Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/25289940-5314-3e04-a710-ae91cf64f9b9.roa
File:                     25289940-5314-3e04-a710-ae91cf64f9b9.roa (raw, json)
Hash identifier:          4EL0wnAEWxFfmX+DnK8p4Pt8feCFcJtWNkwU051MNgs=
Subject key identifier:   7C:4E:D5:7A:83:AA:F7:0E:E8:12:C6:61:40:CE:D9:94:AC:F0:8B:C3
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F432858482D5A8C2600BFFE869F72C0C0
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/25289940-5314-3e04-a710-ae91cf64f9b9.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     13649
IP address blocks:        72.250.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:8c:26:00:bf:fe:86:9f:72:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=5578af78-6089-40d6-96bd-0c816c87fdc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:89:c7:6d:76:a5:92:05:3a:b5:38:39:50:f3:
                    bc:d6:30:8f:d0:cd:4d:d6:83:be:cf:07:ee:4c:6a:
                    ca:bd:da:99:49:f7:94:0a:32:bc:0e:3c:1a:db:16:
                    3e:63:a6:2c:97:23:e8:02:7e:01:8a:02:09:89:4e:
                    4b:d9:35:7c:ca:6f:4e:d6:5b:30:22:2e:68:d9:76:
                    c8:fc:89:68:c0:70:69:db:9c:f9:b3:57:a0:8e:eb:
                    b2:2b:94:3a:f2:c3:d5:b4:9c:74:66:a0:7f:c2:e9:
                    ef:a7:63:7a:98:b8:66:4c:10:b3:a7:63:bc:20:cd:
                    0a:0c:70:95:31:6a:fc:7c:4f:ab:5f:c8:f9:3a:59:
                    be:82:83:2c:e0:35:b9:b6:5c:31:5c:cd:11:de:d0:
                    f7:6e:4c:a9:18:e1:cd:52:93:db:e6:bd:d6:6f:cc:
                    07:d3:45:9d:6d:c1:de:e6:72:c5:2a:6d:47:91:ec:
                    a7:25:f0:c8:d8:fd:76:ce:dc:d8:4e:87:5e:0c:18:
                    58:a2:d0:84:f7:df:f0:47:52:af:e4:47:35:c6:c5:
                    07:38:8b:e6:e1:8c:03:c5:11:7f:3b:81:25:ee:0b:
                    11:b6:53:3e:0e:51:5d:63:58:dc:13:85:e6:14:2f:
                    97:75:d7:c1:d5:d7:da:8c:e2:2f:75:6e:ca:da:52:
                    a8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4E:D5:7A:83:AA:F7:0E:E8:12:C6:61:40:CE:D9:94:AC:F0:8B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/25289940-5314-3e04-a710-ae91cf64f9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.250.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:9f:3a:26:44:9c:b3:61:52:ef:7b:98:6d:49:56:4f:e4:77:
         2c:7f:7e:8e:8d:af:5b:ea:5b:1e:a1:19:c5:67:5d:de:9f:e7:
         3d:02:f4:e6:2d:6f:21:91:40:56:89:de:75:64:a2:e8:d4:e0:
         27:b2:14:9d:47:a4:63:51:73:ed:6e:64:14:43:1b:92:e9:63:
         4c:fa:df:77:b3:c3:67:5c:94:20:21:64:64:b0:16:d1:55:4e:
         f4:4d:08:7c:66:ef:1f:f9:c2:a2:fd:69:8f:1a:af:a5:27:b3:
         5b:f7:b5:6e:10:64:73:c0:46:6f:a6:61:c0:09:0a:cf:dc:76:
         71:07:37:94:88:ab:4c:cd:58:00:29:ed:56:26:8f:e6:01:e6:
         c0:16:dc:73:61:f1:6e:31:3b:d0:0d:02:ae:ca:be:f6:8b:ce:
         a5:89:83:e2:e5:1b:9e:47:21:03:26:e2:b8:b7:96:fc:3a:44:
         ed:56:85:15:62:c6:a7:2c:d9:79:9b:04:1a:5d:07:c4:95:d9:
         28:8e:d0:73:57:f7:54:c2:54:40:f1:6d:4a:60:ad:84:cd:87:
         69:a5:cb:8d:c5:97:e6:9f:5b:27:e1:4b:a3:b5:47:b8:8b:6d:
         a2:46:d1:21:e7:92:8a:7e:57:65:da:f4:a0:a1:1f:0e:ff:68:
         bd:92:f8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:30 2025 by rpki-client