Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88c29cb3-d0f8-3556-894d-ea5396a34670.roa
File:                     88c29cb3-d0f8-3556-894d-ea5396a34670.roa (raw, json)
Hash identifier:          Kmcv0Gr3nxiFP5+3GW1h+lVZu4p8ab1Syjc9XMei9kw=
Subject key identifier:   76:DB:D5:2D:21:B5:F7:6C:2C:55:B4:D4:9C:7D:29:FF:95:35:10:09
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C57D588AA981FB7EB0D8ED80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88c29cb3-d0f8-3556-894d-ea5396a34670.roa
Signing time:             Tue 04 Feb 2025 13:53:41 +0000
ROA not before:           Tue 04 Feb 2025 13:53:41 +0000
ROA not after:            Mon 05 May 2025 12:53:41 +0000
asID:                     30036
IP address blocks:        173.22.240.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:7d:58:8a:a9:81:fb:7e:b0:d8:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:53:41 2025 GMT
            Not After : May  5 12:53:41 2025 GMT
        Subject: CN=8a9522a6-18c2-448a-9064-4c9cebd931d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:00:81:f9:04:e0:62:f5:41:70:57:cc:4a:
                    7f:41:43:e5:c0:bf:ba:8b:20:5d:9d:88:a2:ee:bf:
                    42:bb:a8:81:36:91:a8:49:bb:94:5c:0f:06:15:ee:
                    75:65:7a:21:be:93:06:11:54:42:21:13:3a:ac:88:
                    44:c5:00:0f:df:37:4f:da:5e:d6:19:ad:fd:0f:cd:
                    ec:a4:d9:3e:28:b0:d1:35:25:47:b1:aa:e5:65:2e:
                    e3:8b:40:be:8a:d9:e7:59:58:19:20:9b:ff:f1:a7:
                    28:bc:e2:0c:f4:9f:ce:d2:fa:f6:df:ab:ea:a6:23:
                    56:33:9c:6f:63:94:75:07:a1:c1:71:a7:c3:ed:4a:
                    e0:4c:80:da:d0:12:b3:86:e6:58:dd:48:de:1f:7c:
                    87:09:f4:1a:23:26:59:fa:28:64:78:7a:71:a5:f2:
                    1c:93:5e:f4:a5:3a:28:aa:d7:b8:0f:67:fe:de:28:
                    d8:d3:c2:05:31:03:a7:5a:82:de:bb:64:f7:bd:e0:
                    1c:66:c5:3d:11:7b:8c:d2:e0:a0:0c:bf:b4:6f:45:
                    9c:5b:82:c3:cd:1d:11:25:ef:5b:82:75:b0:4d:05:
                    71:0d:c3:37:01:f7:ff:9f:7f:01:82:b8:8f:2c:5c:
                    98:20:74:42:f2:8b:64:82:39:ff:59:3a:71:46:1b:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DB:D5:2D:21:B5:F7:6C:2C:55:B4:D4:9C:7D:29:FF:95:35:10:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88c29cb3-d0f8-3556-894d-ea5396a34670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b5:16:52:20:82:00:29:af:c8:61:b9:ec:95:63:a6:44:99:
         96:a4:e8:d7:91:f9:b1:97:23:ed:65:6d:54:21:e0:fd:5d:4f:
         9d:cd:bd:14:68:d5:64:4a:df:4e:24:b2:60:33:8a:b4:7b:ae:
         60:27:56:98:bd:3b:1e:9f:2a:72:78:a5:55:3e:95:39:af:86:
         7a:9e:40:29:fb:49:85:81:88:05:65:c4:a4:e7:ff:b4:66:a7:
         0b:f1:97:61:c3:fb:57:12:bb:a7:37:6c:17:68:fb:5d:3b:be:
         f0:ff:d4:43:9f:2b:cb:d8:57:40:f1:28:5b:11:53:30:f0:a1:
         5b:6b:16:68:6c:16:44:31:5f:1b:8e:14:2b:bc:2f:e4:02:30:
         90:d5:8e:a9:40:d9:2c:70:83:f2:cc:43:16:2d:e5:36:f9:4f:
         e6:be:5c:0e:59:e2:7a:a5:7e:e2:e2:fa:f3:48:04:d1:99:76:
         32:af:d4:2e:e3:98:d6:8a:86:03:df:c2:37:fe:85:f1:84:4c:
         39:54:d6:66:ed:6f:dc:0f:d0:8d:83:49:e3:05:74:af:b7:89:
         e1:75:50:cf:1f:b1:28:fd:b2:65:25:c2:c1:3b:1b:25:5c:52:
         8e:aa:9d:1d:b1:96:c5:08:c6:80:38:36:0e:f9:8c:65:2a:e8:
         db:87:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:00:58 2025 by rpki-client