Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/86ceed84-c8d7-314a-afae-6c0feae7a239.roa
File:                     86ceed84-c8d7-314a-afae-6c0feae7a239.roa (raw, json)
Hash identifier:          /xSGlEcB1zXAcfRvYyUfNrp1QeHNvu5aVs043vI3ttk=
Subject key identifier:   56:8F:B5:88:98:E4:32:10:B8:7F:09:31:26:CF:99:94:4C:0E:67:BA
Certificate issuer:       /CN=6de2cf1a-17f5-41d7-8356-6e88905671e0
Certificate serial:       010D0C9F432858493673B7D3811DC094C3181E00
Authority key identifier: CE:33:74:CA:DC:4D:AC:93:BA:3D:80:D3:75:C9:7F:11:FF:AD:B5:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/86ceed84-c8d7-314a-afae-6c0feae7a239.roa
Signing time:             Mon 17 Mar 2025 01:00:37 +0000
ROA not before:           Mon 17 Mar 2025 01:00:37 +0000
ROA not after:            Sun 15 Jun 2025 01:00:37 +0000
asID:                     53356
IP address blocks:        199.30.92.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:36:73:b7:d3:81:1d:c0:94:c3:18:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6de2cf1a-17f5-41d7-8356-6e88905671e0
        Validity
            Not Before: Mar 17 01:00:37 2025 GMT
            Not After : Jun 15 01:00:37 2025 GMT
        Subject: CN=2cab7af6-54a1-4fbd-b2f3-0c6aade793c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:f0:7c:e8:ad:58:0c:c3:27:93:9a:0d:ae:
                    48:4e:1b:5b:fd:7b:66:90:85:2b:75:bb:82:2c:0f:
                    38:a7:f3:f7:16:d1:e7:3b:fe:9b:7e:f2:4a:5f:59:
                    3d:a7:02:7f:ef:e3:4c:93:01:ed:c4:b3:41:16:16:
                    46:8f:98:0b:56:d0:c5:7d:36:15:9c:6d:fc:b7:49:
                    9f:43:c3:73:ae:ee:30:83:20:e9:e6:99:73:93:bb:
                    84:fe:cd:06:a1:22:63:e2:7e:3c:b8:66:44:07:80:
                    38:85:01:20:5b:36:be:8c:93:6a:e3:eb:24:e6:8a:
                    76:0f:70:de:48:1a:7f:d8:15:d1:9c:ef:a7:73:18:
                    33:59:0f:2d:ff:23:cf:ff:bd:b6:02:26:24:03:75:
                    45:55:f0:08:bc:84:f9:8c:d0:73:98:bf:8f:92:1d:
                    25:b0:b4:19:e3:34:0e:17:72:92:18:76:bf:2b:7b:
                    2e:0c:07:91:7c:a1:3d:a4:7f:bc:0b:5e:ce:f2:31:
                    3b:d1:7c:0f:c9:fe:8e:5f:6a:d5:53:12:80:95:18:
                    46:e0:9c:70:11:f5:d3:86:95:23:0f:c3:e5:51:b7:
                    8b:eb:bd:ce:0f:55:d0:5c:e2:9c:d0:6c:2d:73:60:
                    8b:54:0e:ff:06:a5:0d:b5:e5:71:60:e1:fd:64:66:
                    22:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8F:B5:88:98:E4:32:10:B8:7F:09:31:26:CF:99:94:4C:0E:67:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/86ceed84-c8d7-314a-afae-6c0feae7a239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/6de2cf1a-17f5-41d7-8356-6e88905671e0.crl

            X509v3 Authority Key Identifier:
                keyid:CE:33:74:CA:DC:4D:AC:93:BA:3D:80:D3:75:C9:7F:11:FF:AD:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f7:44:a8:34:cb:f8:6d:52:b7:ae:e6:4d:f3:c4:90:91:a4:
         8a:bd:dc:1d:92:0a:e8:48:11:24:45:c7:37:81:bb:af:33:cb:
         a8:75:55:e1:ed:14:fe:f2:a8:30:32:6c:ea:8f:6c:0e:8f:bb:
         2d:db:82:23:b4:b6:ec:02:b5:f2:49:17:6a:32:e3:fa:87:2a:
         f0:db:5c:fc:53:cd:57:08:58:1d:ce:28:18:69:56:78:08:96:
         96:17:67:90:6c:65:62:ce:13:92:8e:52:f3:49:91:cc:ae:11:
         2a:c8:fa:28:4d:5c:07:35:80:62:57:c2:27:0d:80:a3:4e:15:
         a4:7e:5d:16:37:67:15:46:ee:3b:6e:f5:f1:fa:33:2b:4d:f9:
         54:98:9b:bc:bf:3e:f6:38:c7:0f:45:23:3e:6c:52:86:52:ef:
         97:2e:7a:fa:63:21:a9:45:66:d3:ae:0d:03:fd:5b:57:0e:34:
         18:60:91:e4:ec:0e:a3:5d:8b:ca:da:1e:60:93:87:4f:96:b3:
         eb:32:2e:8c:7c:c7:24:c9:7a:00:d2:d2:76:34:e6:1e:2e:46:
         16:16:ec:fa:8f:3b:77:9b:ba:64:2e:87:8b:7f:39:cd:21:7c:
         bd:d3:01:f2:bc:9b:70:fe:7c:90:f3:e1:38:8d:8f:1e:59:ca:
         90:21:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----