Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/65aa9b12-d675-3efd-9cbb-a414b3878b93.roa
File:                     65aa9b12-d675-3efd-9cbb-a414b3878b93.roa (raw, json)
Hash identifier:          R76ofQwQmsIQXMIC12YMTmyZX7AooaIXvM9/EcKdcJ8=
Subject key identifier:   B6:C2:8C:A7:DF:70:66:90:26:6D:47:E6:3D:8A:80:A1:A4:12:FA:27
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F432858485B6AFB7A294364F588416840
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/65aa9b12-d675-3efd-9cbb-a414b3878b93.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     395123
IP address blocks:        74.50.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:fb:7a:29:43:64:f5:88:41:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=727fe1fb-3c72-4689-9d91-9af5de0e6d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:af:00:63:d3:94:18:a7:9b:da:e6:b1:31:
                    6e:e2:e9:89:25:6e:4d:aa:e7:55:52:16:bc:45:5e:
                    a8:48:47:a9:74:dc:7b:ef:0f:66:f6:c5:7d:6c:04:
                    08:91:79:d4:6d:21:fa:e1:f0:4b:85:55:f8:7c:06:
                    4d:74:14:8e:33:b0:bc:e2:4f:03:db:cb:ef:dc:03:
                    b8:2d:d5:c0:7c:f3:6f:55:46:0b:f1:5c:d2:f9:57:
                    13:2f:1a:5e:fa:33:f6:79:47:7b:69:07:74:48:b4:
                    3a:1e:93:49:74:96:fd:be:0b:15:a9:86:b2:66:28:
                    ad:5e:e9:dd:ca:26:b3:1f:72:4c:00:40:16:2b:db:
                    b6:e2:b4:57:22:36:86:59:1a:30:6d:2e:62:32:4e:
                    c4:d4:68:bd:8c:6b:c6:b9:45:9c:c5:c1:5d:1e:bc:
                    9a:a1:38:bc:6e:2c:18:85:bd:f8:9d:19:d4:51:94:
                    53:6a:32:46:87:91:6e:75:ca:f3:67:2f:ee:11:79:
                    9e:bc:0f:1f:67:5c:03:1b:fc:b0:8c:5a:c2:41:75:
                    f3:bf:a1:c2:05:d8:6e:e2:72:9b:d1:43:53:2c:cc:
                    2f:a5:8b:bd:c2:dd:3a:00:5c:a0:14:1e:8d:bc:ab:
                    a1:4c:be:fa:38:40:c7:9e:76:e9:59:6b:57:c0:4b:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C2:8C:A7:DF:70:66:90:26:6D:47:E6:3D:8A:80:A1:A4:12:FA:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/65aa9b12-d675-3efd-9cbb-a414b3878b93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:fc:27:f3:40:c8:a9:59:4e:b3:ef:d6:55:bd:93:69:3c:f2:
         86:8d:78:6f:ef:96:99:19:d3:2a:c5:30:bd:01:52:22:b0:83:
         a6:74:71:d7:b4:ed:07:43:bf:d9:bc:84:a4:1b:a9:63:05:0a:
         2b:ee:12:13:0a:7b:7e:aa:77:a8:5e:1f:36:0d:2b:79:30:7f:
         82:cc:7b:0a:45:93:90:09:9e:29:91:07:96:9f:78:a5:f8:91:
         b6:13:9d:6f:3e:04:cd:02:e8:22:2c:ab:19:78:04:72:e6:bf:
         19:f1:27:ed:7e:c4:f2:0a:40:45:06:2c:29:bc:5c:7f:ae:bd:
         ef:88:02:e3:ef:05:dc:52:da:4c:f2:4f:9a:87:10:ce:83:f5:
         a1:b6:9f:bf:9c:40:69:22:f9:e5:81:0b:2b:24:7b:c1:af:3d:
         ec:7a:6f:7c:b2:c9:5f:af:da:13:4a:af:0a:b8:ad:0c:c0:3c:
         e6:12:2e:26:b7:ab:0e:99:7e:27:9e:bf:07:12:6e:27:bf:fa:
         99:45:38:99:af:28:57:63:47:0c:31:57:88:07:b3:97:65:d4:
         45:bb:b8:9c:5b:02:3a:fe:b1:7d:2f:21:f0:00:d5:3e:b3:10:
         f9:e4:2e:26:c2:a7:fc:ec:f8:85:01:27:3e:b2:30:2e:f1:92:
         99:73:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:13 2025 by rpki-client