Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac87b74f-faff-3818-8d58-b345fa1bc412.roa
File:                     ac87b74f-faff-3818-8d58-b345fa1bc412.roa (raw, json)
Hash identifier:          12X2O3i/dfBz8iQ/MrnS0E4rqzpdsPgeSHT/1lMMJpk=
Subject key identifier:   BE:B7:7A:9A:A2:54:0F:6C:33:03:31:17:0F:B3:66:67:A4:58:A7:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150EC49A53AE0E4A1AA8E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac87b74f-faff-3818-8d58-b345fa1bc412.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.213.92.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:ec:49:a5:3a:e0:e4:a1:aa:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=a23ba82f-d173-4286-bb83-ebd8f997217f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:8d:0d:ae:77:0f:3f:a8:b7:6f:e4:01:4f:
                    c2:e8:7f:68:bb:f9:a4:48:94:19:85:75:98:40:d6:
                    81:04:e8:1f:fb:bd:dd:b3:b1:11:4f:fb:7e:10:d0:
                    0a:27:57:50:11:aa:ac:06:b2:b9:02:79:59:bf:85:
                    d0:2f:cf:95:d3:0a:85:f1:b9:1c:1a:8f:f5:40:ee:
                    06:b7:92:84:2e:c0:7b:3c:5c:d1:84:69:78:b5:9a:
                    e1:43:26:6b:10:0d:93:e8:5d:b7:43:08:ad:88:50:
                    f3:91:80:46:24:ee:c8:9e:65:2b:90:1c:5f:de:f9:
                    29:a3:86:27:aa:9c:78:47:10:4d:13:4d:e5:64:fa:
                    e9:20:a7:79:17:53:5f:b7:49:2a:b2:36:3a:47:0e:
                    60:0b:92:1b:99:72:79:aa:8c:b7:20:08:00:bd:34:
                    2c:83:c8:c6:b4:a3:66:f3:17:aa:3c:69:7a:9c:47:
                    7c:27:bd:cb:d9:36:3b:a4:2a:c8:34:d4:54:1a:dc:
                    b2:f2:28:8b:8e:66:d9:a6:72:2a:5b:1e:ed:b0:94:
                    45:80:f3:d6:60:38:64:04:38:22:4f:a7:61:f1:72:
                    df:66:19:0e:a8:47:5b:b8:7d:1d:cd:d2:47:42:10:
                    37:8e:0d:7b:ff:a8:8a:16:14:07:4d:59:d5:24:e4:
                    49:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B7:7A:9A:A2:54:0F:6C:33:03:31:17:0F:B3:66:67:A4:58:A7:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac87b74f-faff-3818-8d58-b345fa1bc412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:6d:2a:67:ee:3a:85:b5:4a:54:7d:55:fb:b5:98:60:34:e6:
         00:1d:d2:87:ff:27:87:43:f0:b2:75:f2:45:2e:c3:31:af:90:
         d7:12:53:d2:ab:08:b0:ef:d5:17:74:ab:09:db:80:95:bf:f2:
         09:ca:9f:92:a0:d5:93:5c:92:12:f8:2f:9f:ec:90:51:7f:c3:
         3f:49:59:98:19:7e:1c:d2:9d:91:79:15:4d:a0:94:f0:ac:e3:
         c4:f8:47:ca:54:c2:2b:3d:96:ab:f9:14:45:c3:a8:88:cd:0a:
         a4:71:39:83:2d:55:4b:90:ba:f0:0a:e9:d0:e3:b4:15:ce:18:
         bc:cc:11:f0:fd:67:7d:41:56:ce:e1:1f:07:77:fa:e9:5d:25:
         7a:3a:7e:5a:fd:9b:81:2a:7c:e8:bd:92:2f:d3:f0:2f:1d:57:
         a8:dc:a4:a2:a7:08:e2:98:ac:e7:04:85:b9:47:13:35:b2:a9:
         dd:63:6a:df:93:12:bc:a4:04:1c:37:68:bd:73:69:14:27:1f:
         37:d4:45:b5:b9:cf:28:34:5b:b5:b1:da:79:d0:ac:01:0d:59:
         26:f2:f9:ee:07:6c:63:28:c5:82:32:8d:d3:61:65:a2:85:d0:
         d3:b3:42:86:5f:d5:65:64:7e:aa:d4:ae:b4:ce:8c:35:4d:bd:
         65:02:e6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:15 2025 by rpki-client