Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/44f4f3da-18f8-3804-9775-d4656e898e07.roa
File:                     44f4f3da-18f8-3804-9775-d4656e898e07.roa (raw, json)
Hash identifier:          oBVdQt4PkYU/QyWwCuICprHp11eARbeARBgid5p2jwE=
Subject key identifier:   B8:05:E5:69:EB:C5:3D:35:DE:6E:DF:0E:9B:B6:30:67:37:91:10:03
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858486C2B1782C471B216E00B2BB8
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/44f4f3da-18f8-3804-9775-d4656e898e07.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     394285
IP address blocks:        174.137.104.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:17:82:c4:71:b2:16:e0:0b:2b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=62149d94-42ba-4d5c-b31b-6cac1edd9e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cd:39:f4:53:ac:8c:b8:61:46:e6:0b:3c:03:
                    ba:cf:2e:19:82:50:c8:89:db:9e:08:da:0b:6c:c3:
                    ec:f6:cc:70:3e:e3:ed:b0:33:cf:91:9e:2f:d7:97:
                    04:32:58:21:eb:26:dd:10:10:c4:64:1f:67:b7:e3:
                    97:de:ee:39:e6:9b:f0:f4:b4:a7:72:b5:f7:6a:19:
                    91:e6:92:e7:aa:3c:42:46:bc:ed:d3:9d:fe:ee:01:
                    f9:d6:77:f0:7f:fa:99:c7:99:a4:05:c4:9a:bf:b4:
                    09:ce:fc:6b:1e:8d:1b:45:58:e1:04:27:9d:e5:9e:
                    d5:79:90:fa:fa:03:4b:6c:14:05:e2:29:e9:33:f1:
                    d4:8c:83:db:d0:85:da:56:4a:c4:8b:46:4b:86:9b:
                    d3:af:c1:94:f3:c7:96:08:c9:95:f3:d0:04:cf:48:
                    ec:db:5e:52:09:33:ea:83:ed:ac:59:a7:69:a6:d0:
                    98:32:2f:1e:79:8d:7e:52:4b:d7:8f:22:80:ae:49:
                    c3:cf:9f:a3:40:36:3c:ac:25:bd:32:5b:28:7b:05:
                    39:95:9d:d6:90:dd:4c:a3:7e:e2:85:fd:8d:1e:60:
                    90:58:54:24:64:44:c2:de:01:e6:c8:8f:2a:d7:22:
                    71:f9:0d:09:84:05:8d:db:9f:21:53:e4:88:96:83:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:05:E5:69:EB:C5:3D:35:DE:6E:DF:0E:9B:B6:30:67:37:91:10:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/44f4f3da-18f8-3804-9775-d4656e898e07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:33:2e:f1:85:39:be:01:54:a1:d0:5f:bc:72:50:05:45:e9:
         61:b0:ca:34:0a:72:af:81:9b:46:ce:62:76:3c:94:96:07:d7:
         8e:ac:9c:2f:d7:f9:cf:d2:b7:f4:7b:7b:89:74:d2:ac:0f:b3:
         07:b9:f1:35:f6:23:0b:e3:e1:c3:81:e7:f0:8a:c7:9b:8e:69:
         4e:a2:da:47:f6:7f:0e:20:aa:d8:47:a9:dd:05:60:fc:79:9d:
         49:ce:5a:ba:49:2c:aa:aa:b1:6a:01:81:63:ae:17:ec:fb:01:
         6d:71:37:44:bd:79:82:94:16:4c:c9:66:27:d7:69:30:e6:c0:
         f2:fd:18:a4:9d:af:44:1f:df:4d:fc:73:21:7b:ae:c9:eb:68:
         7c:2a:36:b9:39:24:4e:71:37:72:f9:34:d7:29:bd:53:1f:83:
         44:b1:95:31:82:72:bb:eb:86:5f:2e:74:f8:9e:78:24:5e:03:
         39:5b:4f:72:16:40:f0:62:08:6a:d8:a5:2e:ff:5e:1f:2c:f5:
         f7:db:ea:26:d8:76:53:ab:3f:bc:c6:08:72:53:ba:8e:c3:72:
         81:89:92:8a:d4:3d:b9:af:1d:2c:56:fd:25:fd:58:ca:fa:9e:
         3a:c4:93:22:22:ec:f1:2e:47:ef:16:7f:7b:b3:83:ff:09:b0:
         87:97:95:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:10:11 2025 by rpki-client