Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/61d8257e-99c5-37ab-8479-9e24510b2be2.roa
File:                     61d8257e-99c5-37ab-8479-9e24510b2be2.roa (raw, json)
Hash identifier:          eQb/qIbvVUvW6j5DGDbLD6zv3nQWnf0Pnv5eciZ0000=
Subject key identifier:   AF:A9:8B:72:24:9C:D6:05:E1:07:28:B7:24:A5:DA:D0:08:EE:42:1A
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F432858480214FE37E4FD1D68DED3A980
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/61d8257e-99c5-37ab-8479-9e24510b2be2.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     42
IP address blocks:        74.63.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:14:fe:37:e4:fd:1d:68:de:d3:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=142e6c52-6be0-4dee-a6d5-d6bb2672f0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:81:e7:be:1d:8f:1d:28:8b:b5:25:de:80:3d:
                    20:c8:08:e8:ca:ed:c1:81:72:1e:98:57:56:d8:f2:
                    15:c6:72:ff:f0:f9:69:d0:a1:4e:d1:c0:71:ec:fa:
                    b4:75:4d:d2:13:b6:36:6c:86:cd:be:76:4b:4c:ba:
                    93:91:4c:67:46:27:2c:60:e0:dd:65:32:74:c0:d5:
                    2a:84:72:03:09:d3:76:05:90:4b:02:76:42:23:a9:
                    68:89:64:e6:89:5d:63:d4:7d:0c:f6:d0:bc:13:74:
                    a7:28:76:1b:36:42:9f:a4:b2:6e:c1:01:f6:53:97:
                    6d:ed:93:c8:49:d6:48:26:dd:92:23:60:c4:10:0e:
                    59:62:20:33:2a:66:bd:04:6e:df:e4:19:24:8a:4c:
                    c2:08:41:7f:ba:ab:b7:59:9c:e4:a4:d7:a9:93:c7:
                    42:44:eb:f9:f6:f9:9c:79:08:8b:2d:e5:50:06:74:
                    83:3b:37:c6:00:80:c5:26:9f:58:76:fc:cd:70:b2:
                    7b:96:b0:5d:36:04:b1:69:d9:b2:7d:3f:20:64:a2:
                    d4:33:73:93:07:9d:55:9e:94:e5:6f:c4:74:41:4d:
                    4c:93:4d:77:ba:87:93:6a:ab:73:9b:5d:39:a1:d1:
                    e8:af:9c:e4:f4:6f:f9:9f:ac:63:5b:68:c2:c3:91:
                    13:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A9:8B:72:24:9C:D6:05:E1:07:28:B7:24:A5:DA:D0:08:EE:42:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/61d8257e-99c5-37ab-8479-9e24510b2be2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.63.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:eb:cc:b3:93:fd:cf:c6:9c:1f:5a:b9:d2:fa:65:02:ab:01:
         6c:2d:e7:b9:26:c2:9c:7c:97:2c:ed:35:ca:47:bb:fc:7c:de:
         91:2a:02:8c:25:5f:98:d9:47:2e:55:57:e2:53:ee:dd:6a:85:
         c6:43:4c:20:85:6e:c6:8c:f3:df:a3:58:83:24:95:39:c6:c5:
         9c:cc:dc:a9:8b:af:89:db:e3:d3:49:e6:a5:d6:30:52:16:f6:
         98:30:35:1d:c9:5d:41:e4:6d:bb:b3:5f:c2:a9:e0:89:f2:c1:
         17:08:57:35:16:e7:34:55:2e:65:ea:c0:e7:66:76:f9:7d:07:
         08:8a:0e:3b:00:ec:de:24:f4:d1:6d:c2:d2:53:6e:69:6b:a7:
         8b:d4:12:02:05:89:47:80:23:06:2f:25:f7:ac:d1:bc:a3:c1:
         77:8f:28:eb:d5:8c:e6:9f:ab:f1:65:3c:fa:5e:bb:3c:9e:d6:
         4f:82:0a:48:73:1c:b7:cc:c3:e6:de:d9:5b:2e:0f:ef:35:84:
         4f:08:ce:5e:a5:6e:29:0b:9e:0f:15:b9:74:c5:1a:34:0f:90:
         bb:56:68:7f:90:06:33:7e:72:b1:71:bb:c3:45:56:fb:04:d9:
         ab:2a:3f:06:e9:47:30:8c:fb:73:ff:28:18:a9:b4:fe:c3:43:
         dd:73:62:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:41:14 2025 by rpki-client