Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67c3b067-9a81-3572-a4be-92e7062402ae.roa
File:                     67c3b067-9a81-3572-a4be-92e7062402ae.roa (raw, json)
Hash identifier:          0k/VnV0q+qcBzcUNxsg9RbHxU6hbI+apWTG1xfG8NgI=
Subject key identifier:   4F:48:39:B5:E4:84:72:98:7D:91:5F:2F:32:EB:10:21:AA:4D:02:02
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858482D5A9BCA8542885A41531880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67c3b067-9a81-3572-a4be-92e7062402ae.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     22773
IP address blocks:        72.196.126.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:9b:ca:85:42:88:5a:41:53:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=8697c3ed-8c3a-4b1a-8a3b-7c1a73e8602c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c2:3c:a4:6f:e0:7a:14:6c:6c:8e:96:a6:e0:
                    62:3c:64:cf:d7:c6:14:e6:81:ce:07:37:bb:aa:fd:
                    54:53:1c:df:d3:13:ca:92:f5:b0:90:3c:cb:fd:f0:
                    2c:e7:53:3e:d6:07:01:3f:3a:b8:4d:79:25:09:a2:
                    ea:53:23:1d:ab:a9:17:23:ae:c7:ea:17:35:4a:83:
                    68:22:63:60:8d:20:0c:45:56:68:cb:33:c6:e7:48:
                    d2:5c:c0:69:78:27:04:f4:a0:31:2e:2c:94:a5:00:
                    5f:26:38:14:9c:6b:dc:b7:cc:45:41:59:88:25:dc:
                    55:da:8d:d4:18:62:a4:81:b2:59:64:9e:31:02:70:
                    ff:46:5f:f0:22:3d:f0:11:90:d1:13:86:bd:ad:8c:
                    06:66:b7:93:04:45:fd:4b:0e:62:bb:c1:2c:8a:8c:
                    20:db:11:88:ea:06:11:a0:67:9d:37:75:e3:f0:7e:
                    c2:c6:d2:2d:07:9b:d7:04:f7:87:37:53:ae:c3:e1:
                    e1:9f:59:9c:91:ef:b9:93:fb:b1:94:ac:c1:ef:e1:
                    cb:1e:05:e6:c3:91:39:00:1f:9c:13:be:7d:32:67:
                    ef:48:a3:a9:2a:0e:09:63:41:38:2c:f6:54:15:3b:
                    99:f7:51:90:df:f3:19:89:97:1e:83:c8:80:e7:96:
                    e4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:48:39:B5:E4:84:72:98:7D:91:5F:2F:32:EB:10:21:AA:4D:02:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67c3b067-9a81-3572-a4be-92e7062402ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.196.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:24:20:79:0c:3f:90:c1:dd:cf:92:0d:45:e3:9f:7f:f1:94:
         4c:ca:09:be:c3:e3:b2:54:34:b3:d7:95:af:f3:a4:da:56:8a:
         68:6e:00:4c:59:23:e3:d6:18:46:d0:79:21:3f:41:a3:3b:47:
         8f:46:f7:ea:0c:57:9b:4f:05:12:28:98:40:e1:25:e1:60:ee:
         26:a8:b2:48:90:c2:94:09:13:6b:3d:e8:1f:85:80:55:9f:1d:
         a9:0a:c7:8a:d9:f0:ea:6b:e0:2c:70:e2:e5:9a:7e:bc:81:a7:
         a8:b4:b3:d9:09:08:7f:02:69:a3:4d:07:5a:0d:f9:ff:fb:4e:
         42:8b:db:4f:6c:4c:88:ef:a5:67:36:28:cd:8c:fa:14:a4:e0:
         49:5b:81:3f:8e:12:12:6b:a9:d8:92:51:d3:2f:53:45:90:68:
         04:c2:4c:94:f8:38:a6:3c:dc:40:75:07:0a:5a:b3:9e:8b:7f:
         a5:99:bd:9a:51:b3:3e:b5:cb:16:29:8f:7c:18:47:11:b4:ac:
         22:92:a4:76:09:97:89:9e:7d:ff:eb:b6:8d:8a:db:8f:bf:59:
         7a:9d:bd:e2:b3:b9:5f:87:e8:97:ed:a9:9b:4c:7a:77:d4:ad:
         03:90:dd:ee:1b:46:91:58:b3:c9:0e:d9:33:3a:f5:32:6f:9b:
         77:62:e2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:27:14 2025 by rpki-client