Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/002cd295-0845-3e0b-8fc6-6be378b880ee.roa
File:                     002cd295-0845-3e0b-8fc6-6be378b880ee.roa (raw, json)
Hash identifier:          MXMXalEqVtI7dsS0Z7COlCc1tSbM3YZd811tVyFKiPg=
Subject key identifier:   7F:7F:98:50:B2:BA:E5:B4:D6:2D:F7:8E:2E:3F:E7:67:C5:50:75:59
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F43285848CC7B918EDFDC8CEA324571C0
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/002cd295-0845-3e0b-8fc6-6be378b880ee.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     46606
IP address blocks:        162.210.70.0/23 maxlen: 24
                          162.222.225.0/24 maxlen: 24
                          162.222.226.0/23 maxlen: 24
                          162.251.80.0/24 maxlen: 24
                          162.251.85.0/24 maxlen: 24
                          199.79.62.0/23 maxlen: 24
                          204.11.58.0/23 maxlen: 24
                          207.174.212.0/22 maxlen: 24
                          208.91.198.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:91:8e:df:dc:8c:ea:32:45:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=08061b0d-8108-4d00-b629-3af47d58affe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:d6:a5:2c:75:e1:d2:6d:20:89:44:36:90:
                    50:91:81:5f:dd:c3:15:36:c6:51:6d:0b:41:8f:64:
                    5f:05:47:f4:5f:4d:4a:20:cd:b0:e8:ef:f4:ae:05:
                    7d:36:36:e5:1a:63:df:37:33:c0:c6:0e:8a:5d:eb:
                    a7:0e:87:01:15:d6:c3:80:61:ba:61:cb:33:c8:26:
                    ce:7b:bc:51:e7:af:bd:62:98:8a:a8:f9:fc:7e:5e:
                    38:78:c7:1b:eb:3f:f9:40:3d:2e:df:7d:56:04:66:
                    10:73:73:21:14:20:b7:14:2e:f2:e9:52:c2:6e:05:
                    62:c9:d6:a0:4b:ca:3f:ae:b5:8e:27:00:5e:34:47:
                    82:c5:43:52:e7:7f:fd:32:92:52:a3:13:b6:09:11:
                    94:ad:b7:07:d9:37:19:46:5e:7f:55:e1:05:a9:3e:
                    12:87:d2:16:55:e2:40:e4:ab:52:60:44:14:f8:8a:
                    55:35:0b:f7:cf:e1:ab:39:d9:0b:b7:3f:51:4f:7a:
                    c1:30:50:b6:58:6a:0b:ec:14:aa:67:af:5b:d4:38:
                    30:38:ad:7b:ae:c3:aa:97:e2:85:3e:12:96:3d:7b:
                    eb:28:0e:d7:35:f8:20:3b:a3:f6:a7:e2:c1:ea:bb:
                    d3:14:fb:74:81:f8:16:6d:93:a2:d6:d3:80:38:0d:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7F:98:50:B2:BA:E5:B4:D6:2D:F7:8E:2E:3F:E7:67:C5:50:75:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/002cd295-0845-3e0b-8fc6-6be378b880ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.70.0/23
                  162.222.225.0-162.222.227.255
                  162.251.80.0/24
                  162.251.85.0/24
                  199.79.62.0/23
                  204.11.58.0/23
                  207.174.212.0/22
                  208.91.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:08:aa:23:48:aa:93:bd:09:52:ce:58:23:d7:e5:4f:c6:f1:
         4c:14:b1:d1:fb:fc:f9:12:29:c5:a2:74:cf:89:36:02:f5:25:
         c5:d0:45:f1:00:39:9f:e5:13:b5:89:f2:c0:cb:40:48:6b:67:
         0e:0b:bc:fe:db:d5:e5:bb:6e:fc:e9:82:c9:92:06:be:64:13:
         8b:81:52:dd:63:a5:c7:3e:92:a6:a5:e0:1d:ca:48:d8:86:60:
         d3:28:72:c8:64:ef:89:45:9c:0d:64:74:78:14:cb:ec:55:c2:
         d5:b1:ef:26:72:ef:b2:33:8b:bd:36:5a:00:2c:72:e4:f1:49:
         29:b4:97:8a:97:a1:e6:39:d9:8a:83:e8:7f:32:8d:e9:9a:91:
         b2:27:be:f1:15:de:47:52:a3:94:82:02:6d:14:8b:34:cb:47:
         a6:9c:66:b0:21:4d:1b:70:36:21:6d:0a:43:98:99:93:6b:c6:
         f0:44:7c:17:89:12:e9:94:28:79:15:81:28:90:06:ff:63:cf:
         7e:2c:5f:01:5b:f5:9f:63:4d:cb:29:12:87:a6:8b:e1:37:9b:
         3b:dd:ee:72:08:e9:ae:85:f8:38:35:1c:ca:10:ba:e9:b3:d9:
         c7:90:c4:64:3f:8a:44:4e:31:ae:aa:ea:68:01:9f:21:a0:69:
         02:9a:93:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:46 2025 by rpki-client