Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34263c75-df9b-3967-ad36-b731e045fd76.roa
File:                     34263c75-df9b-3967-ad36-b731e045fd76.roa (raw, json)
Hash identifier:          AqcXuvE3mNKHXcmyH7TWMH+8KsA6PHOfm4ZDvARtVXM=
Subject key identifier:   96:62:06:0F:EE:A4:AD:D4:B0:BC:1E:7D:D5:29:52:CC:AE:38:57:6C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847EE8A39FFB8F3D2B7DDA75500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34263c75-df9b-3967-ad36-b731e045fd76.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     7029
IP address blocks:        173.188.40.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:39:ff:b8:f3:d2:b7:dd:a7:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=3ecaa5fb-90c0-49b3-843b-49a6f55e9cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:6e:23:78:b9:ad:ed:18:f9:10:77:a5:37:
                    5b:d7:41:be:59:41:60:ef:bb:22:f2:30:fe:98:54:
                    28:df:ba:a1:3f:0f:43:e2:d2:71:e8:f0:b8:81:57:
                    f6:be:1c:62:47:76:6c:59:4c:70:0c:4a:c2:7f:c5:
                    f7:e9:81:02:d6:e0:9a:ce:8a:f5:62:81:f9:de:f1:
                    b8:7b:c6:46:1c:cb:65:61:4b:ab:81:6c:9f:b1:93:
                    40:66:c1:05:f2:e5:60:e1:91:31:37:67:76:7d:e2:
                    3e:12:1f:0c:e2:49:02:e6:be:7e:2e:ea:ed:e7:39:
                    21:45:f1:21:f0:be:65:4d:20:df:b4:e2:16:d5:be:
                    7e:86:98:35:2c:bc:c5:ab:14:ec:77:9e:76:f9:49:
                    77:e6:5b:4d:ab:a3:8b:a2:3d:ff:9e:cf:8d:95:93:
                    ac:1f:96:33:23:12:b8:33:a6:fc:ba:0f:52:2c:6f:
                    13:26:00:d2:27:8d:02:fb:e5:ce:b0:6e:c2:09:f8:
                    78:72:71:71:ca:9f:13:fa:cc:d3:39:3c:27:ff:f1:
                    b7:c2:59:74:1c:88:9f:2f:28:7f:99:c6:37:ab:f5:
                    dc:9a:a3:c0:2b:fa:7d:ac:a8:73:e7:b1:23:95:55:
                    11:ec:48:5b:f6:ff:c3:00:fa:0a:76:ee:55:ef:58:
                    53:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:62:06:0F:EE:A4:AD:D4:B0:BC:1E:7D:D5:29:52:CC:AE:38:57:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34263c75-df9b-3967-ad36-b731e045fd76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.188.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:87:6d:ae:f1:8b:6f:aa:b7:d0:a0:9a:c3:aa:4a:33:7c:70:
         22:60:cd:18:f5:16:cf:57:e0:89:4b:45:95:22:5f:b4:a1:3a:
         30:cb:4c:20:ef:c3:0f:c2:92:14:19:1e:90:6c:74:21:74:e7:
         df:0f:4c:c8:77:c2:1a:8e:66:82:04:0e:fb:22:69:8b:f9:4d:
         93:37:63:b4:93:39:84:cb:43:70:ae:c5:35:fd:99:89:a9:af:
         de:96:c1:6f:62:74:c3:ce:e8:82:ef:44:18:56:1c:50:c3:dd:
         bc:2c:08:b9:8e:7a:20:d2:e1:16:42:40:ca:8d:c0:0e:63:d0:
         38:5e:40:21:5e:df:ae:91:41:4d:91:ce:b3:5d:7e:bd:03:56:
         7d:2c:57:6e:f6:7d:53:60:f4:4d:93:fa:27:02:7e:65:18:aa:
         5d:be:db:64:9e:7b:0c:30:0a:ce:cc:53:fe:98:59:cc:15:fd:
         7e:df:d0:72:d5:c8:48:76:99:5c:27:d8:bc:49:db:95:ed:be:
         79:66:66:cf:c6:f0:7b:44:65:bd:bc:1a:73:47:d1:a9:3b:32:
         9b:ee:05:f8:72:a6:b6:67:8d:67:0e:07:96:ad:5b:62:fd:76:
         aa:ae:7e:ff:c9:31:31:02:fb:53:b6:33:73:a3:fe:65:6e:a7:
         d7:fb:45:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:13:23 2025 by rpki-client