Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/06706b75-84b9-3931-810c-ff83796de8bb.roa
File:                     06706b75-84b9-3931-810c-ff83796de8bb.roa (raw, json)
Hash identifier:          lXBmQLFwdEhQ257iFg+YzPDaCU4wPk0NZtH+Wc8DGTE=
Subject key identifier:   EB:B1:43:FC:0C:F7:F2:34:AE:45:8C:E0:3B:7E:F5:4D:1C:03:D1:A5
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F432858489A3B45DB84A5243BBDEC2700
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/06706b75-84b9-3931-810c-ff83796de8bb.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     396948
IP address blocks:        78.138.24.0/24 maxlen: 24
                          104.128.66.0/24 maxlen: 24
                          104.128.67.0/24 maxlen: 24
                          104.238.212.0/24 maxlen: 24
                          104.238.213.0/24 maxlen: 24
                          138.128.245.0/24 maxlen: 24
                          138.128.246.0/24 maxlen: 24
                          147.185.242.0/24 maxlen: 24
                          147.185.243.0/24 maxlen: 24
                          199.244.50.0/24 maxlen: 24
                          199.244.51.0/24 maxlen: 24
                          213.255.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:45:db:84:a5:24:3b:bd:ec:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=21467ffe-2782-4712-9598-74b97e060172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:e3:7b:c4:80:79:68:a5:61:8d:f2:8c:3e:
                    05:8d:f1:91:e9:fc:38:97:73:7b:55:73:cf:63:1a:
                    14:69:ff:05:4f:55:38:24:5d:96:ac:b8:40:6b:a0:
                    0c:ed:cd:40:69:4f:7f:44:15:8b:b4:14:67:06:ba:
                    f8:b7:90:11:50:ab:ac:d6:46:cd:c9:fa:af:26:60:
                    bb:c8:df:7c:4b:e5:da:4c:d9:eb:b5:b2:ad:52:1c:
                    77:ca:40:3a:ac:16:14:47:a8:ca:f7:83:54:7b:0b:
                    62:59:63:de:ed:24:db:c1:e9:bc:0f:ea:4e:20:e4:
                    b0:0c:16:ec:aa:34:f2:67:f8:29:85:da:4e:c2:e1:
                    e3:83:a2:fe:79:8a:04:30:f6:0d:ca:72:61:39:de:
                    b9:5d:61:8c:24:dc:ae:64:17:55:4f:90:1a:3f:29:
                    13:5a:3c:fb:b0:fc:f9:c1:4f:8c:48:bf:40:82:35:
                    f0:5a:eb:ae:a0:97:53:c3:e2:bc:04:5e:ad:01:61:
                    f1:4d:26:aa:37:2f:63:e3:b4:60:1d:1f:7e:cf:34:
                    8c:36:5f:a1:c8:5d:5b:af:be:d5:53:b8:14:72:9b:
                    d1:f9:dc:ac:af:23:ff:82:3a:e9:62:ec:9e:06:ce:
                    03:55:2c:30:07:ae:01:e0:51:f8:85:9f:5e:d0:5c:
                    eb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B1:43:FC:0C:F7:F2:34:AE:45:8C:E0:3B:7E:F5:4D:1C:03:D1:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/06706b75-84b9-3931-810c-ff83796de8bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.138.24.0/24
                  104.128.66.0/23
                  104.238.212.0/23
                  138.128.245.0-138.128.246.255
                  147.185.242.0/23
                  199.244.50.0/23
                  213.255.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ae:7e:39:cd:ae:4b:2c:0d:61:c5:94:39:3f:10:ac:a3:73:
         20:45:4b:31:75:18:bd:d0:b9:61:18:48:a0:a6:87:ae:f1:ae:
         ef:ea:b2:5a:ac:f6:51:88:55:29:3b:83:80:68:0a:94:2a:4a:
         30:05:46:f4:48:1c:d2:a1:f6:55:77:80:c2:fc:d2:9d:b9:cc:
         39:78:6d:a2:8a:71:ac:b8:d2:34:94:47:23:86:14:46:5a:d9:
         68:2d:2e:5c:da:17:67:f0:d6:3b:a9:a9:fd:cc:21:fe:b1:d0:
         3a:49:31:ca:12:27:24:93:00:03:53:dd:c9:a2:09:57:55:38:
         76:3b:06:cb:0d:a6:df:0b:75:7d:0a:c5:ad:f3:0f:75:94:95:
         cf:1d:eb:78:bb:af:f3:50:60:f3:b3:37:ac:f9:e0:47:7c:d0:
         01:5b:2e:65:63:35:a8:0c:66:31:b5:fe:23:ab:94:77:ef:45:
         06:3c:68:f3:5a:9b:29:c9:19:fd:88:5f:ea:25:5e:27:9f:c8:
         83:31:15:b4:f1:c8:d6:4a:aa:5d:04:ff:16:36:55:c1:ce:f5:
         96:ac:67:36:af:a3:fa:57:12:9c:ae:36:0a:63:80:90:ee:49:
         ca:22:29:7e:bb:20:fd:42:d1:c8:f1:c0:56:2a:a8:24:4c:19:
         a9:b5:65:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:33:59 2025 by rpki-client