Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c52dda-ccc9-3cb1-8c19-83cea09eee86.roa
File:                     33c52dda-ccc9-3cb1-8c19-83cea09eee86.roa (raw, json)
Hash identifier:          gMf6SwCra6u1zDsvopnzlqzerXgj8Son1aOOu52v3dM=
Subject key identifier:   3E:8E:0E:0A:BD:46:05:6F:F3:07:F1:B1:8A:DF:D8:52:9D:49:0F:2C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584802082E6471A2DC40CA271800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c52dda-ccc9-3cb1-8c19-83cea09eee86.roa
Signing time:             Tue 26 Nov 2024 13:34:59 +0000
ROA not before:           Tue 26 Nov 2024 13:34:59 +0000
ROA not after:            Mon 24 Feb 2025 13:34:59 +0000
asID:                     396594
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:08:2e:64:71:a2:dc:40:ca:27:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 26 13:34:59 2024 GMT
            Not After : Feb 24 13:34:59 2025 GMT
        Subject: CN=e34721d9-a3a3-40f3-8bd2-d09fc7631b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:94:97:7c:37:4e:1d:f3:72:ca:6d:2b:50:
                    1e:df:1b:00:36:d5:b1:26:91:29:ab:c3:df:32:16:
                    9d:07:1f:f9:ae:ba:4e:9f:4c:32:03:05:26:7b:f6:
                    37:9c:77:d3:a6:83:e9:32:61:71:13:d7:e5:68:61:
                    c2:10:df:26:00:2e:97:a2:4d:e4:19:e8:dc:e1:7f:
                    ea:89:6c:3d:94:62:60:bd:2b:c7:98:f7:a9:74:48:
                    03:8c:be:e4:4e:d4:84:c2:02:8f:f8:1f:a9:0a:9b:
                    f0:70:b8:1a:f8:73:d3:fd:c2:26:6e:31:26:87:83:
                    8b:25:ce:fb:5a:cb:ae:d9:a9:15:8a:f7:72:95:7f:
                    a6:d1:4f:aa:67:58:b3:37:21:15:8e:a8:a1:87:e1:
                    0a:56:0a:59:48:61:b6:26:94:ed:c1:e9:4e:5c:bb:
                    29:c4:6b:a8:8a:88:59:81:49:33:64:5a:41:74:08:
                    4d:15:bb:a7:7a:b5:f1:21:36:b3:ec:c9:ee:ec:90:
                    0e:ec:e4:0a:a8:16:90:ff:cb:c2:c8:c5:bd:bf:24:
                    07:08:2f:b6:41:ad:d3:b2:7c:c3:76:c8:80:02:bd:
                    d2:ea:60:e0:86:5f:48:9a:c5:a3:9b:6e:33:ae:3e:
                    e9:91:f1:19:2d:49:ee:28:9e:f1:1a:02:de:41:b2:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8E:0E:0A:BD:46:05:6F:F3:07:F1:B1:8A:DF:D8:52:9D:49:0F:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c52dda-ccc9-3cb1-8c19-83cea09eee86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b8:2a:8e:a6:5e:84:47:1e:a6:6a:67:de:3d:d0:f0:13:2e:
         6f:5a:ee:ba:11:d7:d5:b7:db:cd:ac:3c:7b:ee:cf:6e:21:56:
         f2:74:76:0c:b1:32:ab:a3:b3:ef:97:95:a8:34:d4:c3:49:8c:
         90:45:fd:47:2d:af:a1:b9:2b:80:9f:0b:2b:fb:51:86:b7:ba:
         6b:bb:77:f1:d1:67:ac:83:f4:4d:ff:a3:e5:b7:29:66:f0:1e:
         fe:90:95:5e:f4:b1:93:6a:3d:16:bb:55:a5:2b:09:74:b0:61:
         ae:00:e2:4e:74:f5:2b:7a:81:f0:df:d4:b3:bf:3a:28:06:da:
         b8:70:30:fd:3e:08:e3:89:12:4f:94:2a:34:93:e7:43:a9:65:
         f0:3e:7c:c8:25:e2:e1:a9:d3:d2:e7:1e:54:16:54:03:48:a0:
         b9:4a:74:cc:65:c3:99:99:4b:81:a1:b5:29:9e:bd:7e:a3:9a:
         10:5a:68:bb:26:e8:4e:3c:8b:a4:f3:7d:e1:e0:8a:f6:7a:e6:
         d7:1a:c6:7f:63:db:00:ae:88:58:5d:dc:60:df:f5:41:6e:cc:
         0f:58:59:b6:1b:20:c1:b7:1b:6b:05:1b:59:79:db:ad:d7:c9:
         a0:ae:a0:e9:b7:95:11:63:99:26:49:0b:b8:f5:35:b4:c8:4d:
         27:d8:8c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:44:12 2025 by rpki-client