Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b246265c-0cc7-3bef-a3f1-1164e9d0aeae.roa
File:                     b246265c-0cc7-3bef-a3f1-1164e9d0aeae.roa (raw, json)
Hash identifier:          PySNl5CvzkHzqeV4P43r9L22eUZk6wyxDnYxShzrgTQ=
Subject key identifier:   46:91:6E:F3:17:38:6C:AC:26:F2:DB:28:18:73:DB:49:5B:11:EB:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584807AA8204FDD5D37C78055980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b246265c-0cc7-3bef-a3f1-1164e9d0aeae.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     6167
IP address blocks:        174.238.20.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:82:04:fd:d5:d3:7c:78:05:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=38ff365d-ec45-4a96-aec5-505d6f8a1989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c9:36:e7:f5:bd:a7:be:50:09:d2:5d:55:26:
                    c5:6d:5f:b4:c3:03:96:0d:28:23:bb:db:52:6b:ad:
                    53:eb:a4:a2:21:e3:9c:32:77:4b:f1:aa:a9:bf:be:
                    5f:8f:c7:be:c2:a2:62:ca:49:4d:a8:80:30:4d:cc:
                    a1:d3:3d:d2:e1:cb:4a:a5:32:68:58:d6:18:4e:04:
                    23:ff:cc:56:33:76:9a:9d:0d:5e:14:1f:e6:79:41:
                    ff:da:f7:30:55:28:e1:fd:5b:68:79:bd:76:93:f9:
                    88:39:22:18:c2:40:2d:01:43:dd:1e:71:83:85:dd:
                    87:40:3f:1f:a9:2b:f0:f3:31:41:89:76:73:73:5a:
                    45:9b:82:4c:da:3f:6e:f2:da:30:7e:85:19:77:17:
                    b8:5c:9d:7a:7e:90:ab:44:a4:18:9a:8c:9a:42:4b:
                    ac:4b:4c:b0:8a:bc:24:e4:7a:cf:18:50:a1:a5:f7:
                    5d:bd:9f:ef:52:a1:08:26:19:ef:12:ec:1f:b2:73:
                    00:e8:1c:b7:69:b6:39:b9:f4:05:da:0c:e1:03:9d:
                    ac:b1:3c:bf:55:c3:66:56:5c:45:c9:dc:61:08:17:
                    34:ad:53:01:a0:ea:a9:58:7a:08:1c:fc:3c:5a:0d:
                    9d:97:70:97:dd:76:23:4a:7d:52:3c:53:65:f6:1b:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:91:6E:F3:17:38:6C:AC:26:F2:DB:28:18:73:DB:49:5B:11:EB:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b246265c-0cc7-3bef-a3f1-1164e9d0aeae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.238.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:84:14:8c:72:a6:dc:9f:86:9b:5d:16:85:19:89:da:5f:33:
         e5:6e:ae:8b:61:14:7c:8e:7a:a5:95:a8:99:55:c1:af:d6:d8:
         b0:a2:36:5d:1e:3e:65:68:cc:8c:23:ea:b9:3c:63:d5:75:d0:
         83:56:06:3b:2a:6e:1f:44:a0:5c:bb:05:97:44:24:03:c0:5d:
         91:46:27:6b:a3:8f:33:c3:5e:a9:25:58:8e:00:eb:05:24:05:
         1f:07:29:10:44:e7:73:3a:4d:39:3a:9b:40:38:ae:1b:e8:e1:
         2c:a3:f2:30:71:99:24:77:1d:20:1a:da:25:c8:fc:c4:c6:fc:
         c7:fc:ea:e9:3b:f2:b4:6d:c1:a7:95:20:3b:6e:da:3b:ef:91:
         fd:c7:d3:3d:64:d0:4e:84:7c:67:6c:2c:3c:d8:d8:a6:4b:76:
         b5:b2:1b:76:f1:b8:2f:58:46:ca:2a:32:a0:33:e8:0b:26:f2:
         56:68:c7:2a:3a:3e:0f:ab:ce:69:6d:49:b6:8a:1e:04:60:87:
         e1:f4:55:0a:55:0a:d5:70:b3:96:f3:2e:e9:ae:55:41:fc:44:
         f1:49:91:99:c9:21:22:b1:d2:93:fd:01:17:27:f7:e4:f8:8f:
         0e:f3:07:f8:fa:a9:ca:2b:80:a8:fc:82:03:bf:72:66:f7:d1:
         c3:86:aa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:39:27 2025 by rpki-client