Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/268ea0de-6048-3916-af1e-d45f0d2aad37.roa
File:                     268ea0de-6048-3916-af1e-d45f0d2aad37.roa (raw, json)
Hash identifier:          +b/HTAOlfBP3aHArDaFox8w9gXszq6wB17KCZ9vxI6s=
Subject key identifier:   62:C1:17:57:90:6E:C6:76:AA:73:4D:F7:CB:E5:E3:3C:59:0D:DE:5F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848E8666A7FA5F2ABA0B75B16E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/268ea0de-6048-3916-af1e-d45f0d2aad37.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.254.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:6a:7f:a5:f2:ab:a0:b7:5b:16:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=ab325c17-7183-4150-bc82-b8de6758d12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:26:19:6b:09:24:75:8d:1e:08:04:03:8f:1c:
                    0c:f3:04:d0:37:42:ba:f5:bd:82:2d:94:c6:e2:64:
                    2e:db:68:ed:09:19:83:b3:5e:2b:0a:52:2f:cc:a1:
                    ee:28:9d:df:af:82:b6:cf:0e:0f:bf:a5:2c:a0:f1:
                    06:38:3a:09:7f:05:84:f3:d4:9a:cf:5c:c1:74:75:
                    5d:66:29:fc:cf:f5:12:a9:0e:f7:ea:d2:4d:86:7f:
                    ef:f5:d1:7e:3f:5e:2f:ae:1d:88:bc:47:67:e3:11:
                    0f:e4:79:98:0e:74:f0:3c:9b:ef:e7:29:67:cd:95:
                    e5:76:51:e0:48:87:4a:9b:3a:53:3f:4d:f7:72:47:
                    63:92:47:81:f2:15:20:de:02:86:1d:cd:91:1a:9e:
                    6e:22:1a:05:c4:2a:ea:c4:3b:bf:87:e9:de:98:79:
                    a3:53:b9:8a:ea:52:b5:05:1a:7f:d5:70:d9:a1:46:
                    8f:de:43:71:29:05:c8:dd:61:5f:2f:71:54:58:3a:
                    27:3a:47:42:4c:ff:7e:c2:49:e7:c1:2f:3a:4a:cd:
                    d0:2d:01:07:8e:b6:be:c3:34:55:e5:34:12:83:f7:
                    af:69:35:7a:c5:47:81:9a:39:c8:65:28:4e:64:91:
                    e4:9b:09:18:a2:3a:c5:a7:93:1f:6e:00:db:92:87:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C1:17:57:90:6E:C6:76:AA:73:4D:F7:CB:E5:E3:3C:59:0D:DE:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/268ea0de-6048-3916-af1e-d45f0d2aad37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.254.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e3:1a:7a:37:2d:9e:b3:f4:43:30:6c:2f:a1:0d:09:1b:4a:
         f7:28:29:6d:bf:ca:62:7e:9e:9e:2f:23:87:a1:ad:fa:87:4f:
         02:98:47:ed:e2:47:14:b6:03:9e:6b:4d:55:f1:9d:e2:3f:ba:
         f9:0f:bd:70:28:17:b4:9e:73:0c:02:30:a6:87:31:bd:6d:d0:
         b6:40:80:62:55:0a:6e:49:da:e9:14:78:a2:49:7a:6f:a0:10:
         1e:a8:61:6d:1c:ef:56:a1:6c:95:52:eb:68:b8:d0:21:f0:a3:
         ad:70:a8:54:76:69:f4:37:e3:0c:87:ba:b2:45:64:d0:47:cf:
         87:7e:8b:58:c6:f6:80:f9:49:84:86:fe:93:0c:1a:d6:39:b6:
         7a:dd:04:dd:f6:01:f7:c7:1b:15:44:9e:ca:f4:a4:20:3f:d7:
         2a:cb:e0:76:4f:b5:e0:8c:90:99:3e:9a:49:05:b2:7e:d3:fd:
         73:d6:de:53:d9:4d:62:84:33:4e:1d:23:29:8d:f4:50:06:e8:
         08:10:f1:c7:a1:71:c2:00:a0:58:3d:72:36:d3:97:49:19:e6:
         b3:4c:28:9f:f6:a8:3c:84:de:0e:c4:53:38:ed:e5:1e:9b:62:
         a7:8f:7a:7c:81:5c:b0:20:aa:29:55:97:3d:cf:2a:5a:99:71:
         0f:8a:5e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:11 2025 by rpki-client