Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f60ea378-24c2-345c-a499-9160b004d9e9.roa
File:                     f60ea378-24c2-345c-a499-9160b004d9e9.roa (raw, json)
Hash identifier:          U1pFf2boYO3g16z9RMP7WXgFaHPdzHgNXgbF/+3luiM=
Subject key identifier:   5D:82:2B:14:BF:D5:59:92:53:AB:EB:3B:D1:B7:13:29:6D:6F:8F:30
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C58435FAF333ED3873D7B890
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f60ea378-24c2-345c-a499-9160b004d9e9.roa
Signing time:             Tue 04 Feb 2025 14:07:31 +0000
ROA not before:           Tue 04 Feb 2025 14:07:31 +0000
ROA not after:            Mon 05 May 2025 13:07:31 +0000
asID:                     30036
IP address blocks:        173.22.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:84:35:fa:f3:33:ed:38:73:d7:b8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 14:07:31 2025 GMT
            Not After : May  5 13:07:31 2025 GMT
        Subject: CN=c6d31d4f-2a90-44bc-a545-9843d6f4a128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0b:95:3c:b6:60:2e:49:1b:4a:3c:c3:b0:01:
                    75:fc:3d:9c:b1:1e:88:6f:6f:c8:59:f0:da:3b:a2:
                    ec:0e:24:0d:a4:a0:48:57:7e:89:c2:a9:17:e2:61:
                    36:51:5a:1c:ab:89:75:c9:18:0e:c4:34:f1:1c:ca:
                    b8:69:a6:e7:fb:3a:6e:c0:85:34:ed:31:f1:77:4a:
                    8a:ef:0d:0d:b1:b2:78:89:46:86:00:07:7a:87:77:
                    29:0e:1b:93:f1:f0:4e:79:c1:11:83:e1:3b:5d:c9:
                    1c:af:37:d9:ba:98:14:53:f3:93:6c:11:94:16:be:
                    9b:fc:90:23:d6:33:a1:40:9f:fb:cf:3b:5b:e3:4b:
                    e9:4a:53:49:bd:b8:a0:13:08:f0:e3:0f:51:20:bd:
                    f1:80:35:b2:75:ed:7f:48:32:3e:87:a0:88:c0:db:
                    a1:91:a9:a9:66:9c:a3:aa:92:1b:f4:e7:7e:25:fa:
                    e1:fa:ed:8a:8f:84:49:86:1b:d7:9e:01:95:b8:e8:
                    6b:23:08:49:a6:c0:85:d6:a9:af:ff:22:6a:43:aa:
                    fa:b4:6a:06:1b:d2:3d:a8:52:cf:7d:7b:ba:02:ee:
                    90:75:b8:29:f3:24:cf:9d:ef:0d:28:de:1f:d2:03:
                    c3:da:94:66:2f:88:63:b2:5e:8d:41:ee:54:7c:03:
                    7c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:82:2B:14:BF:D5:59:92:53:AB:EB:3B:D1:B7:13:29:6D:6F:8F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f60ea378-24c2-345c-a499-9160b004d9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8f:9c:a7:26:bf:02:0f:39:a2:e1:c0:9d:39:b5:91:e0:7e:
         77:a1:e7:5c:d5:6a:bc:1c:fb:c3:bd:69:4b:7d:87:ea:75:ab:
         fd:7d:0a:eb:2e:dc:ac:c9:ba:5c:48:8b:80:42:ed:eb:f0:68:
         4f:ad:c2:fd:1e:33:63:86:d5:b2:80:86:a4:4f:48:01:ba:a5:
         09:a9:ed:01:96:eb:08:37:83:48:ed:f5:29:a1:07:31:2c:f0:
         39:f3:16:73:b1:31:ec:36:ae:de:ca:91:62:06:cb:5c:14:0d:
         02:6d:db:40:a7:27:e5:92:8c:19:f5:11:c3:18:39:7c:d0:2c:
         ce:48:77:72:4d:eb:42:b1:f3:55:ce:43:b8:33:60:46:70:81:
         1b:a9:91:84:95:0c:9e:4d:ad:0d:34:e7:30:8b:e8:24:59:66:
         96:29:ce:28:ad:b7:e1:e0:88:c4:40:2d:94:cd:a5:d4:a5:0c:
         15:ff:1e:7a:c2:10:a8:d0:82:44:17:b2:76:b4:f7:45:ac:1a:
         8c:24:0e:da:b2:fa:dd:ae:f8:06:45:c3:b5:9a:ae:8c:19:f2:
         e9:7c:2d:11:4f:d7:60:1f:ce:3d:cb:84:3f:35:60:a1:97:e2:
         26:c3:32:16:10:14:48:b2:89:4c:41:09:89:de:25:5e:1f:b4:
         54:aa:ed:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:47 2025 by rpki-client