Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/bd55586c-5cd2-36c4-b0b6-b866cbfd6bb0.roa
File:                     bd55586c-5cd2-36c4-b0b6-b866cbfd6bb0.roa (raw, json)
Hash identifier:          HNRcvqGgJ7DQVV8cYhjm1lylbRF11c62M2RXqh8VH9w=
Subject key identifier:   BB:92:6B:A6:D7:98:35:F3:ED:1B:B8:CD:72:23:5A:38:62:9D:3F:C2
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F43285848A400C135265E5B12C7B8CDC0
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/bd55586c-5cd2-36c4-b0b6-b866cbfd6bb0.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     33548
IP address blocks:        209.54.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:c1:35:26:5e:5b:12:c7:b8:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=84b78c33-ec1f-4693-b0cb-1a5eb9e58c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fc:8f:1c:be:b3:fa:f5:88:b7:55:2c:ea:8d:
                    0b:5e:55:77:83:ed:45:57:9f:b8:25:cc:5e:67:e7:
                    b6:3e:31:1d:41:37:15:35:b1:be:4c:a7:a7:80:77:
                    2a:c4:4b:cb:60:3f:26:4a:33:89:b5:22:43:92:d9:
                    06:55:0c:1e:b2:ce:aa:0e:b0:fb:4c:fa:b6:f4:73:
                    55:5c:48:fa:1e:eb:a2:3d:14:5b:20:c2:e9:3a:d5:
                    59:a1:a3:95:7f:f3:1b:b0:09:72:8b:8f:3f:ab:36:
                    ab:77:e9:0a:2a:7f:2f:0b:0e:11:15:cf:5d:0d:61:
                    34:51:ae:32:c4:fa:99:79:50:24:ab:c7:fe:66:b7:
                    51:41:3c:99:2f:11:be:a7:64:f0:af:79:e4:5a:3a:
                    0d:bb:d2:68:c4:a4:b1:6a:6c:43:6f:c3:e7:b7:a6:
                    16:5b:0f:4c:dd:34:d7:bd:2a:12:1f:1c:52:ab:cb:
                    a1:5b:49:61:b6:0e:9d:e4:7c:b3:d0:8a:1f:1b:5f:
                    7f:87:9e:2e:5d:09:07:52:7b:80:c2:56:8a:56:8a:
                    f7:c9:ad:ca:83:66:2e:78:c1:db:81:09:ed:da:71:
                    eb:1b:48:c8:d3:de:e9:ec:44:9f:70:c4:87:35:80:
                    de:83:c2:e6:ed:ab:85:65:4e:58:20:79:6e:90:bf:
                    43:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:92:6B:A6:D7:98:35:F3:ED:1B:B8:CD:72:23:5A:38:62:9D:3F:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/bd55586c-5cd2-36c4-b0b6-b866cbfd6bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.54.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ce:ad:f6:f0:d2:b3:5e:d1:ba:b4:ea:14:3f:56:4d:68:b8:
         79:f8:fc:6e:fc:0b:55:e6:8b:4d:de:86:b4:95:a8:d7:6a:9c:
         a7:ec:1f:ad:81:da:65:8d:f0:df:63:64:3c:de:eb:e7:98:87:
         7f:70:63:58:c8:a3:54:07:eb:8b:1a:d8:8a:58:7b:c6:68:66:
         bf:47:e3:65:b3:79:0c:d8:ba:f6:59:5c:42:62:89:1e:1a:a9:
         a9:2b:9c:d3:00:8f:30:db:13:0f:6f:3b:cf:ff:e7:2d:c0:20:
         8a:c8:e1:96:47:47:ce:2e:7a:24:de:d8:11:21:f2:eb:48:6c:
         ad:c4:8e:6b:33:fd:d3:f0:2c:1a:83:f9:53:8a:0a:3e:37:84:
         a6:16:ce:bd:e9:5b:fd:47:24:5c:56:2a:a5:6c:11:30:b9:17:
         35:06:8f:6e:cb:1f:05:98:5d:3b:c9:3a:8e:d4:0b:57:5f:92:
         5b:74:92:40:76:83:ca:0f:6c:49:51:53:dd:d5:dd:cc:31:83:
         f8:30:fc:2e:d7:0e:d4:22:7c:50:72:76:8c:1f:63:7c:16:4a:
         87:74:76:15:eb:ea:f0:f3:b4:0c:22:14:c2:47:d1:35:33:ad:
         00:54:f3:f7:07:4a:0f:cf:0a:75:35:2c:e7:10:68:90:8b:ab:
         63:1d:18:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:28 2025 by rpki-client