Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/9108badb-91ba-37e3-a32e-1e9f3607a741.roa
File:                     9108badb-91ba-37e3-a32e-1e9f3607a741.roa (raw, json)
Hash identifier:          l2egaajQ6NtW+h1swWo8zfw2BXnZxkzSFKem5XJbwDg=
Subject key identifier:   C8:F7:85:B7:5E:18:B1:BB:56:73:6E:C2:D9:02:B2:EB:F3:A7:F9:21
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F432858486D905A26DBAA54C26DA86E00
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/9108badb-91ba-37e3-a32e-1e9f3607a741.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        72.22.70.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:5a:26:db:aa:54:c2:6d:a8:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=7ee63361-ef5e-459a-a572-bbc528848521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ba:64:bb:36:e2:ff:65:59:72:f7:5d:28:d9:
                    ff:a7:85:9a:02:57:bd:b6:61:06:4a:87:8b:80:76:
                    b7:43:0b:71:fb:dc:6c:72:77:32:2f:2c:32:bd:bf:
                    db:8c:0a:7c:fc:9b:7b:6f:e1:79:08:47:18:61:64:
                    8e:60:d1:77:16:d1:95:58:00:b1:cf:a0:39:85:40:
                    d7:c7:0a:b0:b7:31:f7:e5:3f:d7:35:79:8b:af:42:
                    d5:2b:ab:16:9a:b7:70:78:54:25:35:3f:92:9a:6e:
                    11:d4:8c:64:14:9e:63:51:8f:62:27:cd:37:f3:68:
                    ac:9b:a7:80:41:6b:b6:c2:67:30:d5:b7:3e:1f:72:
                    f4:14:87:61:cf:50:32:b8:37:ce:59:b0:02:c2:28:
                    73:6b:52:d1:cf:f7:14:85:f2:ea:e0:39:9f:ac:53:
                    ad:35:fa:89:c8:24:53:10:d8:d1:f5:02:37:28:18:
                    d2:61:63:1f:f9:d4:77:b1:e7:b9:76:bb:3a:24:5d:
                    31:05:80:d5:8f:9f:1a:8c:b7:3a:9c:0f:21:2e:ee:
                    3f:71:0f:89:10:a5:09:a9:05:5d:42:a0:39:10:14:
                    ea:24:df:0f:bd:93:0f:60:3e:92:bd:0b:42:cb:0b:
                    05:1b:b4:73:4f:7f:87:7a:4a:01:e9:28:96:52:5b:
                    7d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F7:85:B7:5E:18:B1:BB:56:73:6E:C2:D9:02:B2:EB:F3:A7:F9:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/9108badb-91ba-37e3-a32e-1e9f3607a741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:00:ac:4d:d6:4f:1d:02:62:28:1e:4a:d6:fe:37:b6:ca:24:
         30:da:57:49:f8:bd:a3:96:19:25:09:4d:c5:ca:2b:82:ae:d5:
         49:be:fc:0e:9c:45:0e:01:9a:5a:cd:41:01:ed:32:97:f3:46:
         e7:18:f6:72:cb:12:87:1d:c5:b7:4f:c0:8f:6a:47:f4:d9:a1:
         2b:90:68:6d:c0:b4:60:a3:ee:2f:02:c2:b9:35:94:f8:e2:fa:
         d5:fa:7f:aa:ed:2a:9a:e1:07:10:cd:c3:86:2f:a9:99:de:26:
         af:f4:21:3d:87:cd:8a:d0:01:c2:61:a1:fc:1b:1d:01:ca:97:
         3f:8b:c3:d4:33:5e:0d:b8:d8:19:dc:cc:e8:d5:73:c0:a1:0d:
         7c:0d:fb:27:37:3b:9b:0d:88:33:0f:3f:d3:5d:69:95:d0:12:
         97:26:16:8a:ae:bf:ea:61:68:95:23:e4:4e:d9:6a:df:16:1a:
         a1:d0:67:54:07:52:ef:f8:07:b1:4b:82:d4:96:92:c2:1f:a4:
         dc:83:6b:0f:1b:17:c1:f3:fd:cd:c0:49:98:0e:5b:2d:90:99:
         b3:d7:c7:11:6e:e1:df:23:66:d8:4b:ba:dc:b6:39:77:4c:7e:
         99:80:ee:27:dd:6d:7d:c0:82:85:bf:9f:00:68:17:33:cf:50:
         95:62:b2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:38 2025 by rpki-client