Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f57713b-53ae-422c-aa4d-ebb47dcb1b7e/7f0e6673-8482-3889-83d3-4c318cc7fe64.roa
File:                     7f0e6673-8482-3889-83d3-4c318cc7fe64.roa (raw, json)
Hash identifier:          +4C31pP0kQaJmX8c5+J8DqIunkKh8XCx75JYv1C6pqo=
Subject key identifier:   EA:2A:B7:3D:E4:31:E0:EE:02:64:D6:04:8C:71:C7:6E:C7:9D:5B:89
Certificate issuer:       /CN=9f57713b-53ae-422c-aa4d-ebb47dcb1b7e
Certificate serial:       010D0C9F43285848159FE4B82B97AC02C141C180
Authority key identifier: 19:50:2D:83:EC:45:E8:D8:E4:85:28:69:23:D3:BA:ED:1F:24:22:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f57713b-53ae-422c-aa4d-ebb47dcb1b7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f57713b-53ae-422c-aa4d-ebb47dcb1b7e/7f0e6673-8482-3889-83d3-4c318cc7fe64.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     398869
IP address blocks:        162.222.68.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:e4:b8:2b:97:ac:02:c1:41:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f57713b-53ae-422c-aa4d-ebb47dcb1b7e
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=73cfb0d6-0af2-4046-af32-eaafe70fab28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f5:cb:43:ef:04:c1:36:ac:87:d1:d3:1c:e0:
                    4d:1d:a8:d6:5c:65:a9:6a:19:c8:f2:6e:b4:53:db:
                    09:a9:70:38:0d:4c:37:1c:c1:97:f1:20:8e:ed:4d:
                    6e:9f:8e:4a:03:9c:78:77:0e:ed:6d:ec:ff:fe:4d:
                    86:fe:cc:4d:4b:aa:da:70:60:dc:e4:ea:90:c8:12:
                    96:71:5e:c4:ad:e9:7d:7e:a0:8c:fa:52:44:92:3f:
                    2e:23:36:d1:9f:2a:cd:2c:80:a2:ce:94:a8:68:71:
                    15:e6:e0:6f:a2:03:1d:61:64:ad:d4:f9:e4:ce:11:
                    2e:00:32:71:a9:18:81:dc:bd:c4:02:e8:cf:91:ec:
                    31:9f:87:cd:42:45:a8:29:2a:9e:67:3e:8d:8a:67:
                    26:bc:7c:3f:13:0b:a2:c8:4d:77:7e:ac:62:42:bb:
                    ea:f7:07:fb:d7:39:86:16:da:b3:38:74:b1:e6:4e:
                    a9:50:2b:3c:05:46:6b:ef:ad:40:5f:0b:1a:f9:0a:
                    46:d8:46:e8:70:1f:2f:96:80:22:34:9b:5e:d9:e0:
                    86:a3:14:dc:4d:8d:98:8e:87:d4:11:a8:20:55:b2:
                    82:15:b5:3c:1b:b7:8b:b7:ef:31:a2:ec:04:5d:97:
                    f1:26:4f:02:d4:7c:5e:78:6c:44:49:b7:ea:1e:13:
                    ba:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2A:B7:3D:E4:31:E0:EE:02:64:D6:04:8C:71:C7:6E:C7:9D:5B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f57713b-53ae-422c-aa4d-ebb47dcb1b7e/7f0e6673-8482-3889-83d3-4c318cc7fe64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f57713b-53ae-422c-aa4d-ebb47dcb1b7e/9f57713b-53ae-422c-aa4d-ebb47dcb1b7e.crl

            X509v3 Authority Key Identifier:
                keyid:19:50:2D:83:EC:45:E8:D8:E4:85:28:69:23:D3:BA:ED:1F:24:22:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f57713b-53ae-422c-aa4d-ebb47dcb1b7e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:4f:dc:c9:a8:ac:dd:19:00:0b:2d:49:22:35:4f:47:6d:15:
         d4:8f:63:9d:4f:ec:01:13:a8:8a:60:2c:e7:12:04:db:f9:fb:
         2f:94:8e:dd:f1:99:f3:bd:a8:a7:19:f2:af:c9:bf:f4:20:f5:
         c7:09:e6:bc:58:89:9b:2d:29:03:60:41:8f:09:d6:15:9c:6e:
         48:3e:a2:7a:87:b0:5e:02:f2:e2:78:61:7f:a3:1f:13:c7:c2:
         31:04:ae:de:95:5b:c6:ba:98:7e:1e:fe:1a:e3:5e:f5:db:99:
         2d:37:23:d3:dd:20:bd:c9:93:da:61:bd:8c:72:4d:89:dc:aa:
         fb:30:3d:09:34:81:b8:ad:be:e2:24:24:ad:15:c7:7d:c5:43:
         35:d8:35:c4:12:d5:e2:30:0a:1a:34:b7:16:48:e3:d5:01:98:
         9a:8f:18:90:56:de:bb:26:cb:1d:43:37:2f:d9:09:be:ba:a1:
         41:2c:61:a1:91:ce:7f:62:22:ac:48:1a:72:e2:8f:75:5f:a5:
         bd:1e:9c:a5:8a:74:ef:aa:b7:ae:d1:7b:a1:66:86:bb:fe:d0:
         8b:56:65:91:a1:43:93:47:5a:0e:83:81:57:d0:c6:72:1a:be:
         3f:0f:1b:2b:52:cd:de:1b:de:5e:ee:5f:16:e5:26:8e:6a:05:
         9c:83:98:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:53:26 2025 by rpki-client