Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2fcd24bd-1642-37ab-b06d-4d906b07bbac.roa
File:                     2fcd24bd-1642-37ab-b06d-4d906b07bbac.roa (raw, json)
Hash identifier:          hg1I5sedEEwTiTwfiguJN+7gNKArKjGuNP/Tz5ricIc=
Subject key identifier:   72:6E:17:CC:23:CE:BA:3C:55:AD:2D:3A:13:BD:20:79:06:0C:AC:90
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B51FBAF2B42BCA3AB13C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2fcd24bd-1642-37ab-b06d-4d906b07bbac.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     577
IP address blocks:        69.158.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b5:1f:ba:f2:b4:2b:ca:3a:b1:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=d6da38da-18f3-418e-ae77-2f60fe00c6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:68:71:58:68:e7:21:57:d8:82:77:e1:15:b4:
                    f8:a8:c2:4e:13:6e:b9:82:b4:a1:01:0f:36:2f:a8:
                    00:40:6d:c0:b3:0f:6d:4b:78:db:df:bc:ca:c9:d6:
                    40:7a:26:8e:b7:0c:81:1d:1d:2c:78:fb:ca:40:4d:
                    ca:56:ff:37:b7:24:94:11:6a:63:fe:68:0d:3b:0e:
                    82:ec:a7:89:ff:d6:84:eb:78:2f:5e:90:99:f3:63:
                    f5:4b:26:10:3a:66:3a:db:b0:2e:13:8e:dd:6e:02:
                    7b:04:40:3d:46:08:67:f0:bb:35:d1:c0:49:27:0d:
                    24:f4:17:45:8c:22:35:b1:78:fd:c8:9d:79:f5:2e:
                    0a:ff:e9:7b:2a:0d:b9:82:3c:4f:cc:cb:6d:e1:77:
                    6a:7d:b3:29:36:82:bb:a1:8b:e6:f4:4e:95:5c:8b:
                    a2:74:02:30:82:6b:df:14:fa:68:19:3f:0c:36:1a:
                    fd:e8:6a:51:0c:d4:b1:3a:1b:9e:7f:0b:a5:ae:97:
                    76:3f:30:5d:ca:49:e4:9f:68:fe:ac:cb:ec:2c:ff:
                    97:70:ba:19:2d:a7:ce:52:66:bf:f2:c5:aa:3a:23:
                    c4:b1:1e:66:18:11:10:f6:90:85:1e:38:a0:14:6f:
                    bc:ad:4e:6b:51:c8:66:fc:bb:34:2e:55:78:37:61:
                    9b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6E:17:CC:23:CE:BA:3C:55:AD:2D:3A:13:BD:20:79:06:0C:AC:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2fcd24bd-1642-37ab-b06d-4d906b07bbac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.158.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e0:c5:a3:df:70:33:48:d5:2b:4f:38:6c:5f:84:a9:69:70:
         21:0b:29:2f:3c:d0:1a:ec:d9:c4:f9:d7:4e:92:fb:f7:c8:c5:
         f7:e4:84:d4:2a:91:a5:86:57:cc:ff:eb:c7:8e:7a:34:da:bb:
         8c:53:f3:54:d9:a0:46:46:7b:20:f9:64:a8:b1:be:c3:c8:56:
         6c:0b:ab:54:d8:20:b4:16:d2:20:df:45:4e:57:c2:b8:7d:db:
         8b:c3:0f:af:e7:ca:73:80:e4:2b:a7:eb:69:c0:b4:55:a5:5a:
         c1:48:36:3d:19:a0:df:e7:75:68:a7:11:d3:8b:a1:d5:36:a2:
         d1:b4:88:5f:51:b8:c1:49:a4:a0:66:87:dc:84:27:5c:71:ae:
         97:0c:87:1a:e2:47:20:9f:78:cd:ed:6b:4a:44:46:a6:2c:44:
         fc:5d:3b:86:a0:35:c1:b9:41:89:e3:0a:6d:a9:0f:5d:88:90:
         ae:95:9f:5f:63:e4:35:ff:d1:21:46:bb:4f:40:93:d9:1c:10:
         ef:0b:78:59:55:f9:7d:8c:e7:aa:33:8e:bf:96:5b:f5:25:16:
         12:7a:62:17:58:78:86:37:cf:26:c3:ae:20:22:9a:cb:7a:0f:
         45:f5:b8:6e:90:7e:15:be:02:f1:a8:ff:63:f8:58:cf:da:e5:
         69:65:69:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:53 2025 by rpki-client