Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/69a48dde-e328-3c93-97cd-cbf4f0aa0219.roa
File:                     69a48dde-e328-3c93-97cd-cbf4f0aa0219.roa (raw, json)
Hash identifier:          0e9ZbysngUrdRDMxP/keoG7OtWc22FWmaQbNh5nydZM=
Subject key identifier:   A3:0C:BC:EA:9C:9A:82:47:62:29:14:E4:EB:E0:12:E5:2E:B2:FA:FF
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F43285848C2B647B8982142BE32BC1400
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/69a48dde-e328-3c93-97cd-cbf4f0aa0219.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     27161
IP address blocks:        206.212.244.0/24 maxlen: 24
                          206.212.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:47:b8:98:21:42:be:32:bc:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=5b2f94ed-bb4d-43e7-aed8-adf102bd4e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e8:dc:cd:37:7a:d9:de:e8:1e:08:9f:07:11:
                    a7:90:fa:25:2c:6b:c0:06:68:5c:80:45:cc:dd:70:
                    9f:40:c0:41:69:a5:4a:a9:b9:21:b6:0f:10:6b:12:
                    23:61:b9:4d:0a:ad:5d:e3:41:4f:30:69:36:df:93:
                    60:86:9e:95:6a:70:b3:1d:7a:ea:b4:0c:55:6c:8e:
                    51:25:5b:cd:90:48:cb:59:42:27:8f:9f:be:78:9e:
                    d8:31:a6:7f:0e:a8:c4:af:1b:03:69:70:49:ec:81:
                    f1:61:ca:28:17:3b:a3:cb:40:8c:b6:49:9c:3d:50:
                    c3:66:6a:44:b6:2f:be:45:68:e2:c2:87:70:75:73:
                    a7:6d:02:8d:33:f0:0e:fa:66:08:f0:1e:8e:a8:54:
                    08:43:bb:f8:6c:91:8c:4e:49:f1:25:d3:b2:7e:8d:
                    0d:cf:23:65:1e:17:f7:df:83:22:5f:58:00:8c:41:
                    65:46:ea:af:6e:53:3c:77:e7:2b:50:82:71:9b:c8:
                    74:c3:5c:93:b6:b2:44:b4:69:30:5d:91:c1:56:17:
                    57:f3:01:7b:e9:ea:74:90:c1:57:c4:76:5e:20:94:
                    98:2e:d3:a3:49:8f:62:82:35:74:5f:41:58:92:ed:
                    6a:55:d4:5d:5f:a6:56:e3:6e:72:6e:1c:a6:61:8c:
                    5f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0C:BC:EA:9C:9A:82:47:62:29:14:E4:EB:E0:12:E5:2E:B2:FA:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/69a48dde-e328-3c93-97cd-cbf4f0aa0219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.212.244.0/24
                  206.212.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c7:fb:9f:ff:9b:ca:68:f4:66:23:00:8f:f9:88:6a:ef:de:
         df:a3:16:80:6e:b4:2b:fd:e1:5f:b4:a0:7d:71:fa:83:02:00:
         fc:09:87:d6:03:97:e1:9e:10:5e:b4:4c:70:65:c0:a7:d1:bf:
         f1:da:73:c1:ab:64:d9:c5:f2:88:ae:e3:35:b8:7c:20:21:55:
         18:a2:d0:a5:2b:f4:8e:bb:99:55:b9:f8:ad:ab:a9:7e:59:f4:
         ad:ff:c1:6f:8f:ab:f9:c0:16:ff:13:d9:86:1f:68:95:b7:7d:
         de:8b:21:c4:b9:e5:8d:5f:30:db:3e:0f:c2:bf:e5:a9:89:5f:
         79:7f:68:8c:00:e1:12:53:63:0a:06:64:71:7f:52:25:a0:24:
         20:f9:3d:ae:e7:13:8b:d8:8e:41:40:c1:7f:bf:c7:c8:9e:d8:
         e4:d7:54:ae:4a:b5:f7:4e:09:22:b9:89:08:e8:09:e7:f2:6a:
         ab:91:4a:92:45:c5:7d:1d:1e:5e:9f:7b:0f:e7:a9:bd:f0:03:
         b7:32:bd:3f:43:b5:79:9a:2a:73:50:03:ac:09:9b:b5:b3:6e:
         40:4d:f9:57:a1:ef:3f:3e:88:ad:e6:25:82:b3:37:35:f3:f6:
         d7:a4:72:24:d3:0e:1d:24:3e:5b:7d:5b:dd:c0:bf:4c:58:01:
         a1:12:aa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:18 2025 by rpki-client