Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa
File:                     032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa (raw, json)
Hash identifier:          jknTNTxSJCjSxFhrs+c0DFNpfaAEg/ekND1FF5JgraU=
Subject key identifier:   58:1E:D2:74:44:D7:4A:A7:13:2E:EB:74:0D:20:80:1C:3A:4C:0C:F5
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F432858491AA6D03CBFF3D819D4DED200
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     203
IP address blocks:        20.139.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:d0:3c:bf:f3:d8:19:d4:de:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=9ba17c84-1498-46c7-82df-f73daffd99a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c1:62:83:4d:db:23:25:65:d2:a7:7a:07:35:
                    7d:d5:23:e8:94:59:08:31:c6:72:a0:97:86:36:4d:
                    b6:8e:d7:0d:40:a7:ee:9a:aa:2c:f4:db:d0:4f:6e:
                    cf:16:fa:e0:fd:d2:13:c2:6e:3a:3e:78:84:90:89:
                    c8:81:17:e4:10:4c:7f:2e:8c:0f:7c:27:53:e6:68:
                    14:be:98:7a:6a:91:87:12:8c:7b:a5:fb:84:83:ab:
                    fc:af:d9:30:b4:6a:73:83:f7:7e:f2:6d:05:f9:01:
                    85:69:f6:3d:db:9e:d5:7d:48:6b:f7:19:fd:28:ba:
                    ab:37:09:0a:d5:90:da:1f:91:fe:c6:a3:f4:26:0b:
                    19:dc:b3:b9:ae:3b:0e:3d:ad:ea:50:b2:89:a1:44:
                    a6:da:14:fa:59:fe:83:98:6a:f4:11:21:21:cd:d8:
                    be:18:5e:52:ee:09:74:00:ea:49:a1:2e:0b:ee:e0:
                    78:47:eb:90:c7:b5:b6:ce:7a:5f:c9:08:78:99:18:
                    79:a1:2b:7e:75:46:d9:49:ae:7b:09:9c:dd:51:81:
                    21:c9:b9:63:04:4f:39:c2:25:a7:2b:ad:ee:d1:8a:
                    75:ab:01:b3:f0:16:1f:0d:9e:04:db:0c:0a:08:ef:
                    7d:bd:21:33:d5:d5:16:df:ee:11:f0:d5:49:e6:25:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1E:D2:74:44:D7:4A:A7:13:2E:EB:74:0D:20:80:1C:3A:4C:0C:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.139.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c1:ee:6b:0e:64:d4:93:dc:68:46:5c:0f:45:fb:19:72:5f:
         8a:5b:b4:f9:92:24:12:7d:c5:0e:0d:bd:1c:88:bb:8a:e3:96:
         9f:27:fa:46:33:45:cf:e3:f6:95:17:c2:93:9c:ee:6b:2a:97:
         66:6e:78:73:a5:6e:cd:30:21:db:a0:8c:eb:c1:d6:58:2b:81:
         9e:33:60:9c:9b:15:83:48:f5:a5:6f:db:0e:f8:04:7d:e4:d5:
         d4:09:d4:6f:28:e1:cf:5d:5d:30:d2:cc:a8:1e:97:08:3a:5b:
         f8:eb:a7:56:06:98:51:78:f0:15:ba:06:02:5d:81:9d:ee:fc:
         f4:04:b8:ef:fa:b5:60:60:75:22:81:fb:e4:e5:01:6d:6e:7e:
         ba:0c:b1:99:42:fe:04:24:f4:86:6b:e3:65:ff:3b:f0:b0:1c:
         b3:19:b0:08:c8:fd:da:28:67:2b:1e:dc:de:60:ff:64:63:e2:
         73:13:31:1c:b5:5a:2a:19:60:9e:3b:9b:f5:fd:c2:e4:24:df:
         c2:bd:87:40:6f:7a:fb:f8:24:68:84:51:47:2a:75:c5:c4:28:
         ad:0a:45:df:d2:a4:05:ca:9e:6b:93:2e:0f:ff:ba:a5:92:86:
         06:f9:55:f5:6f:07:5a:09:80:29:8b:d2:3a:a1:37:82:7f:96:
         6d:26:ce:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:41:55 2025 by rpki-client