Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7750e7a6-bfbf-32e2-98ca-db25150e8279.roa
File:                     7750e7a6-bfbf-32e2-98ca-db25150e8279.roa (raw, json)
Hash identifier:          ndnC+goFjEmdYCkoOVOMZ4syVDtIzz3IdRKmFZ7H9W4=
Subject key identifier:   49:78:60:F4:BD:E0:B8:48:CE:81:55:0A:23:69:E3:6D:BD:54:C1:6C
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F432858487755D5CB56D10681B8A6C300
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7750e7a6-bfbf-32e2-98ca-db25150e8279.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     62651
IP address blocks:        216.131.74.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:d5:cb:56:d1:06:81:b8:a6:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=74253245-4be8-422e-abb9-73d5173208c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:34:60:9d:e3:ab:70:0c:21:0e:03:95:ed:
                    c0:b7:61:95:25:dd:6f:e4:7c:8f:e7:99:27:4d:75:
                    90:ac:dc:0a:40:d0:38:41:8b:c7:81:33:a1:9e:b7:
                    7e:d7:12:1c:f9:82:b1:82:12:ad:81:ef:78:91:72:
                    3a:5d:f9:67:eb:af:c3:65:98:57:01:a3:45:62:de:
                    66:5a:b6:d8:62:90:52:00:8b:21:a6:db:6b:dc:f2:
                    78:24:9a:29:c4:6e:ca:e0:5f:c9:5b:0f:ee:86:24:
                    58:7d:37:74:e4:37:8a:12:98:eb:76:39:e8:c9:30:
                    88:23:07:5a:a2:86:48:c0:dd:4b:29:5a:bf:67:d7:
                    bd:5d:8d:8e:49:81:3c:66:8e:fe:e1:4e:4a:7c:b0:
                    d5:84:b7:ae:5a:12:52:65:5d:9f:d0:37:78:29:c9:
                    ba:6a:5d:31:3b:a8:50:ac:cc:ec:2c:8a:57:7d:13:
                    12:cc:d4:c7:28:b0:07:07:c4:07:b3:aa:05:64:b7:
                    64:f5:85:12:81:5a:74:b9:f7:5c:36:2c:24:ed:0f:
                    45:8e:7e:ad:d9:da:9b:be:4d:9d:ec:75:91:c1:0b:
                    26:e7:d0:f8:c8:b2:f9:42:54:33:a8:8d:03:5c:0a:
                    3c:ba:af:3a:c7:fd:10:1f:96:b2:12:e2:a6:a4:67:
                    09:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:78:60:F4:BD:E0:B8:48:CE:81:55:0A:23:69:E3:6D:BD:54:C1:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7750e7a6-bfbf-32e2-98ca-db25150e8279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:6d:c7:3a:78:35:1d:df:55:1e:83:d6:a0:8a:c2:c6:1e:e5:
         27:f5:d4:9e:6b:3a:20:99:59:96:b8:dc:1b:2b:13:47:b7:c0:
         2c:1c:fe:36:62:ab:64:55:24:87:9a:87:ab:e6:38:52:e9:37:
         8c:2c:96:c7:1c:6f:1e:5a:95:4c:84:da:6e:cd:cf:79:aa:50:
         bd:8b:ca:97:d0:83:87:62:3f:b9:0a:73:3f:ce:e3:f6:19:16:
         5e:00:ba:33:a9:42:4e:1a:67:a6:bf:fe:f2:c8:06:59:18:09:
         2a:e5:b8:3f:03:a0:db:60:aa:21:5c:e5:0b:68:a0:32:f6:1c:
         9a:4d:1d:cf:fd:5e:ed:61:8c:48:be:59:81:4d:23:ab:af:4c:
         6b:2d:9c:22:b1:21:88:a2:a3:a8:86:b8:6f:60:68:0d:fc:dc:
         67:0c:bc:48:0e:df:17:a3:5f:ed:82:2c:3d:84:1a:34:6c:62:
         7c:cf:fd:1b:f6:68:dd:62:c7:b1:01:f6:60:de:ae:a1:21:bd:
         1b:4b:82:e5:41:9c:63:57:52:46:fb:c6:df:e6:33:5b:cc:af:
         ed:95:5c:61:95:12:ba:c4:d2:af:1b:ae:ed:0c:fc:45:b2:01:
         dc:58:e1:ed:90:7a:cf:a0:b9:86:c8:73:b2:0e:58:81:38:a3:
         f9:4d:5a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:29:28 2025 by rpki-client