Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/fee913eb-2250-3378-83ce-9b0ffcba5d6f.roa
File:                     fee913eb-2250-3378-83ce-9b0ffcba5d6f.roa (raw, json)
Hash identifier:          wsmzXr1KUt/xkaooLwPt19kA/ykssmkHRKI3tlHQD4A=
Subject key identifier:   C5:5C:3C:C9:61:43:77:50:1E:B8:36:B4:A4:18:EB:5C:32:02:3C:1E
Certificate issuer:       /CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600
Certificate serial:       010D0C9F4328584832F02BFA5949B086CDA9DDF0
Authority key identifier: E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/fee913eb-2250-3378-83ce-9b0ffcba5d6f.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     21978
IP address blocks:        74.116.240.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:2b:fa:59:49:b0:86:cd:a9:dd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=e6d864fb-ada6-483c-a78b-831269a9ad17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:32:a0:f7:3a:6e:e4:a4:56:a4:a9:fa:aa:58:
                    8a:4e:05:03:e7:bd:df:26:37:7f:66:91:ba:ba:0c:
                    52:dc:c8:b6:91:eb:d6:82:86:e8:70:5e:66:38:5a:
                    2e:21:95:4f:7b:a8:fe:51:37:3b:d3:97:7a:3a:13:
                    50:24:76:cf:2e:dc:37:78:8a:6a:ee:d8:c6:84:a0:
                    71:1f:0d:67:32:39:2b:0a:d2:d1:ef:4c:db:d0:3c:
                    ad:51:71:59:cf:16:24:22:53:47:5f:8d:62:33:6c:
                    56:d1:05:bf:b1:00:20:89:95:50:7d:72:0f:a2:e2:
                    e4:8f:19:98:63:48:e7:b1:99:79:2e:f1:5b:3f:b8:
                    0e:30:83:3f:13:a8:de:f8:ef:ba:0d:02:6d:01:a4:
                    53:0c:79:0e:46:1f:61:b2:fa:6b:4d:41:90:fd:71:
                    c9:d8:79:13:cd:f7:27:a8:3e:9a:89:5d:af:34:38:
                    a0:60:c0:1a:74:42:57:ff:9b:84:88:f4:c3:77:29:
                    12:6e:fa:8b:ed:c8:ad:09:a5:e5:15:a9:6f:ce:6a:
                    86:7c:32:b3:3a:67:56:d9:4c:83:50:85:4a:23:57:
                    87:16:6f:45:41:c7:e5:ba:f1:41:14:76:4f:17:21:
                    f5:76:9b:89:11:d2:ea:2b:e8:79:c1:ba:8d:5d:24:
                    42:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5C:3C:C9:61:43:77:50:1E:B8:36:B4:A4:18:EB:5C:32:02:3C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/fee913eb-2250-3378-83ce-9b0ffcba5d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.crl

            X509v3 Authority Key Identifier:
                keyid:E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:65:e7:72:ba:82:99:44:3e:8c:90:d5:b0:23:3c:91:15:ca:
         bc:a4:da:09:bc:06:d0:de:ac:c4:ce:5f:f2:4f:18:25:27:eb:
         6d:e4:76:34:ef:93:ad:e7:bd:0a:e9:f5:ff:ba:47:11:3f:63:
         58:38:90:66:3d:76:3e:8f:3c:5e:d7:84:92:0d:37:a4:e6:c0:
         03:f5:20:78:27:c1:61:14:53:e2:5d:43:e2:cd:1f:9b:07:4f:
         d4:e3:a8:58:68:d0:1a:49:5e:d1:09:2a:8e:17:57:cf:ef:ec:
         b0:fc:6d:bc:a7:d4:30:9b:f3:f4:73:59:a5:bc:1b:ef:37:fb:
         2e:3f:ce:4c:82:7a:f7:37:8c:51:5e:41:9d:37:74:77:c3:39:
         5b:d8:a5:97:cf:02:d6:eb:8e:be:22:22:27:22:f8:aa:5a:8e:
         85:63:12:6a:82:c3:9b:85:af:75:ec:bb:61:11:35:1e:f1:35:
         74:68:42:94:b6:8e:0d:40:48:bf:7d:79:25:1d:58:42:6f:76:
         74:5a:3e:fa:b3:57:82:0d:51:18:c9:19:d6:d7:8c:e4:46:67:
         88:05:16:09:9f:d1:49:3a:49:a3:f1:e6:51:63:4b:62:5a:b9:
         6a:fd:0e:3a:b7:cf:bd:58:0d:7e:d8:6d:75:e1:ab:5b:b4:b6:
         53:13:f6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:27:06 2025 by rpki-client