Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/6b068ad1-cddb-32b4-8fb4-1cbb333fbf09.roa
File:                     6b068ad1-cddb-32b4-8fb4-1cbb333fbf09.roa (raw, json)
Hash identifier:          VbpMz1jsKkEVIZShCfU53XbLIxQIkdSCCbgtdJBQ1ZY=
Subject key identifier:   AB:C6:C0:1C:5A:BF:76:C0:D6:99:A9:2B:C8:84:32:A7:E1:02:C3:DD
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285848E8667C22D83CDA808415BA80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/6b068ad1-cddb-32b4-8fb4-1cbb333fbf09.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     376
IP address blocks:        206.167.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:7c:22:d8:3c:da:80:84:15:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=a0b4bfe5-a823-49d2-861b-13c1c0c12aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:c9:0f:9a:7e:0e:07:ec:8e:bf:78:4e:c1:
                    01:c8:47:58:2c:f2:db:49:18:06:27:52:5b:a6:ce:
                    80:e3:8c:b0:4f:ad:f7:92:4a:91:2d:70:22:70:b3:
                    92:88:98:5d:f2:86:ea:d8:24:98:0b:69:0c:b8:3e:
                    b1:3d:7f:87:57:26:42:f6:82:5b:24:83:4c:6d:d4:
                    01:4d:ab:b0:f3:e9:fd:a1:2b:a6:57:8d:b2:e6:58:
                    c8:7f:84:c1:4f:b0:7f:ec:1c:22:f5:f5:c6:9b:c5:
                    ca:03:bc:7c:af:18:7d:0a:9d:91:dc:19:6d:bd:fb:
                    11:1f:0f:ab:fa:c4:d7:3a:b3:28:3a:7f:b4:cb:d3:
                    64:3c:aa:c1:58:e8:23:49:af:3a:13:eb:cb:2c:af:
                    06:f0:bd:1b:1f:1a:d3:d3:31:23:e8:ee:b1:a8:86:
                    90:78:61:de:3e:c3:f0:19:56:d9:8d:a6:f1:26:ae:
                    5c:ae:54:cc:8d:b0:31:e5:99:8b:b4:04:3c:03:e3:
                    2a:86:27:db:da:8c:2f:fb:04:6d:e0:30:31:f1:74:
                    27:0f:3b:32:6a:6d:54:a2:da:29:cb:dd:93:fc:92:
                    cf:7a:b8:18:ee:e9:d9:11:7b:b0:f7:13:4f:59:28:
                    27:e2:fe:7d:4e:52:04:8c:1f:57:5c:c6:0d:87:c9:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C6:C0:1C:5A:BF:76:C0:D6:99:A9:2B:C8:84:32:A7:E1:02:C3:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/6b068ad1-cddb-32b4-8fb4-1cbb333fbf09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:49:01:82:80:f4:31:51:86:ed:d6:38:f4:2c:2d:cf:81:f3:
         eb:96:ef:d4:b6:a2:31:67:38:93:9d:f3:a8:36:ea:e3:65:a7:
         2c:e8:e7:a1:ee:55:e4:a9:f4:37:38:77:68:69:ce:8f:8a:9b:
         08:fd:d4:c6:1b:23:42:c1:97:a6:73:08:36:ab:c1:d8:62:6b:
         7a:83:b0:65:56:0d:cd:bc:0b:3c:30:86:54:6a:e0:28:cb:dd:
         94:b6:19:e6:eb:f2:05:30:cb:1e:d6:29:2f:f7:ae:ff:03:b5:
         07:70:e2:eb:97:64:b9:a6:a7:57:bb:78:ab:5c:30:e4:27:61:
         32:cb:1b:f1:db:d1:f2:4e:2d:c0:a9:4b:00:c1:84:e4:b5:84:
         bc:cc:a4:78:22:32:7e:b7:7c:45:1d:b5:15:28:fb:0f:84:09:
         8a:23:27:f8:70:44:1a:f1:df:10:a7:ce:56:9a:18:5b:c8:56:
         3d:e3:ed:3b:f0:d2:9f:f4:92:da:d6:27:e9:43:82:f0:c9:26:
         a2:f5:b2:1c:bb:01:fa:79:70:41:bf:89:68:10:7d:2f:5a:53:
         d8:b6:ce:c7:87:d1:0a:c6:ae:5e:63:1c:a9:53:d9:eb:2b:34:
         43:f4:42:1c:16:b8:ab:33:37:05:75:8e:43:62:a1:5c:0c:ca:
         d1:62:48:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:34:01 2025 by rpki-client