Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5a177cd0-a102-410d-8bff-7c53172ffb2b/543a64ea-8b94-36ae-a0fd-beaf1d87dfb2.roa
File:                     543a64ea-8b94-36ae-a0fd-beaf1d87dfb2.roa (raw, json)
Hash identifier:          M3GDScNkPeN2GdoiBHMkKjTERkEKVNZGQw2z4iiSHOY=
Subject key identifier:   C6:73:9B:76:D0:B9:76:CF:CA:D7:E7:68:5D:15:8B:40:DD:C4:A6:2F
Certificate issuer:       /CN=5a177cd0-a102-410d-8bff-7c53172ffb2b
Certificate serial:       010D0C9F432858484C1025A8A0A64F219856A460
Authority key identifier: A4:D6:FD:A1:06:71:D2:10:92:A3:77:CD:AD:86:90:1C:95:EA:20:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5a177cd0-a102-410d-8bff-7c53172ffb2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5a177cd0-a102-410d-8bff-7c53172ffb2b/543a64ea-8b94-36ae-a0fd-beaf1d87dfb2.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     46812
IP address blocks:        74.115.40.0/24 maxlen: 24
                          74.115.41.0/24 maxlen: 24
                          74.115.42.0/24 maxlen: 24
                          74.115.43.0/24 maxlen: 24
                          74.115.44.0/24 maxlen: 24
                          74.115.45.0/24 maxlen: 24
                          74.115.46.0/24 maxlen: 24
                          74.115.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:25:a8:a0:a6:4f:21:98:56:a4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a177cd0-a102-410d-8bff-7c53172ffb2b
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=b28caa16-092c-4013-a5f2-148e6adab86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:a0:20:ef:f1:18:f4:0b:ac:f0:36:af:ee:
                    b6:90:be:ef:68:5a:ba:d0:74:7c:f0:3e:6a:fb:4d:
                    4f:05:3d:a0:99:2e:be:8a:70:f6:16:a1:6d:76:2c:
                    d0:2f:71:93:56:ff:59:8f:80:0b:31:da:e1:e8:3c:
                    bf:a6:62:5d:c5:7e:fe:b8:c0:38:87:15:a6:b6:36:
                    24:69:f7:b3:49:dd:2d:1d:10:35:b2:35:93:cf:68:
                    2c:0c:f8:14:b9:f0:c5:4b:4a:ff:38:8d:bf:39:0e:
                    5a:ba:14:2d:1b:e9:02:1b:a2:5b:56:1e:46:c7:02:
                    ed:0e:be:14:dc:97:cd:3f:c4:dc:2d:fe:17:5e:79:
                    5a:a3:cb:f8:e7:e6:d4:fd:d0:46:91:c7:81:83:86:
                    64:84:38:40:28:33:70:b2:c1:61:6d:4a:4a:c2:13:
                    de:82:71:f0:74:a5:20:ac:33:39:dd:c2:73:1c:5f:
                    66:ba:81:c9:62:6a:07:c0:3b:fa:65:3f:33:14:a8:
                    68:e9:09:87:59:3e:de:8b:66:34:09:67:ff:11:25:
                    ed:ea:ff:51:65:43:3a:79:be:6e:07:47:90:67:6f:
                    4f:49:ad:1a:87:c8:b4:a2:54:ea:4e:fe:7e:9f:5f:
                    f6:7a:8a:a2:76:15:97:61:0e:b6:d2:c7:2c:58:9a:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:73:9B:76:D0:B9:76:CF:CA:D7:E7:68:5D:15:8B:40:DD:C4:A6:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5a177cd0-a102-410d-8bff-7c53172ffb2b/543a64ea-8b94-36ae-a0fd-beaf1d87dfb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5a177cd0-a102-410d-8bff-7c53172ffb2b/5a177cd0-a102-410d-8bff-7c53172ffb2b.crl

            X509v3 Authority Key Identifier:
                keyid:A4:D6:FD:A1:06:71:D2:10:92:A3:77:CD:AD:86:90:1C:95:EA:20:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5a177cd0-a102-410d-8bff-7c53172ffb2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:52:ce:47:c2:07:fd:ff:c5:df:55:4b:74:80:5b:f9:93:5a:
         4d:eb:9f:0b:ea:46:07:fc:4d:55:4b:04:bc:9f:fd:ea:70:eb:
         8b:8c:bb:37:51:4d:ee:3b:97:89:39:3f:c3:c6:0e:5b:5f:46:
         de:39:aa:19:cf:7a:9e:86:dd:5e:be:11:7b:98:4d:db:23:c5:
         bd:8a:9c:b3:d4:eb:f1:9f:ea:ac:bb:c1:9a:db:e7:5b:6d:e2:
         d8:ba:16:2c:92:25:be:58:0a:83:94:87:24:6b:05:74:bb:73:
         74:f8:73:d1:8a:78:d3:7d:6c:f9:f7:37:58:f0:31:98:9b:91:
         57:61:a2:25:50:cf:d8:a1:17:ff:a2:b9:f8:bb:9c:fc:88:ab:
         46:23:1c:c8:cf:10:67:d9:93:2e:70:7f:fc:83:ce:cb:a9:f2:
         2e:0a:92:e7:b3:ad:69:9b:67:80:95:a0:f1:a9:db:0f:1d:77:
         3a:17:de:56:f3:89:de:af:50:a0:06:4c:d8:ef:be:35:2c:13:
         24:7a:5e:c1:8b:b6:02:15:32:79:f1:0b:40:05:62:47:5a:29:
         c9:8a:b4:7c:ce:b7:4c:38:1f:e7:38:70:96:d9:78:df:0b:1b:
         c1:1b:90:72:89:9c:d9:08:a4:41:19:1f:a1:1e:76:d2:94:ee:
         cf:95:7b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:13 2025 by rpki-client