Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/e40a4c62-8391-329e-8836-79107543cbe0.roa
File:                     e40a4c62-8391-329e-8836-79107543cbe0.roa (raw, json)
Hash identifier:          o3eehhWKxx5NzZW/BkTlm8b3lmrurybMavImRMMh+js=
Subject key identifier:   B9:BE:75:2D:D6:DE:2C:2C:CE:CE:AD:E4:59:DA:2D:BF:16:C4:C1:01
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F432858487755E0A02B0BCEB4ACEBBAC0
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/e40a4c62-8391-329e-8836-79107543cbe0.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     7992
IP address blocks:        57.134.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:e0:a0:2b:0b:ce:b4:ac:eb:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=13d7697a-e4a2-4c9c-aa8d-8bd869b025ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:62:22:07:8f:67:a4:ef:6f:ef:5d:55:e7:40:
                    58:0e:a9:2c:f5:60:98:1e:f6:6a:f2:3a:96:d9:77:
                    b0:0c:24:89:31:46:fd:7d:a8:6f:4f:cf:26:3e:19:
                    93:65:1a:6a:9f:a9:8a:7e:dd:40:ac:53:b3:97:b9:
                    2e:92:7d:06:e8:23:cd:fe:46:c4:89:06:5b:7a:d7:
                    86:37:6f:1c:b3:46:a3:96:6d:1e:61:cc:47:f7:15:
                    ca:6f:bf:c1:d6:d3:48:51:f8:72:13:05:f0:e3:c6:
                    45:ad:c5:3d:f9:3d:9a:30:ed:f9:39:7c:d1:2e:b2:
                    a6:13:8e:84:c8:c2:66:dd:b1:a9:dd:3a:25:72:f8:
                    32:e0:e4:e8:08:0a:94:bf:f7:96:c2:05:b2:0f:4a:
                    a4:70:7f:7c:bf:22:a1:ee:d0:91:30:b0:4a:d8:76:
                    07:34:88:cc:3e:9f:31:6b:bf:05:0b:fe:11:c1:f8:
                    13:44:ec:cc:04:e3:9f:b9:b9:21:4d:df:35:e7:ff:
                    32:92:61:02:18:89:a8:12:67:59:0d:f1:ea:dd:9d:
                    ab:ae:fe:20:14:a3:79:0e:23:fe:16:5b:ac:e5:25:
                    c7:ca:d6:44:9c:a5:74:b9:6f:03:c0:96:04:91:ba:
                    2f:09:95:00:9f:46:55:d3:2c:23:3d:aa:45:fc:1d:
                    b4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BE:75:2D:D6:DE:2C:2C:CE:CE:AD:E4:59:DA:2D:BF:16:C4:C1:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/e40a4c62-8391-329e-8836-79107543cbe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.134.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:57:a4:69:1a:b9:9e:b3:ee:45:0d:36:ce:1b:92:7f:f7:23:
         a2:29:3c:69:89:94:d6:76:dc:3f:cc:1c:ab:82:3e:b3:ff:eb:
         e5:66:44:02:8c:cc:ed:1d:dc:af:de:9f:92:7f:a5:c9:a7:7b:
         49:db:28:89:a8:b2:21:4e:e5:62:ae:25:92:09:56:03:1a:0b:
         1b:ea:2d:ad:23:86:90:a5:1f:13:5e:e0:82:4b:1a:80:a9:8f:
         1d:db:83:ab:03:35:1c:56:7d:2b:64:c2:ec:cc:80:f4:e1:8e:
         10:8e:69:34:6a:5d:9b:dc:9c:58:43:1a:ae:a3:a4:e3:e4:e8:
         f1:9d:6a:29:87:8b:37:70:05:30:dd:83:31:65:50:77:71:d2:
         8e:22:36:b3:3d:6b:f0:71:c7:01:85:df:09:57:89:73:9a:72:
         f0:ac:c0:53:1f:82:8c:33:86:ed:75:b9:5f:01:76:c8:b7:3e:
         e9:db:fb:c6:30:fe:53:92:2a:d3:41:fd:b4:11:3a:ac:c0:06:
         d8:49:3c:8d:ea:40:e7:5c:a9:02:97:2f:4b:d2:c5:ee:6e:2d:
         65:4d:b7:75:55:fb:a4:d2:f8:c2:1a:3e:ad:b9:f1:8c:2e:3f:
         20:77:7d:04:5d:c2:2a:a6:c4:cd:15:84:c9:e7:ab:59:34:3e:
         61:6b:ca:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:09:40 2025 by rpki-client