Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/34e0a6e4-865d-3aa5-bce9-f8059fb70647.roa
File:                     34e0a6e4-865d-3aa5-bce9-f8059fb70647.roa (raw, json)
Hash identifier:          RZxMJ5Ay7CLb+jyjPWs3izOUgvRZ0JMgajILUbuf7cM=
Subject key identifier:   4B:BB:E0:A7:58:29:5E:60:3E:8B:E2:0F:BF:92:76:63:04:8B:E8:DB
Certificate issuer:       /CN=093dd42f-849c-49fe-b795-49e66b3b3b7a
Certificate serial:       010D0C9F43285848BBBB6E7769F047E44E64A4C0
Authority key identifier: 70:40:2F:13:DE:4B:CF:1F:36:0C:22:D7:6C:CF:D9:59:4B:8C:AE:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/34e0a6e4-865d-3aa5-bce9-f8059fb70647.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     36562
IP address blocks:        206.225.26.0/24 maxlen: 24
                          206.225.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:6e:77:69:f0:47:e4:4e:64:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093dd42f-849c-49fe-b795-49e66b3b3b7a
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=32227df1-1abe-4e19-8292-4b02e6b2c99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cb:d7:6c:f6:a0:be:6e:da:e8:41:d5:79:19:
                    ab:fe:3e:79:aa:4c:51:2e:25:0c:51:24:48:d3:81:
                    23:a0:c2:e5:27:a9:9f:ba:58:17:c0:92:58:cf:13:
                    3a:7f:68:8a:a8:61:31:9c:33:80:54:1c:70:e4:e7:
                    b0:a4:df:26:cc:3c:74:da:13:7f:59:ec:07:fb:8a:
                    e3:5e:12:68:ba:a7:20:53:f4:58:a3:5f:9f:e9:68:
                    8a:bb:d4:d3:f7:2f:da:d9:bb:1a:5d:55:e3:66:d0:
                    09:06:4b:56:b2:0a:c0:6e:1f:9b:f2:51:76:20:34:
                    07:8f:9d:2e:70:2d:6c:df:3c:15:24:8f:31:ba:d0:
                    96:ae:91:d6:af:08:c2:a0:bb:41:da:5c:23:7d:4c:
                    d6:41:88:fa:87:9c:48:ae:d6:10:d6:33:b4:29:69:
                    80:40:8e:88:bd:c5:57:75:62:81:ae:b2:32:2f:35:
                    46:2a:72:b5:78:88:69:75:7c:d4:4b:45:67:9b:e7:
                    c1:20:b9:0c:e4:c6:9e:df:9d:9d:9f:12:79:a2:92:
                    51:bd:41:37:0c:80:c7:f5:64:6a:bb:75:97:62:fb:
                    47:f6:41:99:8c:81:7c:a1:ce:04:ef:5a:94:ac:08:
                    f5:e3:3d:23:80:b1:78:55:5c:db:dd:15:bf:77:31:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BB:E0:A7:58:29:5E:60:3E:8B:E2:0F:BF:92:76:63:04:8B:E8:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/34e0a6e4-865d-3aa5-bce9-f8059fb70647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.crl

            X509v3 Authority Key Identifier:
                keyid:70:40:2F:13:DE:4B:CF:1F:36:0C:22:D7:6C:CF:D9:59:4B:8C:AE:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:70:50:d6:a2:c2:fc:29:5e:59:36:a8:59:20:11:8a:21:b0:
         a8:14:11:87:d0:ca:45:41:7d:ed:86:26:ae:a3:50:87:76:4a:
         93:f7:27:f9:4e:55:25:c4:27:a1:78:47:a6:43:a2:22:e9:52:
         76:cc:d9:41:1f:43:13:d0:47:42:d8:10:b5:99:b0:80:2a:a7:
         c7:19:cb:ab:cf:32:73:1b:cb:2f:5e:62:d7:cb:c0:4b:c0:e8:
         9e:06:2d:86:eb:e9:6e:e4:48:55:c2:bb:e0:63:72:7d:d6:e5:
         5b:20:7e:06:cf:a1:7d:1d:9a:3a:f3:df:82:7a:2f:29:aa:1b:
         fc:8b:0e:f0:4c:5a:34:ac:2e:10:11:6d:19:77:2a:2d:5e:a0:
         09:f7:99:95:ea:d9:07:78:0c:0f:40:df:7d:75:e5:0e:43:93:
         17:15:eb:c9:0a:d9:93:e5:ce:14:ea:30:5d:df:21:2f:71:0d:
         2d:32:5d:ee:63:52:48:8a:1d:e9:ac:14:52:5c:bb:5b:fb:5b:
         08:34:60:09:78:70:56:7c:0a:27:75:cb:db:e4:09:44:00:d5:
         3c:6e:d5:82:ac:a0:88:9c:60:ce:c8:17:cd:67:74:f3:aa:a6:
         c5:fe:74:c8:9b:05:46:f0:3f:6a:64:56:a0:26:cf:cc:c3:07:
         61:53:91:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:10 2025 by rpki-client