Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/3a8a5cd5-fc22-32c1-a861-e67ea30c1882.roa
File:                     3a8a5cd5-fc22-32c1-a861-e67ea30c1882.roa (raw, json)
Hash identifier:          Lx31w/ssO5RWUNRjLXqtq92dP4h39+FpaixJD/A8D6c=
Subject key identifier:   83:B1:42:61:A9:55:39:6F:CE:A0:45:28:C9:5F:B8:3A:A5:D9:4C:CA
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584957F40AB92D4D1392E0239880
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/3a8a5cd5-fc22-32c1-a861-e67ea30c1882.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     63086
IP address blocks:        69.48.217.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:0a:b9:2d:4d:13:92:e0:23:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=22c36c0f-83eb-4229-869e-67a9b9f927eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:68:7e:72:03:24:0b:79:ed:a8:f3:7e:a2:a0:
                    ae:8d:59:a8:5c:30:a4:76:80:1a:cd:d9:89:a1:ed:
                    81:0b:00:7b:48:d7:9e:06:4e:c6:95:71:58:97:b4:
                    44:f4:ee:49:fc:a9:d0:c1:dd:83:b4:b1:12:99:4b:
                    b7:55:17:68:d7:0d:ac:3c:e8:70:c7:8e:65:dc:7d:
                    cd:31:16:f0:e8:52:c0:e5:61:5e:92:41:aa:f3:d9:
                    49:9a:39:b1:fa:c6:0e:1c:75:3c:51:ef:71:5a:22:
                    42:c9:33:d9:a0:ed:eb:71:2e:f8:1b:ff:70:0d:5a:
                    32:24:92:00:e5:97:71:af:03:9c:2a:34:92:66:72:
                    2b:80:69:76:ed:ec:65:5f:26:64:33:51:15:a8:65:
                    7c:e0:33:da:92:b9:2b:f4:6f:10:5f:bc:cf:12:8c:
                    79:b2:32:1c:e3:ce:d3:f1:78:ce:a1:4c:62:74:fd:
                    b6:30:4f:d2:b0:b2:5d:fa:c5:0d:42:3d:0b:cc:87:
                    2f:75:2d:20:49:83:8a:73:a9:f3:01:7b:5d:8d:6a:
                    30:1d:1d:eb:3b:2d:21:d8:d5:3f:d3:69:12:3f:a4:
                    bd:4b:1d:76:e7:30:d6:d8:96:a0:0d:25:2f:18:ea:
                    09:c1:35:9f:71:01:aa:14:27:a4:e1:45:0f:88:30:
                    99:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B1:42:61:A9:55:39:6F:CE:A0:45:28:C9:5F:B8:3A:A5:D9:4C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/3a8a5cd5-fc22-32c1-a861-e67ea30c1882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e5:c5:e2:67:e2:1f:e5:95:23:a7:fc:a5:b5:11:7f:1d:78:
         19:8f:d9:70:5d:47:11:b5:41:85:26:40:c2:f5:c9:c0:ba:58:
         c5:d0:cb:c2:bf:62:29:58:ae:d6:a6:bd:0b:ad:9e:f6:5d:24:
         22:59:94:8b:ff:6d:be:c3:ad:96:ea:85:25:19:06:c2:3e:11:
         70:c9:7a:29:fc:83:0b:e8:7d:ad:02:8a:dd:d0:e0:41:ed:ac:
         f2:72:e0:98:0f:a5:0d:21:01:22:93:55:b1:f5:0d:45:8d:fd:
         8e:60:24:44:05:f7:83:59:d0:31:7a:e4:49:70:8f:55:61:fc:
         5b:9f:3e:bd:88:1d:e4:d2:f3:7a:6c:9a:54:49:3b:54:bd:ff:
         e7:0b:55:0b:9a:2f:b7:25:9d:ed:c4:a0:02:94:f6:72:5d:8c:
         b2:35:89:06:ea:45:ca:ac:fd:24:b6:d7:8c:11:68:1d:d7:57:
         f3:f6:82:16:73:08:62:32:79:17:e3:2d:f2:9e:64:84:67:47:
         18:06:9f:63:f1:1d:f6:67:66:f8:2d:70:50:c1:de:72:23:98:
         df:cc:c9:34:f3:bf:d1:8c:d8:3c:bc:5c:0e:27:16:92:72:0d:
         5a:03:19:85:84:a8:7b:af:1c:33:42:84:3e:2b:7f:56:fa:07:
         63:69:15:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:04:57 2025 by rpki-client