Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5820be6a-aafe-3157-b6b0-206572881d45.roa
File:                     5820be6a-aafe-3157-b6b0-206572881d45.roa (raw, json)
Hash identifier:          SRPMEVS1DIjTaW2U0FP8ZjF0QMyEtgI58N4hxUe1/Ak=
Subject key identifier:   5A:A7:84:42:4D:88:4A:42:96:3F:85:E4:C9:05:A2:6F:DC:3B:02:7B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C2634C8BABAF2CA9A4D24900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5820be6a-aafe-3157-b6b0-206572881d45.roa
Signing time:             Mon 03 Feb 2025 11:13:47 +0000
ROA not before:           Mon 03 Feb 2025 11:13:47 +0000
ROA not after:            Sun 04 May 2025 10:13:47 +0000
asID:                     30036
IP address blocks:        173.22.109.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:63:4c:8b:ab:af:2c:a9:a4:d2:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:13:47 2025 GMT
            Not After : May  4 10:13:47 2025 GMT
        Subject: CN=827ce01f-a328-4a0c-bed0-22e361bfa5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:c3:28:b3:5e:95:c8:cd:9e:9f:fe:92:de:
                    fb:da:d3:60:aa:31:ba:8b:62:03:d4:8e:0e:7a:f1:
                    ea:e8:57:7b:36:a0:1a:63:09:75:ef:81:5a:11:37:
                    f9:2a:78:24:58:c6:13:20:96:95:b4:87:61:e3:60:
                    7d:cb:cc:14:6a:97:15:a1:5a:85:ce:1c:72:18:ba:
                    35:58:72:36:a3:ba:dd:05:52:61:de:71:90:00:43:
                    d0:3a:25:f8:ed:55:bf:c3:db:27:44:20:9e:ad:ba:
                    e4:b8:61:6c:2e:57:ad:ba:d6:7c:4b:11:74:f6:af:
                    a6:1b:ec:23:45:ad:e5:30:bb:00:9e:d1:c5:cc:be:
                    fa:a8:65:b5:99:3f:d2:be:67:d9:37:b3:ef:75:0b:
                    1f:49:c6:09:db:2e:3f:02:f8:b8:80:2b:62:ff:d1:
                    1f:88:ce:52:08:11:d5:cd:ca:ab:52:f8:c0:15:9e:
                    7f:db:59:fe:58:cc:d9:8e:e8:4f:86:c3:25:39:88:
                    e1:de:d7:e9:2b:b8:0a:5f:fd:c8:e0:f4:60:33:15:
                    c4:1f:e7:91:de:63:95:46:58:91:87:9a:94:4b:ab:
                    00:d4:e6:6a:2c:4b:5c:7a:f4:2e:13:eb:b9:b4:2e:
                    55:7d:89:77:52:d1:8e:da:8e:50:1f:7b:4f:33:71:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A7:84:42:4D:88:4A:42:96:3F:85:E4:C9:05:A2:6F:DC:3B:02:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5820be6a-aafe-3157-b6b0-206572881d45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:76:4d:47:1a:49:14:db:6f:fc:08:4b:78:37:1a:08:66:
         30:23:a5:72:63:f2:1a:6f:80:13:4f:70:eb:b1:9d:cd:4b:29:
         2a:42:93:5b:c9:35:07:4d:46:ac:98:c9:4d:65:2d:ca:15:1e:
         a2:94:58:8e:90:81:f7:e6:f0:c4:bb:80:03:94:ca:53:82:52:
         d8:22:22:cd:4a:4d:39:ea:4b:0e:48:df:c1:fc:86:32:37:dd:
         5d:e2:65:3a:f5:4f:61:1c:29:3d:55:7a:1a:4d:81:6c:c5:8f:
         5d:cf:6e:dd:9d:46:26:29:37:9f:ed:71:cf:6c:9e:78:6b:5f:
         36:e9:c3:51:11:73:1c:b8:a0:5e:1a:65:90:b6:87:a4:96:18:
         f0:1d:f3:82:9f:10:4f:55:c6:26:05:58:b1:b8:24:ea:4e:fb:
         46:ba:99:ec:14:0b:ad:78:28:1b:a8:67:fa:20:23:a0:7b:35:
         70:c6:84:a2:0d:10:81:ae:8e:09:ad:15:3b:b3:af:b2:0e:b4:
         31:7a:4f:f1:45:b2:48:7b:6e:94:ed:20:1e:59:01:03:7c:08:
         a5:44:20:e1:af:e3:a2:63:4e:84:ac:92:98:19:d8:b2:08:53:
         20:2a:b3:6f:f1:a6:21:64:83:c0:4f:6f:0c:5c:6c:fd:0f:74:
         05:40:04:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:00:51 2025 by rpki-client