Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/6e55369f-3dd7-3e9f-8a9f-a6249baa8e4b.roa
File:                     6e55369f-3dd7-3e9f-8a9f-a6249baa8e4b.roa (raw, json)
Hash identifier:          8gFOG/KwMhjFpBVJjMvrljEAP+eQirsG52gqbRlqw7s=
Subject key identifier:   AF:C6:C7:11:EB:08:5E:40:9C:F9:35:FB:34:DC:0B:B4:40:8F:EF:64
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584944692AC2E388D8448F29BDD0
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/6e55369f-3dd7-3e9f-8a9f-a6249baa8e4b.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     40065
IP address blocks:        216.38.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:2a:c2:e3:88:d8:44:8f:29:bd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=17ee3715-e7ef-4652-8cd9-f55c17eb7239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a5:af:2b:d7:13:f1:cc:57:25:6a:ac:05:f4:
                    bb:60:2f:d2:46:34:b8:98:58:8f:d1:b9:f3:cf:ce:
                    02:46:d7:26:4d:6f:61:10:52:e0:a3:64:88:26:24:
                    7c:d7:19:0c:07:36:84:95:36:a5:d9:6a:f4:e1:3b:
                    41:7f:32:ee:99:c5:c1:74:e7:c2:6e:c3:02:f6:7b:
                    12:dd:8c:d4:d5:ea:5c:cb:e2:9d:a4:a3:2e:c5:f0:
                    73:d6:76:f3:b4:16:87:16:e5:d1:09:db:ec:15:be:
                    3f:09:81:0d:8b:2d:0d:14:8f:6d:92:71:22:b5:8b:
                    af:cc:f2:27:17:5a:3f:9a:98:5e:33:be:fd:cf:99:
                    76:86:34:8e:e6:bc:5b:d3:91:a8:8a:66:5f:78:0f:
                    59:44:a7:8a:7f:3b:bd:a6:fa:7f:18:03:6d:4b:2b:
                    26:97:3e:0a:7a:7d:f9:a2:5e:dd:c2:3c:69:18:db:
                    d4:38:cb:ee:0e:19:45:45:3f:80:e1:ec:d2:c1:b1:
                    01:ee:3c:e6:e0:6e:2c:fa:25:84:c2:9c:2f:a4:fa:
                    1a:63:5c:42:9d:94:c2:9f:b9:1b:7f:92:62:a5:0a:
                    4d:c9:b1:c2:0d:d1:a0:38:a1:47:02:44:42:ad:25:
                    d3:ea:ed:53:c9:85:60:2a:7c:47:92:bb:ce:a4:b8:
                    7b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C6:C7:11:EB:08:5E:40:9C:F9:35:FB:34:DC:0B:B4:40:8F:EF:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/6e55369f-3dd7-3e9f-8a9f-a6249baa8e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:75:7d:8b:90:49:1b:7c:91:0b:f5:b7:3b:04:08:8a:72:5b:
         51:e9:bc:af:c9:64:14:98:23:ee:1a:bf:f5:5f:16:c8:5e:92:
         91:b8:2d:f7:e5:9f:10:3b:84:79:1d:62:cf:0d:4e:6d:64:54:
         ef:da:57:4a:2b:45:e9:d3:b0:1a:f7:2a:8f:b9:c7:fd:e0:64:
         42:8e:d6:cf:04:49:54:7e:0a:79:7f:00:c8:75:9e:dd:b5:b5:
         be:e8:4d:ba:06:44:bd:63:ad:e5:df:f8:07:d4:94:a9:34:d4:
         1d:55:25:01:ae:61:af:ed:b3:d1:50:02:49:bc:73:37:35:f3:
         4e:72:5d:01:bd:ed:f9:1e:8d:45:55:05:8a:1b:a3:d3:f3:e5:
         6a:eb:fe:9a:c3:55:72:56:59:91:69:4d:da:3b:83:6c:a8:9b:
         b9:b5:43:0a:be:69:ab:2a:18:9b:e2:b5:cd:e2:75:5d:5e:f2:
         a0:de:11:39:fc:d9:7d:b5:59:7b:e0:22:df:55:0b:b1:bd:8a:
         39:20:54:ff:3f:35:27:0a:43:ae:f5:64:75:ff:67:c5:22:f3:
         9b:78:c3:62:ac:20:62:61:0c:1f:9f:f0:34:e4:43:3d:d3:eb:
         04:de:20:5c:da:9c:f1:d3:e0:49:50:31:69:1d:23:51:39:a8:
         37:bf:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:36 2025 by rpki-client