Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/72d14a3e-4507-384c-81f7-c208190816cf.roa
File:                     72d14a3e-4507-384c-81f7-c208190816cf.roa (raw, json)
Hash identifier:          pSI3hReyB9WJxjTVJ1DCxle5GArBlGKvaCRxg7IYjrQ=
Subject key identifier:   BA:CA:9E:90:A4:ED:29:B5:10:0B:84:A1:60:8B:A1:D8:61:39:3F:BE
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858483B5013B699825F9BDF87B280
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/72d14a3e-4507-384c-81f7-c208190816cf.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     63023
IP address blocks:        23.174.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:13:b6:99:82:5f:9b:df:87:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=288da7e9-7eaf-4f15-8b2c-0e74d52fa3bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7b:1d:b7:d8:fb:49:6f:a9:02:cd:11:62:5f:
                    bc:37:11:06:de:49:6f:ac:51:de:77:d9:0e:a9:0a:
                    ce:a9:83:13:e1:bf:e8:7f:b2:28:35:3e:0f:63:15:
                    b8:50:d7:f9:9a:11:f1:51:bb:d0:d3:00:c3:f4:11:
                    ed:7a:f1:c3:62:7c:d1:b7:fd:ea:fc:f9:b8:9d:b4:
                    4f:5b:4b:af:e3:bb:c0:b4:2e:3e:7a:35:e1:0c:13:
                    c7:88:1c:61:f3:3b:9a:53:18:b3:27:fe:97:d2:5d:
                    9c:64:2e:61:c2:10:61:78:8d:37:cb:35:b0:fd:fc:
                    8c:9b:c8:54:43:86:a0:a0:b9:98:7f:74:40:51:cc:
                    ad:50:4c:15:16:78:72:f2:d6:c1:b8:82:52:99:17:
                    ff:ca:13:52:e2:6e:3b:f2:11:0d:3a:2a:08:41:de:
                    ba:b8:50:71:64:8a:32:53:63:b6:78:b5:72:55:81:
                    38:2d:f1:02:54:f9:a2:d7:bb:0e:b4:26:aa:d3:4a:
                    f3:37:d9:98:99:c2:27:83:7b:18:ac:c1:5e:0a:ec:
                    48:c3:2d:44:67:b5:a8:2b:7e:80:60:8f:e2:07:0d:
                    43:8d:67:1e:69:3d:1b:39:43:bf:c5:7d:6e:68:1a:
                    2e:bc:3a:9d:3b:f2:b2:8d:ed:e1:54:f1:13:9c:cd:
                    dd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CA:9E:90:A4:ED:29:B5:10:0B:84:A1:60:8B:A1:D8:61:39:3F:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/72d14a3e-4507-384c-81f7-c208190816cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:28:42:f9:a2:30:37:90:60:2f:89:1c:1e:6a:b2:ad:3e:35:
         9e:3a:0e:45:f7:b8:a9:2b:74:bb:0f:e6:33:14:89:d4:0c:bb:
         62:dc:b1:1b:2a:5b:b3:91:65:aa:bd:71:42:35:ad:5d:4f:c4:
         58:ca:30:86:c3:d3:bb:6c:d2:69:8b:e5:5e:84:a6:65:a9:24:
         de:d8:c2:5a:0b:2d:d1:15:e0:9b:fc:bd:e0:08:34:3d:14:4e:
         3b:c7:83:bb:ad:e9:17:86:23:92:28:c2:d2:7b:17:e2:c5:11:
         01:81:5e:ff:46:68:2b:1f:c9:7d:74:ee:a2:dd:c7:e3:78:54:
         09:08:7d:61:db:eb:6d:ec:72:8f:61:74:7c:81:15:72:bf:28:
         77:df:c0:0e:0c:08:43:a4:4c:71:0e:93:d6:5f:61:1c:7f:55:
         ee:03:ab:95:82:d5:77:a0:21:90:ab:2c:76:82:8e:2c:ac:00:
         77:5f:e3:70:f1:3b:b9:44:6a:fa:30:44:4b:d5:0a:12:b4:47:
         88:41:78:90:58:66:3f:f6:1e:b7:90:d1:21:5f:d7:45:dd:29:
         b2:09:fa:40:20:ce:98:f2:50:04:73:19:dd:ab:92:ff:01:82:
         43:44:50:c4:70:43:6f:9d:c9:cb:e0:92:7f:f3:92:75:55:d9:
         bd:4c:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:09:47 2025 by rpki-client