Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c646f29f-00d1-3357-bcd6-e1bd0f8d74b0.roa
File:                     c646f29f-00d1-3357-bcd6-e1bd0f8d74b0.roa (raw, json)
Hash identifier:          fesmLHQn0dNOWwWXAQWTddP8wolCuWjljer97LaVMSM=
Subject key identifier:   98:62:3E:2A:CA:BC:9E:07:3A:56:EB:45:5F:2A:FE:57:F5:6B:24:13
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C41B82373791C1B033C0C400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c646f29f-00d1-3357-bcd6-e1bd0f8d74b0.roa
Signing time:             Tue 04 Feb 2025 02:00:40 +0000
ROA not before:           Tue 04 Feb 2025 02:00:40 +0000
ROA not after:            Mon 05 May 2025 01:00:40 +0000
asID:                     6167
IP address blocks:        174.244.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:1b:82:37:37:91:c1:b0:33:c0:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  4 02:00:40 2025 GMT
            Not After : May  5 01:00:40 2025 GMT
        Subject: CN=b0b139eb-c260-4625-a851-1a52bc16490b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8b:9f:44:f2:36:be:49:62:b0:24:2a:12:53:
                    f2:92:92:fa:8a:9a:c5:1b:82:35:7d:4b:09:24:65:
                    20:01:4c:b8:fd:3c:2e:c3:34:3e:61:f8:9a:c5:a9:
                    57:61:b2:58:4a:5a:2a:f8:b6:6a:1f:9f:45:53:8a:
                    19:c7:c3:22:a3:67:5f:5f:b9:68:f0:b9:76:cb:63:
                    16:07:87:8c:a8:34:d8:b7:d1:73:6f:2e:6b:41:79:
                    ef:85:df:8f:07:ce:57:2c:7a:8c:5a:30:43:18:06:
                    0c:04:5e:23:3b:78:90:8c:90:a5:b4:fc:1d:88:fe:
                    e8:25:aa:d5:24:60:b7:fb:df:83:0d:40:03:8c:0d:
                    cc:f7:0d:12:95:68:62:ce:9a:d1:31:ec:89:ba:cc:
                    99:1f:82:4e:f4:03:af:14:5c:c7:5b:4e:7d:b9:ae:
                    06:f6:ae:66:c3:79:c0:7b:9d:02:dd:86:1f:a0:b1:
                    4c:0b:dc:05:72:d5:7d:d8:a8:a2:50:54:b7:08:1f:
                    69:ef:1e:58:c1:e6:c8:f5:10:1b:3c:96:24:12:c0:
                    46:0a:3e:46:81:8e:ea:22:4e:02:71:56:3b:6d:16:
                    e8:b0:a8:c0:45:55:aa:4c:b7:47:50:fe:f6:c7:8c:
                    56:ee:31:ec:5d:f3:6e:f1:01:99:80:23:79:cf:1a:
                    f1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:62:3E:2A:CA:BC:9E:07:3A:56:EB:45:5F:2A:FE:57:F5:6B:24:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c646f29f-00d1-3357-bcd6-e1bd0f8d74b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.244.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:5f:67:a7:17:31:7b:48:68:c9:bd:48:12:ff:89:4b:11:31:
         cd:55:65:44:ff:67:15:97:bb:1a:ca:d2:53:38:5e:fd:e4:59:
         24:44:87:f0:b3:dd:0a:c7:b3:88:be:80:69:c0:49:4e:c2:7a:
         e1:7c:be:cb:48:18:26:e8:02:a0:05:d0:b5:af:54:d4:5f:66:
         da:4f:74:97:a8:35:fb:ef:29:f0:b0:2d:03:1c:7c:d6:8d:30:
         17:92:76:61:d2:5f:73:44:15:f7:f3:64:6c:bc:d7:1d:ea:ec:
         17:22:d5:eb:48:1b:04:e1:31:89:ce:e4:8b:25:77:f9:50:47:
         6e:a1:be:6c:ff:ed:a7:0b:5b:ac:5d:44:89:2b:32:da:ab:82:
         5c:b8:45:77:54:e7:fc:51:11:c9:9d:11:93:c0:04:d6:57:da:
         65:86:ff:c1:69:43:a2:e4:30:7e:de:b3:76:9a:d9:28:51:62:
         72:34:6c:4d:bc:87:be:5d:25:09:6a:96:36:53:1d:69:46:93:
         74:ff:36:0e:bb:02:ec:cc:dd:29:25:2d:c3:31:8a:fc:c4:27:
         a4:85:da:2c:68:ea:7d:48:55:53:0e:2b:67:2c:e3:92:2d:41:
         8c:3d:53:06:ef:59:7a:f6:8c:9a:d1:b1:64:97:12:9b:e1:d5:
         0e:29:08:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:43 2025 by rpki-client