Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/326822c1-9987-38d4-b737-8e0fcb22bf28.roa
File:                     326822c1-9987-38d4-b737-8e0fcb22bf28.roa (raw, json)
Hash identifier:          CNI8EywVpEevdSwRFKz8N4/fjCHu2spIPaNdbMcAVhc=
Subject key identifier:   AA:C8:81:54:ED:92:0C:E5:C6:21:BF:C0:A0:E5:52:DA:89:7F:1F:08
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926CF6C82BF6AA33A863880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/326822c1-9987-38d4-b737-8e0fcb22bf28.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     1523
IP address blocks:        216.66.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:cf:6c:82:bf:6a:a3:3a:86:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=b36883d5-6d09-47f6-8187-3b0a46aea0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:92:a9:a2:7d:15:75:67:7c:18:5a:7c:94:6f:
                    46:fc:73:7f:4f:09:4d:ba:12:73:d4:fc:c6:77:40:
                    08:7f:3c:14:31:df:d5:7f:d4:b8:4f:05:46:85:a2:
                    82:96:ff:3b:ae:f1:8a:16:ec:62:49:9b:f5:09:e7:
                    71:93:ff:20:c1:8f:74:22:03:22:16:15:75:da:55:
                    5f:a6:79:59:da:36:32:a9:0f:e7:4a:25:1e:34:4a:
                    67:89:95:d7:02:0c:43:38:8c:28:1a:8d:4e:a7:a2:
                    6b:69:6f:4f:d0:f7:a0:c7:a6:e0:83:60:b5:23:5c:
                    70:85:33:72:38:b6:ae:d2:bd:4d:27:08:21:0a:d4:
                    0f:e3:42:c1:4a:da:20:aa:99:be:99:f6:16:8a:f9:
                    fa:bd:c5:ef:81:c1:a2:4d:30:ca:d9:c4:3f:cf:8f:
                    4f:91:6c:a8:a0:79:9e:33:cf:a8:93:58:a8:23:3a:
                    ef:56:79:82:ed:53:18:b5:0b:cc:49:58:8a:ab:7a:
                    b7:b2:54:69:48:26:9a:e5:9b:d3:65:2f:a6:08:c9:
                    2e:2d:63:34:29:2b:c6:a2:95:9b:5e:51:3c:9f:74:
                    ca:bd:33:73:10:fc:96:c2:1c:7b:b7:cf:dd:a5:d2:
                    db:4a:aa:27:d6:25:24:e4:ff:a5:80:1e:51:ba:40:
                    c6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C8:81:54:ED:92:0C:E5:C6:21:BF:C0:A0:E5:52:DA:89:7F:1F:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/326822c1-9987-38d4-b737-8e0fcb22bf28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:75:5e:7a:25:87:c0:23:c1:67:f3:06:44:20:a2:77:44:d4:
         3b:d3:2c:29:92:cd:80:dc:a8:86:43:a3:90:ed:fd:0b:48:a6:
         47:c5:90:cb:98:95:c6:94:a0:d2:b7:48:81:3e:8d:ae:6a:7f:
         10:09:d8:d0:5d:ed:67:2d:4e:9a:40:8f:39:3a:b3:f4:50:19:
         a1:98:9a:42:44:f8:7c:c2:59:5d:6c:0d:6a:2d:4a:9a:38:13:
         73:c0:c1:bd:eb:c4:3a:fb:4b:2f:16:bd:f9:bf:35:7e:97:ad:
         fb:4b:4e:bb:3d:df:2e:86:b7:1f:d8:e6:e7:2f:28:d5:26:8b:
         29:d2:75:58:38:73:bf:fa:aa:03:e7:f7:36:34:e6:82:19:e2:
         ff:14:4d:29:8f:ae:5d:ee:e3:5d:f1:52:52:75:95:e1:c4:dd:
         c2:51:75:eb:42:8c:63:70:b8:03:60:2f:f1:ff:16:a4:9e:18:
         d8:8b:c8:66:4c:bc:c0:aa:ce:39:b2:e7:8a:c6:c2:7e:9c:0d:
         b6:f3:05:c7:46:6c:85:47:1a:60:3c:e4:d6:ff:ce:57:3f:f0:
         13:a7:8b:7f:94:36:94:86:57:11:b7:d9:7e:db:59:ab:a4:8b:
         f7:47:be:54:51:d3:8f:bb:68:8d:d8:d7:40:63:a7:4f:ce:ce:
         51:91:9c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:58:33 2025 by rpki-client