Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9232d032-ba80-3c84-89c2-81cb7f4cca2e.roa
File:                     9232d032-ba80-3c84-89c2-81cb7f4cca2e.roa (raw, json)
Hash identifier:          ZYzJMr5qciNzYIQGVDZdpFL5rRVkCgVmMSgBavlBWhY=
Subject key identifier:   EE:58:5D:24:55:4D:5C:EA:71:96:B6:6F:CA:B5:31:85:08:EF:98:E5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490B4C175B03ED097BFCD0FA80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9232d032-ba80-3c84-89c2-81cb7f4cca2e.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        172.69.204.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:17:5b:03:ed:09:7b:fc:d0:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=d16ded1e-3b9c-48c7-b134-39e7e4685856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6d:4b:02:cb:93:ed:38:22:b1:6f:3c:a8:3d:
                    95:7d:bd:af:56:1a:ab:5a:45:ed:e0:90:ab:a6:b8:
                    36:b6:40:2a:a2:b2:56:9f:81:98:c4:aa:8c:1f:95:
                    1e:cb:1d:2c:53:ff:66:bf:2d:a1:76:75:b1:3b:17:
                    cd:26:b0:bf:9a:10:bf:d8:05:56:6d:15:8b:49:f1:
                    9a:68:b0:10:8f:b1:be:21:1f:b3:8f:a8:45:f4:57:
                    50:b4:56:4d:f3:38:e0:9c:da:3d:e5:2c:fd:01:a4:
                    a5:1c:82:6b:c0:dd:87:81:d4:ec:4f:77:17:91:07:
                    64:e6:6d:ce:3c:db:61:8b:58:a3:e3:e9:65:29:d4:
                    6a:28:09:4d:bd:8f:75:8c:8d:0d:ae:55:a1:73:bd:
                    34:b1:2a:50:7f:38:52:25:25:ac:0c:e2:27:d9:ee:
                    f8:d6:77:b8:76:2e:fd:da:33:ca:f4:78:8c:da:e7:
                    23:be:7c:84:c6:90:9d:b4:ea:82:d4:47:73:56:fb:
                    f5:09:8e:8c:07:0a:c1:e0:31:ce:72:54:6b:a8:8e:
                    ea:7b:38:60:04:6d:bb:24:d2:40:3e:7a:e7:fa:40:
                    f3:9b:98:18:b7:fb:e7:9a:e4:71:00:f8:3f:e2:81:
                    ff:8b:c2:60:b7:46:d1:2e:e0:82:c8:f3:6e:31:78:
                    1b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:58:5D:24:55:4D:5C:EA:71:96:B6:6F:CA:B5:31:85:08:EF:98:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9232d032-ba80-3c84-89c2-81cb7f4cca2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ea:cf:2e:3a:a6:04:ea:74:a4:b8:87:ee:4b:48:c9:d7:86:
         76:6b:94:04:ac:a2:06:10:31:55:0e:59:39:cd:c0:7c:e9:5e:
         23:5b:fe:52:49:ff:f2:31:1f:83:d1:cb:a3:ff:6f:8c:a8:69:
         4c:b6:d4:3a:28:b1:46:d0:80:0c:16:9c:43:91:70:94:59:70:
         46:fa:0a:ed:b7:d8:fc:b5:a0:9b:68:9a:4b:61:04:79:f7:a6:
         ec:46:6d:81:a4:92:78:2d:8f:ff:76:5a:50:84:50:49:02:87:
         ad:ec:fe:fc:32:ce:c5:d6:80:ff:84:0f:1b:43:48:b0:e8:4c:
         b5:bf:fa:11:bc:0e:34:cd:ef:16:c9:7b:11:9a:61:14:8b:c2:
         f2:1b:a0:4d:41:85:5b:87:d4:0d:39:dc:52:7d:db:57:1e:44:
         3c:f0:00:c4:4e:7f:6a:1d:0f:5a:bb:5b:9f:8c:54:6c:fe:56:
         b3:22:ce:ee:f7:8a:b6:cf:2d:a2:5f:33:21:fe:cc:26:13:e9:
         c5:84:71:28:6d:73:16:c0:70:39:34:11:cf:7e:38:2c:01:bc:
         19:f3:0a:c1:fc:99:7d:e7:64:5b:19:38:13:49:55:4a:03:76:
         5b:80:e5:d1:12:8c:0c:6c:b4:a6:ea:0e:89:9b:23:ba:e0:1e:
         0d:62:6a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:50:04 2025 by rpki-client