Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f8aad428-213d-3fe9-9c9d-407be46c12b8.roa
File:                     f8aad428-213d-3fe9-9c9d-407be46c12b8.roa (raw, json)
Hash identifier:          6qCsABEN5PS+EP85oSjHG9jka4hkyzDxj/+P8zrihfY=
Subject key identifier:   D5:43:4C:AB:CE:4C:CD:6D:05:C5:58:3F:D0:17:B1:58:A6:56:5B:0B
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848269D7E3F967305E58C4E8D40
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f8aad428-213d-3fe9-9c9d-407be46c12b8.roa
Signing time:             Mon 09 Dec 2024 16:04:56 +0000
ROA not before:           Mon 09 Dec 2024 16:04:56 +0000
ROA not after:            Sun 09 Mar 2025 15:04:56 +0000
asID:                     19955
IP address blocks:        72.10.67.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:9d:7e:3f:96:73:05:e5:8c:4e:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Dec  9 16:04:56 2024 GMT
            Not After : Mar  9 15:04:56 2025 GMT
        Subject: CN=b48e0743-ae9d-4249-bdec-d1f7f06dd31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:f8:ea:09:21:c6:28:5e:02:84:fc:ff:55:
                    22:ee:6c:e4:5a:60:ba:9e:3c:cd:fe:8a:56:83:d8:
                    c8:fc:c2:93:85:0c:79:74:a5:0f:d5:a2:e2:28:7a:
                    a7:5b:44:a3:3e:33:aa:45:b6:ca:5b:2c:c2:e1:ed:
                    99:f9:5d:d5:8b:d7:b3:15:aa:49:a0:46:aa:25:81:
                    96:eb:c1:11:62:9f:c4:7e:31:ff:6c:6f:1b:40:a7:
                    1c:df:6c:39:36:9a:2d:b2:64:68:f6:6d:8f:cb:3e:
                    52:e7:03:d3:ab:68:54:f7:ec:59:a3:82:25:ff:99:
                    86:8e:10:2e:d6:73:70:c6:0a:62:5f:92:ce:b2:65:
                    de:12:fe:f4:3a:40:6c:3e:65:80:2c:80:e7:21:c6:
                    76:44:22:c1:e0:c3:3c:33:2c:4e:4a:82:e5:f0:47:
                    81:7f:4f:62:67:99:52:70:8b:84:21:85:6e:cc:4d:
                    b3:5c:f5:51:d5:47:91:6d:7d:8f:24:2f:02:7f:1c:
                    ba:9b:e6:44:5f:4b:d1:c1:c4:78:eb:4a:a7:90:20:
                    58:6e:ae:85:44:ba:4e:a9:a9:7b:60:9c:f2:89:e1:
                    9d:56:81:27:02:40:ec:8a:35:ad:17:8b:7f:65:39:
                    9e:c0:5f:ea:5b:de:32:e5:a1:47:61:03:11:9c:8a:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:43:4C:AB:CE:4C:CD:6D:05:C5:58:3F:D0:17:B1:58:A6:56:5B:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f8aad428-213d-3fe9-9c9d-407be46c12b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:8d:80:59:91:e9:1e:d1:95:59:9d:25:94:4c:3f:56:b5:ae:
         35:44:64:2d:05:ec:eb:b2:1a:f8:1a:18:95:8a:83:87:cf:d4:
         dd:e9:51:4e:0c:b5:68:3e:dd:bf:9d:4e:42:da:48:65:f3:77:
         30:fa:2a:aa:fa:ea:ed:23:60:8b:96:24:34:de:cb:ee:1c:bd:
         f8:1f:0d:ef:cd:22:94:33:14:eb:bd:eb:f8:d6:8b:f1:a7:c8:
         19:6d:b6:cc:26:31:cb:f7:8e:03:bc:89:f2:78:7d:8f:70:9e:
         5e:33:d7:36:1b:f4:84:f4:99:e8:fe:f6:be:68:70:7b:05:1b:
         26:29:0c:6a:3f:5c:4b:27:87:27:70:e8:30:3a:a4:e2:49:83:
         bc:32:08:06:78:89:6f:0b:17:c2:01:a9:6f:7b:4c:6a:9d:17:
         a6:b4:17:25:96:bb:fc:e7:a0:05:f0:dd:9f:5f:ff:5f:85:41:
         c0:58:47:aa:a2:26:eb:0f:eb:ad:09:99:9d:2d:d6:dc:a4:4b:
         c1:ea:60:bf:c1:49:99:a9:79:85:45:0f:89:da:f2:b5:34:25:
         6d:02:31:7d:ee:b4:88:5d:21:d0:22:c4:be:e4:c0:73:eb:e0:
         c0:7e:18:e6:ca:64:57:72:20:85:e9:aa:7d:b2:9e:4c:59:52:
         3e:c2:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:39 2025 by rpki-client