Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a31d15c-be9f-3a94-a0a9-0945319ba794.roa
File:                     6a31d15c-be9f-3a94-a0a9-0945319ba794.roa (raw, json)
Hash identifier:          P1Qgksfq9/MgfjUJCTaDvBamUzDU4o5bxcxE+2LulXo=
Subject key identifier:   3A:52:53:7A:A8:90:B9:14:E8:CC:E7:7F:08:80:9A:F1:2A:B6:64:26
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848828090052FFD4192F1645F40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a31d15c-be9f-3a94-a0a9-0945319ba794.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     63949
IP address blocks:        172.233.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:90:05:2f:fd:41:92:f1:64:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=dba93d3e-56c6-4404-a2a3-ebfb9b53fa59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ec:b6:43:5c:a1:a8:22:85:fc:6e:7d:7f:d7:
                    46:98:31:c1:b1:07:e6:bd:31:92:ff:40:19:50:d7:
                    ed:70:59:e7:e0:df:8f:a5:18:a8:86:dc:d0:d4:62:
                    20:3b:92:01:fa:50:5e:6e:fc:1c:fa:e9:ec:ca:1a:
                    13:b0:ef:83:bb:2e:57:78:03:4d:ac:9c:41:ea:79:
                    e5:03:e2:b6:5b:17:0f:d9:3f:54:0b:c3:24:80:c6:
                    e3:c5:6b:62:8e:86:00:1a:d7:fe:7e:01:76:1b:d2:
                    63:40:3b:47:46:68:eb:ab:ee:86:98:3a:88:1e:49:
                    2f:77:15:0d:24:c7:3c:ce:44:be:89:e4:dd:92:c2:
                    85:15:9c:33:be:d8:d8:5e:3c:67:ad:66:10:c8:e6:
                    84:01:df:66:b0:a3:df:51:52:7f:c3:1b:db:80:42:
                    ac:56:e3:53:cf:b3:c9:57:a5:56:dd:d7:0a:67:04:
                    3a:a4:1e:85:f9:d1:cb:b5:cd:22:5b:68:7b:34:86:
                    e1:1b:ea:c8:54:0f:64:8e:36:81:5f:62:62:5c:b7:
                    6b:97:66:a7:54:85:cb:d3:30:69:28:60:78:1d:2b:
                    c4:d4:5c:a1:e2:52:b8:80:ce:8a:2b:16:44:61:cc:
                    4a:16:9a:48:52:89:f5:56:3f:00:d1:3d:17:3a:76:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:52:53:7A:A8:90:B9:14:E8:CC:E7:7F:08:80:9A:F1:2A:B6:64:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a31d15c-be9f-3a94-a0a9-0945319ba794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.233.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d6:59:57:3d:d2:da:fb:54:cc:ed:f9:fd:33:d1:8f:8d:6e:
         ef:b4:32:fc:db:b6:de:45:f2:eb:12:91:d7:7b:b4:5a:2c:cc:
         e5:56:7d:e9:10:5a:55:6a:da:27:3f:49:8c:b1:e1:df:a1:e5:
         c9:39:f4:f7:45:cd:17:7a:5b:1b:45:98:2b:ff:0a:61:41:56:
         91:61:90:75:84:39:c1:6b:99:28:8f:a2:f0:1b:f6:42:39:ff:
         71:dc:ed:45:76:f7:48:92:0b:03:e0:6a:6f:26:67:ed:5f:ee:
         c4:94:51:8d:b7:11:20:49:bc:f4:f8:74:79:bd:89:07:ed:37:
         74:6f:53:80:27:7d:de:14:25:26:6a:bc:46:6f:15:35:aa:d9:
         56:e7:4a:af:4f:89:47:b4:3b:8c:d2:0b:81:77:e5:30:f7:66:
         e1:e8:b9:81:59:12:56:fa:f5:bd:6f:ac:da:a4:a3:1e:16:6a:
         6d:0c:8a:2b:7d:fb:79:7d:31:ec:d1:08:18:69:55:c3:03:25:
         bd:e7:1b:2c:ca:71:bf:2b:6f:10:bb:24:77:3c:10:80:73:10:
         af:70:75:bd:21:62:2e:cb:8e:d3:02:08:a8:bd:e5:cc:e2:cb:
         2b:23:50:e8:21:58:8a:d4:fd:11:ee:b3:66:18:6f:04:fa:f7:
         79:68:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:33 2025 by rpki-client