Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac29a5b1-d573-345e-b250-e2e795731f54.roa
File:                     ac29a5b1-d573-345e-b250-e2e795731f54.roa (raw, json)
Hash identifier:          Y8Pk8OhYvh3t9ReIyVP/bo5lktrlG8a7YGzItvMCJLA=
Subject key identifier:   69:10:3E:3C:E0:B9:CE:ED:A2:F7:1C:1D:04:82:A7:C2:6C:B8:A6:CD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2B415046186ACC17416B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac29a5b1-d573-345e-b250-e2e795731f54.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     21723
IP address blocks:        209.226.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:41:50:46:18:6a:cc:17:41:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=9aa29387-ad01-44c9-9b89-6dda92532ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ea:b3:62:02:de:ef:73:72:24:2d:26:97:e3:
                    35:d3:03:f2:4c:6e:0f:e7:eb:c8:92:eb:77:94:fb:
                    9b:72:f8:f8:92:86:c4:3d:87:53:83:b0:d1:29:b7:
                    50:ba:4a:25:aa:44:95:75:ab:ae:94:47:9b:68:06:
                    b3:bd:39:2c:eb:44:7d:6b:01:f4:40:10:a1:3c:7e:
                    91:7d:39:0a:99:17:60:dc:ea:33:96:34:4a:13:31:
                    83:33:f4:16:0b:37:92:6e:da:0d:58:3e:c3:5b:80:
                    cf:1a:b0:75:3e:b9:8b:8f:17:6f:64:c1:a5:dc:13:
                    c7:eb:c9:bf:79:d6:d1:af:0f:44:ac:cf:fb:e7:86:
                    e5:ef:2c:98:84:b9:d6:67:c5:04:b5:fc:d3:16:b2:
                    5a:af:23:21:09:88:51:06:be:66:c3:d6:c7:67:0a:
                    12:3a:d2:ef:15:c3:c1:a2:7f:ed:e6:1e:29:73:a2:
                    ba:7e:7d:a8:52:96:96:a9:22:b6:fb:c6:51:5c:d2:
                    47:88:d0:11:ba:d7:e6:9b:75:29:f3:33:09:1a:32:
                    f6:76:23:6e:71:27:d8:96:e1:89:9a:ca:56:ae:04:
                    f8:60:af:a5:48:d8:59:3b:8a:57:56:ce:51:a9:82:
                    27:58:b4:11:27:af:40:0b:dc:11:b4:f4:5e:f8:28:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:10:3E:3C:E0:B9:CE:ED:A2:F7:1C:1D:04:82:A7:C2:6C:B8:A6:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac29a5b1-d573-345e-b250-e2e795731f54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a1:2e:8e:a4:e1:64:0f:6d:8b:84:47:b8:1c:73:93:7d:7c:
         91:3c:e7:06:52:3f:d8:0c:bf:85:8a:ae:eb:50:79:b2:f7:26:
         d9:75:d6:35:0c:55:b3:34:af:0a:84:a5:fa:18:e5:63:db:51:
         87:88:b1:d6:49:8e:73:c3:f5:39:bb:de:df:64:30:ca:dd:3f:
         1a:9c:1e:b6:a3:5a:f4:79:2e:46:9b:d7:12:ac:10:b6:ce:d1:
         76:a7:70:a1:5a:c6:be:56:46:33:1f:7e:86:68:d5:79:b9:66:
         31:b2:ee:c5:b5:81:9c:9c:52:dd:06:e1:f5:17:e4:b9:e8:25:
         2f:4c:3d:13:c3:a5:59:17:6c:d2:b9:05:af:50:2f:6b:9c:15:
         90:37:2e:18:61:65:d4:88:01:56:a8:5d:cd:ba:42:b3:ad:a4:
         8d:5a:56:e3:0d:bb:1f:a4:24:d5:fa:a7:d4:77:28:a7:f1:0a:
         d9:51:5f:70:31:bf:27:78:4d:f9:d5:06:6d:cb:e1:32:89:60:
         a3:af:bc:70:5b:2c:6a:6f:44:b7:61:e4:70:f6:61:62:d4:13:
         f8:0e:41:1d:e5:b0:77:bd:7a:82:98:72:5d:2b:69:1b:c7:6f:
         78:a9:d7:f0:2a:83:f0:60:0b:fc:9a:02:82:d9:61:16:13:8d:
         6e:80:12:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:37 2025 by rpki-client