q9mjmaWm23JDkNqF168=
Subject key identifier:   63:17:15:BE:C8:00:21:E7:AB:81:11:34:DF:F1:BE:7B:FB:8C:EC:C0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584829E30B6C572ED2EA715E4280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/64c65df4-753e-36c5-80bf-7109c52b9941.roa
Signing time:             Tue 10 Dec 2024 20:12:30 +0000
ROA not before:           Tue 10 Dec 2024 20:12:30 +0000
ROA not after:            Mon 10 Mar 2025 19:12:30 +0000
asID:                     6167
IP address blocks:        97.207.152.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:29:e3:0b:6c:57:2e:d2:ea:71:5e:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 10 20:12:30 2024 GMT
            Not After : Mar 10 19:12:30 2025 GMT
        Subject: CN=c9752271-704c-497d-9be5-9288aa6b6759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:71:b8:8e:e5:68:61:31:df:ef:b7:1c:0f:90:
                    f2:9d:46:8c:46:b3:72:db:b9:57:58:fc:43:6c:61:
                    36:d7:13:da:f1:76:52:44:88:37:0b:67:47:c4:bf:
                    8c:32:f1:98:2d:f2:d6:7e:2c:81:48:13:7d:2a:af:
                    eb:59:81:47:a9:29:ba:ac:93:14:24:77:b1:7b:51:
                    f5:c1:83:ef:78:52:9d:76:ea:4f:95:41:70:6e:93:
                    2a:fc:06:8a:b3:34:78:2b:27:d7:53:95:94:51:b8:
                    e8:da:b8:77:87:ec:3a:51:0c:cf:c7:6b:23:c4:42:
                    64:16:4b:aa:d3:60:6b:ce:c4:97:ba:0c:ba:76:3e:
                    66:1b:35:01:f6:c3:95:bb:4f:7c:0d:00:f0:f8:b5:
                    b6:d8:d3:e7:c3:6f:ae:6b:fd:e4:8b:85:b6:56:17:
                    fa:d8:9d:cf:76:0b:42:25:78:ba:49:d9:1b:f8:f4:
                    4e:b3:b6:8a:e8:00:09:63:d2:60:5b:e2:99:b3:db:
                    20:c4:92:c7:4a:c9:6e:d5:29:80:ae:a6:ea:37:b1:
                    16:cc:23:84:a7:79:3f:48:17:09:27:45:c6:6f:a8:
                    bd:4f:5c:c5:68:b3:8b:eb:6a:02:32:74:b4:6c:f2:
                    2d:e7:68:6f:fe:a3:c5:b2:10:cb:c5:15:ed:2f:82:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:17:15:BE:C8:00:21:E7:AB:81:11:34:DF:F1:BE:7B:FB:8C:EC:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/64c65df4-753e-36c5-80bf-7109c52b9941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.207.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:1a:80:9a:b1:50:28:73:39:fb:8b:fc:8d:24:8a:fb:e2:3b:
         d7:3a:b4:4b:8c:52:1c:dc:f5:4a:bb:56:86:bc:92:af:b7:12:
         41:b8:be:e0:eb:4f:31:1f:6a:d9:72:12:5f:ec:96:7f:16:e3:
         c3:87:cb:8e:fd:fd:29:24:97:d7:1a:bb:d9:41:d6:7d:f1:2f:
         01:11:03:fa:2f:a1:46:50:2b:71:48:e6:b8:38:54:e6:2f:f5:
         f8:bf:4f:bf:4c:34:55:0d:47:74:b7:28:5d:ab:75:e7:c0:a8:
         7c:d1:b5:7c:90:71:28:e2:ec:e2:0e:42:9b:65:5c:70:77:94:
         b8:eb:bc:49:5f:cf:04:9a:8a:81:3f:6f:1b:fa:0c:8e:c2:59:
         9b:81:e3:e0:9a:e1:cb:66:b7:69:f6:13:84:8c:1b:31:c6:0f:
         a7:b4:2d:d2:61:70:f8:6d:b6:c7:5f:35:ba:a2:63:13:ef:12:
         00:18:7e:68:22:a8:71:c2:d6:2e:c9:8c:38:f2:b8:c0:72:d5:
         06:f2:91:b3:69:b4:ca:da:57:da:ed:c3:b9:8c:85:50:a2:c1:
         69:79:a1:29:0a:92:73:27:63:83:0e:10:31:c3:61:a9:37:e0:
         bb:a3:5f:15:ce:0d:34:00:a9:de:64:33:6d:d2:12:d3:6c:b9:
         17:56:7b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:26:10 2025 by rpki-client