Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/6e8483ea-3683-3332-b0a8-95fc8f6603a7.roa
File:                     6e8483ea-3683-3332-b0a8-95fc8f6603a7.roa (raw, json)
Hash identifier:          O8oaPOpBYmXktpiWIDKYr2lP+DAJVAHKHU/ZJI/1tU4=
Subject key identifier:   25:61:5F:C1:37:D1:8D:A8:44:F4:6F:91:55:83:F7:59:5F:12:26:DA
Certificate issuer:       /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Certificate serial:       010D0C9F432858490618D589315ADF1EBA740010
Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/6e8483ea-3683-3332-b0a8-95fc8f6603a7.roa
Signing time:             Thu 27 Feb 2025 17:18:43 +0000
ROA not before:           Thu 27 Feb 2025 17:18:43 +0000
ROA not after:            Wed 28 May 2025 16:18:43 +0000
asID:                     5650
IP address blocks:        206.174.134.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:06:18:d5:89:31:5a:df:1e:ba:74:00:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
        Validity
            Not Before: Feb 27 17:18:43 2025 GMT
            Not After : May 28 16:18:43 2025 GMT
        Subject: CN=209d931d-a499-4312-8aff-23f9f2bca45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3e:fe:3b:d8:6c:76:ab:b7:88:f0:be:94:f6:
                    41:8e:cb:33:6c:be:e5:ef:8c:f1:d0:49:ab:c4:b1:
                    a3:2f:f0:2e:9c:8d:59:61:c7:e8:11:21:30:19:ed:
                    70:90:78:4e:b0:94:67:11:7f:e1:5b:45:3c:65:e5:
                    7d:fc:8e:5c:87:03:a5:ea:fa:c8:ea:d5:56:dc:8f:
                    d0:41:b4:de:b9:a9:56:13:75:6f:af:0a:25:94:86:
                    d6:eb:8c:ff:7b:a2:d4:ce:80:89:ab:42:c6:6a:f2:
                    9e:1a:78:9c:bf:2c:52:7d:f5:15:4a:aa:00:06:2e:
                    66:84:fa:c8:48:0c:f5:24:cd:5c:36:21:8a:2f:f8:
                    ef:f8:c2:c7:25:26:e4:0d:a2:c8:df:cd:11:f6:c7:
                    bf:2a:80:33:98:b6:ea:61:35:2d:46:a8:7b:3d:7d:
                    87:42:97:8c:1c:23:e6:49:86:54:a8:df:e5:53:a4:
                    c1:1a:71:4b:e3:7b:47:29:4c:b1:3d:c4:bf:d6:df:
                    da:ea:8d:f9:58:c6:a5:fc:02:ad:27:d5:cb:27:ca:
                    ad:3a:2d:3a:0c:8d:d3:41:db:bc:36:36:fc:98:0f:
                    3a:40:3d:18:de:82:1b:89:79:09:1c:f3:64:b9:8c:
                    bc:ce:45:a1:79:90:f8:84:e5:7b:f6:db:75:9a:21:
                    27:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:61:5F:C1:37:D1:8D:A8:44:F4:6F:91:55:83:F7:59:5F:12:26:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/6e8483ea-3683-3332-b0a8-95fc8f6603a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl

            X509v3 Authority Key Identifier:
                keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.174.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c7:2e:37:dd:16:2c:fd:78:3a:94:38:fa:b3:32:e1:c1:f3:
         bc:be:f0:ca:66:18:ae:3d:97:82:bd:0d:14:71:60:03:68:ed:
         a4:e3:78:b4:50:7d:41:8d:c8:1b:45:91:b8:a7:1e:71:2b:9f:
         61:da:e0:2a:7d:56:0f:f1:88:1e:f0:ea:c4:8c:f8:aa:8b:91:
         6a:3d:82:e7:50:d8:2d:76:d4:e9:dd:7d:1b:c3:40:ba:58:de:
         0c:dc:ed:75:bb:65:61:96:28:4a:34:53:17:b9:ab:90:27:6a:
         d6:b2:b3:5a:aa:ea:8c:80:b1:c4:bf:66:64:4c:59:70:a5:83:
         4c:d0:af:21:ac:6d:94:0b:eb:9a:5e:ee:87:16:ca:9b:9c:18:
         b9:20:5a:8d:e5:a4:c8:a4:ad:ed:31:7d:0a:3e:c6:1a:8f:c6:
         fc:e3:57:c0:aa:85:ca:f5:19:1c:94:5b:5d:22:c9:c8:c4:55:
         a3:b2:ff:41:4b:27:0b:53:d7:94:27:25:e8:e9:b0:d5:50:fe:
         40:b8:cf:48:cf:be:bc:1f:63:8d:eb:d8:1f:63:6a:93:44:5a:
         5c:83:1a:46:9a:6a:b6:5a:e3:1e:58:c0:59:53:9f:d7:9b:f3:
         aa:c6:34:73:aa:bb:90:56:b5:06:a7:c9:8e:b8:b6:08:bd:6c:
         6c:99:9e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:04 2025 by rpki-client