Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f93845d-bed8-3381-b968-c9e386504e73.roa
File:                     4f93845d-bed8-3381-b968-c9e386504e73.roa (raw, json)
Hash identifier:          LCGXHifnNXHLoNmAUOdEX5CHhWF4B3L0Ld7eTvXMIJw=
Subject key identifier:   43:4E:FB:8A:D8:3C:46:D1:D7:87:B2:7C:C2:D0:7B:2E:3E:BF:21:27
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285848C43BA713348958C47BEC6200
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f93845d-bed8-3381-b968-c9e386504e73.roa
Signing time:             Tue 04 Feb 2025 03:05:31 +0000
ROA not before:           Tue 04 Feb 2025 03:05:31 +0000
ROA not after:            Mon 05 May 2025 02:05:31 +0000
asID:                     14813
IP address blocks:        69.73.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:3b:a7:13:34:89:58:c4:7b:ec:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Feb  4 03:05:31 2025 GMT
            Not After : May  5 02:05:31 2025 GMT
        Subject: CN=ac8a6caf-e740-4732-8ae8-fa5c809b0496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:40:b7:c5:56:1a:4a:b6:da:8d:b1:47:b4:87:
                    5c:a6:74:7a:14:8a:21:98:ff:92:77:f4:76:9e:28:
                    a3:66:80:0a:53:0a:e7:37:85:7f:5a:8e:4b:ba:06:
                    11:d1:4c:c3:fd:02:df:f5:e4:d9:f2:d6:ad:1b:34:
                    1d:0f:1f:19:c0:e5:cc:c5:fb:ac:65:ff:ae:53:22:
                    5d:c4:c8:13:fe:bf:60:77:81:26:ad:4d:3e:1c:60:
                    64:e6:71:ed:74:92:c3:25:2b:6c:7d:a3:ae:ab:9e:
                    e6:c6:f7:03:bb:79:5a:22:96:8f:c3:72:80:af:2a:
                    72:9f:4c:bd:15:b5:9e:f8:7c:f4:78:e4:92:58:c2:
                    04:07:62:10:01:6e:22:b2:69:e0:a2:f4:0b:6c:e1:
                    fa:f7:fa:95:96:67:46:22:bf:1e:99:06:3a:b5:b7:
                    9d:5e:65:7a:ce:cc:66:e5:3a:09:6a:5b:c4:00:58:
                    91:dc:f6:b4:ff:0f:b6:47:3b:9d:26:ed:3a:04:b2:
                    57:85:23:6d:12:ea:c6:0f:9f:ad:17:4c:5a:1e:90:
                    90:f7:b8:1e:c0:8d:cd:2c:c8:06:0b:f0:09:a8:ab:
                    77:87:c6:3c:e5:43:ce:78:24:4c:27:92:67:0f:80:
                    e6:e6:b6:36:40:3a:f0:e8:28:07:8d:c7:fa:ba:f8:
                    0d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4E:FB:8A:D8:3C:46:D1:D7:87:B2:7C:C2:D0:7B:2E:3E:BF:21:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f93845d-bed8-3381-b968-c9e386504e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:fc:73:58:30:fe:c4:3d:b1:6e:6a:5e:a1:43:d7:2e:ec:01:
         39:85:c2:46:06:28:78:ef:0c:9e:b1:36:d8:5b:82:ca:a4:87:
         aa:fa:50:bb:de:51:a5:07:a8:08:5b:6e:8d:51:f7:c5:44:ab:
         43:60:4d:ae:55:29:95:5e:f1:46:28:a7:f3:6d:a4:b0:62:fd:
         8c:39:da:61:67:d9:49:46:c4:6f:1a:65:98:fb:cf:85:de:0b:
         1d:d1:74:ec:e3:00:ab:5b:08:fa:0b:05:16:95:88:26:ca:a2:
         c8:bc:de:77:2d:81:da:50:04:e5:3f:94:6c:9a:81:e7:b5:c9:
         80:fa:0f:dc:55:c0:97:69:c4:91:e2:59:a9:3b:0e:5b:c2:86:
         c5:d5:e0:99:11:12:34:fb:0d:73:be:ce:cd:ee:35:38:6f:ea:
         f7:31:64:49:11:6e:ae:05:01:8c:64:43:59:2d:d7:76:c6:65:
         b4:fd:2a:69:56:13:cb:f5:0f:2e:75:87:f4:08:d2:46:1e:2a:
         2d:2b:5b:ad:be:a0:df:da:fa:85:8f:93:55:ee:ff:45:53:d2:
         d3:3d:67:f8:77:39:3b:36:20:ac:86:70:59:fb:db:d8:83:a2:
         dc:78:6f:7b:11:a0:be:67:7a:5f:85:6d:8c:4f:0a:dc:fa:05:
         4b:ca:8a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:31:45 2025 by rpki-client