Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa
File:                     1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa (raw, json)
Hash identifier:          If1HnWc9Z8vKWPV2NRXGl5+gA8SHgkINiVZ4FNVk8Ec=
Subject key identifier:   33:19:DD:96:1B:82:94:14:05:6E:E5:FC:FB:5E:05:F2:99:08:5D:18
Certificate issuer:       /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Certificate serial:       010D0C9F43285848C84B9F41A67E033430383580
Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     33322
IP address blocks:        208.67.180.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:9f:41:a6:7e:03:34:30:38:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=e7de8c2b-bb7d-4521-b395-a047419dd8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:05:0f:7e:cb:7d:cf:d1:bb:d7:83:19:52:
                    cd:b0:25:0f:5a:65:33:86:7a:71:7f:1a:22:27:2a:
                    a0:3a:ad:6f:bd:80:ae:b5:85:5d:bb:31:1e:ff:be:
                    66:5b:b4:e5:90:2e:fe:d6:a4:a9:11:dd:b9:06:c3:
                    47:e2:24:c5:b8:e2:0e:50:f2:38:2c:19:60:49:16:
                    f3:13:ac:3e:89:63:41:dd:6e:ae:b3:f6:c0:a2:11:
                    eb:f3:a2:a5:26:a6:4a:1e:9d:22:fc:0f:2e:e8:ef:
                    00:c8:0d:8d:45:1a:29:35:ad:d7:0c:a2:22:55:4c:
                    de:e7:03:36:23:8d:37:79:84:f3:2d:15:51:73:2a:
                    0f:1d:54:b5:6e:b4:cd:fc:5d:c5:b3:eb:89:f4:04:
                    9a:91:16:1e:c4:85:07:fd:1e:21:71:01:dc:d0:39:
                    0a:95:6b:5a:4c:78:fa:3d:30:be:c5:9b:c3:95:4e:
                    8b:b5:0e:1e:49:82:63:18:49:a2:3d:54:ab:7a:53:
                    b4:71:f0:2d:53:14:8a:0e:1a:1c:e5:7c:04:d3:8b:
                    a2:c6:18:70:fe:54:bf:f0:20:15:c5:45:c4:6c:88:
                    11:2d:5c:5a:dd:fe:b4:93:ae:cf:d4:ce:8c:44:c0:
                    7d:aa:fc:bf:29:2d:fa:cf:57:e7:ce:0c:fa:e0:1d:
                    fa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:19:DD:96:1B:82:94:14:05:6E:E5:FC:FB:5E:05:F2:99:08:5D:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl

            X509v3 Authority Key Identifier:
                keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:32:7b:7e:d0:7e:62:2b:30:13:4f:82:64:7d:34:cd:93:a3:
         a7:3f:f3:e1:28:35:ce:91:02:dd:32:9b:4f:0e:58:91:d0:15:
         d2:c5:6a:71:24:98:41:7d:f4:20:d3:9e:c8:84:d2:a7:6e:d0:
         82:1d:04:12:55:89:57:81:d6:ed:80:f3:c0:98:80:33:9e:cc:
         e5:dc:98:e7:27:70:bf:38:90:1a:16:dd:3a:20:8c:ac:b9:63:
         7a:5a:6e:db:e9:22:7e:70:b5:45:e0:7e:22:83:10:c2:47:15:
         cd:ce:33:a4:38:67:10:2e:dd:2a:49:42:2e:86:99:de:c8:c0:
         6e:7a:97:b1:72:28:46:77:2d:7a:98:89:79:ff:7c:46:37:30:
         51:66:5e:66:c5:1b:a6:6a:95:c2:e5:2c:c6:64:8d:ef:27:8e:
         4a:b4:41:73:21:0c:49:1f:f1:3b:ff:5b:85:fb:6b:00:6d:3e:
         c1:b7:c3:bb:16:f8:60:c3:83:d3:f7:d7:34:2f:33:39:5d:4b:
         82:b6:8e:9e:1d:4b:99:b3:07:41:69:c1:57:ef:53:58:0c:8b:
         7f:3f:d7:57:54:14:4d:a2:ed:26:a4:e7:73:c6:e0:a8:6a:8c:
         aa:c8:75:d5:2b:5e:ba:00:b0:37:12:bb:65:70:ef:53:da:c2:
         a1:78:df:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:38:03 2025 by rpki-client