Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/29bf41c1-8981-308d-a1fd-9e9dcb73281a.roa
File:                     29bf41c1-8981-308d-a1fd-9e9dcb73281a.roa (raw, json)
Hash identifier:          BBZX/ZfPP2LToOwV13tfr+vkE/F6MLxOoBHpy5pvF48=
Subject key identifier:   4E:DA:89:00:A0:D1:AE:38:FA:8E:F1:2D:99:D4:7E:85:F4:CD:92:6E
Certificate issuer:       /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial:       010D0C9F432858481B5FA9E1863FD7728D082400
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/29bf41c1-8981-308d-a1fd-9e9dcb73281a.roa
Signing time:             Thu 05 Dec 2024 15:26:28 +0000
ROA not before:           Thu 05 Dec 2024 15:26:28 +0000
ROA not after:            Wed 05 Mar 2025 15:26:28 +0000
asID:                     376
IP address blocks:        132.213.64.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:5f:a9:e1:86:3f:d7:72:8d:08:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
        Validity
            Not Before: Dec  5 15:26:28 2024 GMT
            Not After : Mar  5 15:26:28 2025 GMT
        Subject: CN=928903d6-bba6-439b-a323-e106f1a411d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:b6:24:95:2e:01:90:32:ae:79:54:1a:5a:
                    73:9a:09:82:d3:47:7a:68:d5:ae:c8:57:c6:b5:19:
                    a0:09:f0:b8:08:c8:b9:8f:90:ae:33:9f:3b:c3:84:
                    18:99:72:a5:27:e0:44:d7:7a:71:a2:30:f4:5f:64:
                    1a:ac:21:89:82:99:26:b7:dd:7a:7e:f3:b2:aa:76:
                    66:df:d6:8e:9b:46:c5:a7:b3:8f:22:6f:fa:68:65:
                    88:75:31:b7:af:fd:05:46:85:ee:99:cb:9c:19:de:
                    88:ad:13:dc:b1:ca:aa:72:52:9f:02:8d:6e:f6:c1:
                    3a:2e:9e:8d:d3:3c:ed:23:e0:71:5d:2b:79:b4:20:
                    5b:ab:89:a8:e5:cf:ab:48:88:fb:9e:1c:88:34:62:
                    76:33:e8:b8:98:be:14:5d:d4:7a:28:bb:77:5a:a6:
                    bf:fb:76:e1:5f:ef:bd:97:82:fe:88:57:f0:d0:d1:
                    f7:ef:ea:59:06:f8:1a:20:59:1a:e1:da:ef:6c:78:
                    2f:75:5d:9a:3a:b1:61:55:67:2a:68:e0:b8:97:ed:
                    78:da:ad:46:cb:cb:e0:b0:82:7a:07:7d:d3:77:12:
                    ac:c9:6e:c4:be:3b:86:ad:59:df:33:df:52:b8:87:
                    ac:62:06:ba:18:a4:2a:88:72:49:8d:a6:23:8d:c7:
                    9d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DA:89:00:A0:D1:AE:38:FA:8E:F1:2D:99:D4:7E:85:F4:CD:92:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/29bf41c1-8981-308d-a1fd-9e9dcb73281a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl

            X509v3 Authority Key Identifier:
                keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.213.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b9:bc:b3:59:c3:e0:12:97:42:71:70:61:9f:30:42:60:12:
         4a:60:91:da:92:40:05:1d:bb:71:ec:10:67:08:fe:d8:84:e8:
         01:b6:06:ea:13:0e:9b:a3:f2:f1:ce:1a:66:3f:a9:d5:fa:36:
         92:57:f2:7b:71:da:0a:21:54:1f:37:bf:ec:38:55:f3:32:23:
         3a:e3:33:47:47:23:0e:58:19:f8:99:c6:a0:db:ac:28:18:48:
         28:75:18:fd:da:99:0c:b2:1d:78:ae:67:65:d4:1a:63:1d:22:
         9d:80:c2:e2:99:17:58:78:cc:f3:d8:76:50:42:a7:7a:56:ef:
         93:8c:28:70:84:9f:89:2a:49:ee:c8:36:56:d9:c9:43:15:ae:
         40:ca:8a:10:40:03:df:93:40:59:5b:52:34:ca:e6:79:8e:34:
         0f:52:12:7f:1d:fa:2d:1e:4d:c8:69:4f:21:ea:ef:12:ea:e4:
         ab:7c:06:8a:e7:3b:7c:7f:51:33:28:47:3f:7a:e3:95:84:ff:
         e3:a2:57:f7:8a:7d:63:55:94:ab:fe:3c:3e:c1:3d:aa:a3:72:
         08:4b:d3:2a:76:69:37:d2:44:b8:71:a0:f7:c5:90:58:78:90:
         7b:33:6b:8a:2a:1b:18:22:9e:0b:9d:d7:15:49:f8:04:2d:3c:
         18:ee:b5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:13 2025 by rpki-client