Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/89c06623-dcb1-326a-ab00-dcd9481e0a6d.roa
File:                     89c06623-dcb1-326a-ab00-dcd9481e0a6d.roa (raw, json)
Hash identifier:          A0iLQKn9TablxQZqSUOV9CPrxuEGmMpC3NraEI3fYX4=
Subject key identifier:   3A:F1:D8:42:88:AF:3B:2A:7A:8B:B9:87:D6:48:3C:1C:7F:70:7D:80
Certificate issuer:       /CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
Certificate serial:       010D0C9F4328584262134B084A845B20DF0FAE40
Authority key identifier: E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/89c06623-dcb1-326a-ab00-dcd9481e0a6d.roa
Signing time:             Thu 29 Jun 2023 18:33:21 +0000
ROA not before:           Thu 29 Jun 2023 18:33:21 +0000
ROA not after:            Wed 27 Sep 2023 18:33:21 +0000
asID:                     11796
IP address blocks:        66.97.96.0/20 maxlen: 20
                          204.9.152.0/21 maxlen: 21
                          204.11.128.0/21 maxlen: 21
                          204.15.24.0/21 maxlen: 21
                          204.15.104.0/21 maxlen: 21
                          207.200.224.0/19 maxlen: 19
                          2604:9540::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:62:13:4b:08:4a:84:5b:20:df:0f:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
        Validity
            Not Before: Jun 29 18:33:21 2023 GMT
            Not After : Sep 27 18:33:21 2023 GMT
        Subject: CN=0d16893a-780d-427c-861f-b941559e6814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fe:a7:68:3d:4a:a2:32:71:81:86:b0:78:18:
                    24:98:8b:63:a5:8d:04:9c:67:c1:11:93:f6:31:8c:
                    a4:d2:d5:4f:cc:bd:7a:5c:7b:42:84:80:ca:e9:c3:
                    4b:dc:58:55:9c:3f:04:52:33:69:43:27:c5:d9:14:
                    bb:34:e2:50:d9:10:24:ef:08:0e:37:a1:ca:b1:0d:
                    d6:47:b1:07:75:a7:d0:13:8e:7a:6f:a5:83:ff:53:
                    a6:88:52:5d:f7:d4:6d:b9:b6:b3:5a:d1:af:cf:23:
                    f5:87:98:4d:cc:70:32:c0:19:4c:05:5d:de:d7:ec:
                    e8:f2:24:cb:36:67:8b:56:aa:85:2b:f4:ac:c7:7c:
                    98:f1:b8:45:61:bb:c3:d5:da:03:ae:3d:10:d2:af:
                    26:8f:45:66:00:2f:e2:cd:73:f1:62:4f:95:8c:56:
                    2a:dd:e6:11:1d:a1:fc:8c:b3:4b:2b:6f:81:dd:1b:
                    1d:f9:c1:e2:b7:08:95:dd:46:87:2d:17:55:0e:45:
                    68:02:4c:8a:8e:e3:72:d4:2f:66:7b:17:44:5f:92:
                    74:1a:00:18:ff:f3:69:e5:81:98:38:14:d7:a1:51:
                    a1:d3:c3:ac:fb:c2:4a:a6:24:2c:27:64:a4:7a:8f:
                    de:10:51:fd:17:77:2d:30:f5:e3:43:b3:50:79:a8:
                    83:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F1:D8:42:88:AF:3B:2A:7A:8B:B9:87:D6:48:3C:1C:7F:70:7D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/89c06623-dcb1-326a-ab00-dcd9481e0a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl

            X509v3 Authority Key Identifier:
                keyid:E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.96.0/20
                  204.9.152.0/21
                  204.11.128.0/21
                  204.15.24.0/21
                  204.15.104.0/21
                  207.200.224.0/19
                IPv6:
                  2604:9540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:53:72:2a:22:0a:cf:7d:1e:17:df:fb:40:31:53:13:62:ec:
         a6:d7:65:9c:ec:d9:9e:12:8b:dc:0a:7f:f5:2f:4a:49:80:a8:
         25:1d:4f:0a:87:ae:fd:d4:20:74:22:17:8d:33:3d:f1:82:fb:
         76:c5:29:c0:a3:a0:b2:8f:bd:b3:61:2d:5c:5d:68:e8:58:46:
         62:f7:f8:c5:eb:4a:dd:54:8d:5c:04:4f:4e:7b:03:5b:2a:c3:
         d1:38:f1:35:81:8c:63:76:e2:6b:3a:fc:b7:76:12:92:4a:0e:
         b0:f0:47:4a:95:fe:01:8d:25:ef:c5:94:ce:1c:2e:e7:ce:a8:
         c3:ab:43:fc:ae:d9:72:d5:bc:fd:15:a4:18:e1:e1:78:b3:b4:
         fb:80:8d:39:5d:ad:1e:89:bc:8e:76:20:3b:3a:21:c1:b5:6b:
         84:91:10:2c:6c:f0:2d:f0:1e:de:97:e7:52:6b:8a:ca:d4:8d:
         db:a1:0c:fc:c2:ea:8b:5e:dc:17:4b:15:51:39:f3:bd:0d:9b:
         69:79:4f:e4:dc:3c:ae:c2:39:7d:2c:ac:cd:d6:66:d8:b4:d1:
         3f:1e:eb:bc:86:15:2f:17:ee:78:a6:5e:da:92:d5:9d:ed:50:
         76:08:93:b5:e8:fe:77:70:a6:8d:7e:cd:d5:79:eb:c4:87:81:
         46:5a:04:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:46 2025 by rpki-client