Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/3b0f540f-d0a8-3771-8ca1-b0f92a944f19.roa
File:                     3b0f540f-d0a8-3771-8ca1-b0f92a944f19.roa (raw, json)
Hash identifier:          xJ4kX0X+GiR4j9ktEzSd8tAJscI4rLQYkI0HF6paujw=
Subject key identifier:   19:92:F3:0A:F0:94:D0:93:D0:89:CF:0D:45:D9:D0:80:4A:0A:3C:34
Certificate issuer:       /CN=e62ce32a-582e-49d1-9c4a-bd8cab83f7eb
Certificate serial:       010D0C9F4328584900215F46530326724B601580
Authority key identifier: 5F:F0:4F:56:FF:C7:E3:22:3F:23:7A:CD:F3:42:AE:3E:64:E3:FB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/3b0f540f-d0a8-3771-8ca1-b0f92a944f19.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     400633
IP address blocks:        69.176.4.0/24 maxlen: 24
                          69.176.6.0/24 maxlen: 24
                          69.176.12.0/24 maxlen: 24
                          69.176.19.0/24 maxlen: 24
                          69.176.37.0/24 maxlen: 24
                          69.176.44.0/24 maxlen: 24
                          69.176.53.0/24 maxlen: 24
                          69.176.56.0/24 maxlen: 24
                          69.176.57.0/24 maxlen: 24
                          69.176.63.0/24 maxlen: 24
                          76.8.178.0/24 maxlen: 24
                          76.8.185.0/24 maxlen: 24
                          76.8.186.0/24 maxlen: 24
                          76.8.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:5f:46:53:03:26:72:4b:60:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ce32a-582e-49d1-9c4a-bd8cab83f7eb
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=cbe318d0-57ab-4d74-a30e-47e540fb6e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:08:a5:23:53:09:57:68:a6:32:3c:bf:f4:a9:
                    7a:5d:05:88:6a:b8:1c:5d:5b:9a:11:a7:3f:ad:c3:
                    5f:7b:8b:06:91:71:34:81:8f:d4:2f:a2:78:44:93:
                    b5:68:7f:1e:3d:d6:29:28:21:d0:80:59:5f:ea:e3:
                    81:1e:9b:0d:35:93:a0:2d:f4:42:83:29:42:06:c1:
                    70:35:db:f8:ca:01:cc:90:26:9d:3d:b3:ad:35:fa:
                    11:31:43:ef:b9:6a:ae:ff:ff:69:b2:6f:0f:4c:e5:
                    55:da:d9:c5:67:d6:5e:42:81:3d:5f:2c:56:23:e9:
                    fe:b1:e3:1b:9f:11:66:28:5b:21:b8:53:66:96:4b:
                    2b:a4:31:3f:68:68:1a:16:2f:70:a1:ab:43:4f:42:
                    46:bd:6d:af:34:09:8e:2f:15:ed:83:c3:3a:e6:52:
                    15:31:a1:69:3e:08:73:45:cb:5f:d2:e9:15:d6:71:
                    54:3a:1a:9f:cd:11:92:c7:78:5b:50:c1:ba:e9:c7:
                    74:54:6a:a9:de:e9:f6:ff:85:78:ac:2f:8a:8b:06:
                    92:85:51:80:81:9c:a6:3e:a8:ed:b7:70:73:7e:48:
                    6c:e0:e2:eb:e5:2c:56:04:fc:cf:81:6f:47:96:0f:
                    3f:b0:87:95:25:62:9b:b6:04:fd:9c:96:95:ac:df:
                    6e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:92:F3:0A:F0:94:D0:93:D0:89:CF:0D:45:D9:D0:80:4A:0A:3C:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/3b0f540f-d0a8-3771-8ca1-b0f92a944f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.crl

            X509v3 Authority Key Identifier:
                keyid:5F:F0:4F:56:FF:C7:E3:22:3F:23:7A:CD:F3:42:AE:3E:64:E3:FB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.4.0/24
                  69.176.6.0/24
                  69.176.12.0/24
                  69.176.19.0/24
                  69.176.37.0/24
                  69.176.44.0/24
                  69.176.53.0/24
                  69.176.56.0/23
                  69.176.63.0/24
                  76.8.178.0/24
                  76.8.185.0-76.8.186.255
                  76.8.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:86:5a:6c:e3:65:9d:29:7b:f6:c1:56:60:38:7d:69:f7:a2:
         46:20:74:d0:1b:09:7d:d8:59:ed:8f:b5:06:c9:7d:c5:01:8b:
         eb:02:fb:da:0d:11:a3:23:e5:c5:4b:0f:c7:eb:0b:be:c3:a9:
         11:13:f7:37:91:88:da:8e:f7:ae:00:8e:ce:6e:b8:f8:41:a4:
         c0:2a:2c:ab:32:cb:d3:f4:31:08:48:37:e1:ea:53:d5:00:6e:
         4f:3a:2c:e7:a1:c0:f0:2d:3c:8b:e0:9a:9f:e6:f2:c5:3d:d8:
         74:d5:31:63:91:66:ba:63:f5:51:26:d3:cc:51:f6:6d:8f:26:
         b5:ad:d9:37:a5:87:f3:3a:7e:ba:6a:47:21:17:49:25:a1:8f:
         59:7a:33:de:0c:e9:4a:ce:10:01:98:29:5c:f5:08:e4:38:a0:
         f6:3e:ba:1e:eb:88:52:e2:b7:3f:f7:eb:a9:15:5f:10:9b:a1:
         18:77:b0:26:7f:39:6e:08:80:2f:ad:4b:f5:0a:e2:c4:3b:3a:
         11:43:4e:97:17:2e:2c:0b:f4:2e:94:be:12:5b:6c:e3:23:c5:
         db:8b:a8:47:39:76:c8:11:ba:83:b5:05:bf:65:5f:03:c4:25:
         21:90:ac:2d:47:9f:7c:06:23:84:24:55:84:ca:6f:4b:5b:b6:
         67:76:c1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:15:14 2025 by rpki-client