Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa
File:                     b5c63bfd-1823-3439-89e5-1713f0194e5c.roa (raw, json)
Hash identifier:          bRMFfk7ZyJJ9vlvINJdkz6KHpcVqeT+6hyvliDzJ1U4=
Subject key identifier:   A3:C0:D1:C3:1A:78:9E:6D:C7:AA:C9:0A:7B:55:6C:FB:BD:3A:8E:53
Certificate issuer:       /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
Certificate serial:       010D0C9F43285848A711279D0DC5599187493F80
Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa
Signing time:             Fri 24 Jan 2025 16:21:27 +0000
ROA not before:           Fri 24 Jan 2025 16:21:27 +0000
ROA not after:            Thu 24 Apr 2025 15:21:27 +0000
asID:                     396338
IP address blocks:        170.100.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a7:11:27:9d:0d:c5:59:91:87:49:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
        Validity
            Not Before: Jan 24 16:21:27 2025 GMT
            Not After : Apr 24 15:21:27 2025 GMT
        Subject: CN=59050864-ecd4-4269-9d74-e4e0ecbaefa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:be:bc:1f:34:ee:d9:6f:a7:55:84:f7:ed:
                    2e:4d:7f:a1:f7:22:f7:e3:d9:bd:8e:54:03:38:2d:
                    31:e2:52:7d:11:d3:7a:6d:3d:31:e7:3a:d5:25:d8:
                    4f:3f:ab:fc:71:fd:0c:85:c5:0b:66:fc:f2:b8:b8:
                    f2:4b:57:db:26:bd:b4:0b:2e:a2:39:4b:6d:36:22:
                    35:92:ff:31:06:5b:51:e3:59:cc:be:90:b0:21:00:
                    61:69:2d:8e:9a:54:2b:6b:6c:54:2d:f8:ef:5d:bc:
                    83:d9:89:81:10:18:ae:e5:fd:8f:7c:5e:9c:1b:ac:
                    c3:04:ed:0e:c8:7c:ea:52:af:14:13:98:0d:bd:51:
                    72:d3:28:d4:4f:69:9c:64:57:32:ba:ee:12:47:42:
                    29:a6:1d:ac:21:29:9d:58:0f:a7:7f:2a:10:0f:96:
                    ec:8b:5e:9f:59:d1:27:7b:d8:be:c4:e2:70:be:a8:
                    4f:f0:3a:c4:12:6f:bf:53:89:43:bd:62:0b:d4:e8:
                    c9:9a:22:9a:f7:bf:b7:e8:a1:c2:8a:b8:82:7c:c0:
                    65:b8:3c:9b:09:02:a8:fe:c9:76:56:25:66:79:e7:
                    b7:b3:30:f3:48:4a:a5:78:59:76:59:8d:d1:50:0d:
                    ea:48:2e:70:8b:88:15:0e:c1:a4:48:a8:44:0e:b4:
                    7f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C0:D1:C3:1A:78:9E:6D:C7:AA:C9:0A:7B:55:6C:FB:BD:3A:8E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl

            X509v3 Authority Key Identifier:
                keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.100.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a3:ba:90:8e:fd:e8:5c:7e:70:f1:5d:75:01:3b:49:2d:0c:
         4d:a2:e1:42:b6:4b:0a:90:e0:0c:7b:8e:17:eb:16:ec:a5:bf:
         1f:4f:7b:8a:6b:29:3b:56:1d:28:5c:08:d3:c6:7a:78:06:bd:
         26:2e:f1:8f:d8:e8:0d:2f:17:91:90:aa:20:ce:9c:d4:ea:e9:
         c7:62:12:8d:c5:2f:16:73:0e:da:f6:7d:c6:33:45:c0:06:3b:
         c7:a6:a3:89:df:2d:69:36:ec:7d:a6:67:68:9c:3f:37:91:34:
         9b:2a:5f:fc:a7:cc:b2:2a:c7:0d:89:71:ea:31:35:04:d7:36:
         3d:fb:83:82:69:a8:64:f3:ed:7a:f0:a5:7e:d8:db:fb:8f:1a:
         db:38:d6:49:e8:cf:b5:b5:6d:c6:d3:3a:f1:0b:8f:98:06:9e:
         1d:bb:bf:c1:7b:e7:35:69:78:60:fc:7c:cf:64:19:0f:50:76:
         6a:4f:70:99:b8:80:60:99:30:bc:0a:20:6f:dd:dd:23:92:9e:
         0d:e1:39:68:df:b8:5d:e1:fa:b8:d6:67:ca:77:e0:f9:ac:90:
         89:69:f6:1e:fb:57:d8:bb:c9:21:b4:56:e8:44:f8:b1:88:d3:
         75:d4:10:ed:98:d1:7c:6d:bf:02:7a:a9:c2:bd:ef:16:1f:71:
         b8:8c:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:15 2025 by rpki-client