Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/6de7239f-6a57-39d4-bd65-a97148b222c8.roa
File:                     6de7239f-6a57-39d4-bd65-a97148b222c8.roa (raw, json)
Hash identifier:          cQwZhqkbwK2nrfY/6ahjXFM95RnUOox2aFhSOsN+s8o=
Subject key identifier:   EC:D7:9E:14:D3:EA:92:14:3D:D6:AB:09:50:5F:35:00:E5:A2:B9:CB
Certificate issuer:       /CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
Certificate serial:       010D0C9F432858494B640E35C791B33E572A9B40
Authority key identifier: 77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/6de7239f-6a57-39d4-bd65-a97148b222c8.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     36008
IP address blocks:        162.220.191.0/24 maxlen: 24
                          216.19.84.0/24 maxlen: 24
                          216.19.86.0/24 maxlen: 24
                          216.19.92.0/24 maxlen: 24
                          216.19.95.0/24 maxlen: 24
                          2620:a::/48 maxlen: 48
                          2620:a:d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:0e:35:c7:91:b3:3e:57:2a:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=86931262-a9a5-4243-b839-4fa4b04e9071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3f:5a:56:65:24:82:d1:16:b0:9d:46:21:73:
                    6a:65:3b:3a:b7:ef:51:d2:ff:09:9d:b9:26:42:47:
                    3d:58:b9:2d:f0:c4:f5:09:0d:b8:f1:27:2a:d3:3f:
                    c6:5a:df:61:e4:73:93:82:80:2a:4d:f0:12:ec:f7:
                    c9:c5:d3:2f:23:23:36:c1:60:ad:02:6c:3f:f4:15:
                    f6:62:26:e6:01:d7:ef:0a:68:1b:57:30:53:ea:82:
                    f2:8f:8d:f8:a8:2a:a3:a2:b7:ce:c6:03:80:ff:e5:
                    64:ec:3c:e4:21:e1:6a:2c:fd:65:d8:e7:5f:62:42:
                    98:ee:e4:7e:8b:93:d3:dd:62:e4:10:3f:bc:49:2b:
                    09:e9:e6:8a:3e:ba:93:f1:20:31:45:62:05:86:ad:
                    9b:ba:2f:35:0c:cf:13:9a:69:05:de:3b:32:aa:4e:
                    72:99:9f:8a:8a:d9:da:61:62:03:9d:11:a5:a1:ac:
                    37:8f:88:1a:e5:39:7b:85:23:8c:0f:68:69:a4:72:
                    1e:e9:6b:1f:d3:a1:6c:b9:43:35:6a:fc:f1:f2:10:
                    87:92:95:40:a3:36:8d:41:b5:e2:a4:36:47:6a:ea:
                    45:21:38:c9:ee:32:93:90:ca:bc:73:12:93:fe:b5:
                    6b:3a:ab:8d:de:c4:a9:52:3d:57:fc:6c:a1:b2:bb:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D7:9E:14:D3:EA:92:14:3D:D6:AB:09:50:5F:35:00:E5:A2:B9:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/6de7239f-6a57-39d4-bd65-a97148b222c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl

            X509v3 Authority Key Identifier:
                keyid:77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.191.0/24
                  216.19.84.0/24
                  216.19.86.0/24
                  216.19.92.0/24
                  216.19.95.0/24
                IPv6:
                  2620:a::/48
                  2620:a:d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:0f:9f:b3:5f:4e:53:82:13:4b:5a:80:0a:b4:31:d7:fb:75:
         a0:e1:ae:10:65:9e:25:7d:fb:15:84:3a:ed:1a:07:ac:87:7e:
         49:74:31:b8:37:c2:5b:6f:06:0b:db:a2:5c:49:f5:46:cb:14:
         01:46:a6:85:7d:6a:c5:41:0d:fd:ff:c6:e6:d7:57:27:bf:ba:
         b6:62:49:37:9d:3c:3a:76:96:5a:2d:5b:fa:e4:a1:4b:4f:21:
         21:ac:ba:02:96:39:5b:7c:51:d3:69:d2:a0:05:c4:64:27:70:
         45:23:a4:fd:18:4d:fe:91:74:e9:74:4f:42:c9:60:9d:a9:00:
         be:ef:fb:29:57:98:38:dd:71:cd:98:e5:0e:d4:cf:ef:66:92:
         d6:39:db:cd:91:c3:fc:fd:a5:b6:f5:62:cb:b1:19:c5:22:b1:
         6e:19:8c:82:54:cc:af:98:f3:59:51:98:2c:c3:5b:65:1f:e4:
         63:6c:8b:6e:90:bd:77:e4:c6:92:4b:47:2a:67:6e:92:7d:3a:
         b3:4a:37:35:da:ad:53:94:54:d9:38:0e:ab:9e:55:e3:d8:38:
         9e:bc:5e:0b:b9:bf:84:8b:3f:13:14:ff:64:1b:e7:0c:62:6f:
         2e:17:85:51:16:ba:5d:24:38:24:6b:b7:ab:52:01:88:bf:ea:
         b8:bc:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:27 2025 by rpki-client