Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29047bdf-2f51-33de-8db8-f319ec383617.roa
File:                     29047bdf-2f51-33de-8db8-f319ec383617.roa (raw, json)
Hash identifier:          SUtAZDBJFrdOfSSZuu+vWjUc8iZ4KitCSoMgNOodzJs=
Subject key identifier:   F9:40:CB:B0:EE:E8:6F:86:A6:87:80:3E:EE:D0:BF:F5:C5:F9:4E:19
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F432858484D75908D826965893F996E00
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29047bdf-2f51-33de-8db8-f319ec383617.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     13768
IP address blocks:        64.34.192.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:90:8d:82:69:65:89:3f:99:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=5f797519-9f05-4d80-adb7-65bdce9e2c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:f4:00:dd:1e:b2:12:8a:36:95:c8:87:44:
                    50:70:ab:86:54:b7:35:91:86:27:81:73:61:ed:f2:
                    5b:cf:ff:c8:ea:ee:8d:ba:46:9f:52:15:9a:e9:2a:
                    ef:d3:dc:a3:19:dc:ad:cf:c2:be:99:e0:5c:86:1f:
                    9b:40:5e:01:69:70:fb:8b:62:af:eb:1b:9d:a7:ec:
                    e4:18:80:d9:97:4c:61:12:3d:dc:f9:cb:87:44:e2:
                    1f:7c:85:a7:a9:54:5b:89:93:9c:13:00:31:9f:94:
                    b6:b4:5a:e1:36:43:83:29:07:fc:3d:79:ec:4c:c8:
                    7f:89:06:1e:c8:34:62:fc:78:ad:9b:26:27:ba:db:
                    9d:da:de:cc:a4:c3:11:da:1a:4d:d9:01:e3:9c:0e:
                    25:db:4e:97:0f:83:3f:e8:51:1b:ce:d1:15:d0:2d:
                    9c:f4:78:4c:97:c1:8c:f8:0e:7a:32:3a:ca:36:cb:
                    62:b7:f2:be:0f:d8:3c:7d:fe:df:99:e5:2f:7f:12:
                    f5:fb:2b:7c:9d:65:77:aa:fb:0a:e2:bd:2f:f4:d7:
                    e2:70:45:31:2a:53:bd:6c:ad:00:ce:2a:8d:b4:e0:
                    49:e6:f0:2e:40:79:99:01:c6:9e:a7:c1:f8:28:ec:
                    0b:2b:85:25:d4:9e:7d:65:21:b4:be:c8:ef:20:9f:
                    dd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:40:CB:B0:EE:E8:6F:86:A6:87:80:3E:EE:D0:BF:F5:C5:F9:4E:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29047bdf-2f51-33de-8db8-f319ec383617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d7:b1:ab:2f:20:24:0d:28:ca:34:ff:ee:f6:d5:e1:fc:29:
         b9:42:5d:9c:61:85:51:1e:28:f5:ca:5c:9b:d6:8e:a8:f2:a8:
         16:28:44:a1:95:7c:24:c5:e1:49:96:80:a2:ba:c0:30:74:c6:
         60:46:89:43:98:d1:d2:00:5e:75:3f:e6:65:93:96:17:5b:ee:
         c3:db:76:d8:70:0c:2b:42:a0:5a:dc:4e:26:db:10:19:ec:71:
         56:c2:23:c9:79:53:42:7b:2b:7b:7e:f9:c9:75:91:c7:e2:85:
         41:00:e5:a9:9f:99:fe:38:85:25:db:bb:90:38:47:69:99:80:
         c0:bc:85:60:2d:c5:b3:3c:05:8b:0d:9f:21:c2:68:50:49:fe:
         21:1a:5d:cc:99:dd:f4:44:45:55:84:da:72:34:c7:1d:98:a6:
         d5:65:43:9e:0f:d6:16:76:a9:85:ec:5d:3b:e6:56:96:80:c4:
         11:22:b8:63:37:30:04:9e:21:f9:b2:d2:e8:72:e6:98:ee:ea:
         20:72:cc:2f:60:9e:51:37:c4:7c:bf:b8:82:e2:35:cd:f8:26:
         fb:b2:8c:d6:05:60:db:09:ac:1c:5c:62:f7:2a:10:42:a5:1a:
         f2:0b:96:1b:3a:50:bf:ab:55:ac:91:2f:2b:3f:37:27:90:c3:
         e8:e5:2a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:03 2025 by rpki-client