Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/6e3468c4-90ed-3c55-9272-bfaed0242e22.roa
File:                     6e3468c4-90ed-3c55-9272-bfaed0242e22.roa (raw, json)
Hash identifier:          PNpillDW9UD83BIXvEimBpZnxr+cpdCfybA45Tvf3xg=
Subject key identifier:   1E:C4:8D:64:A5:51:CA:1F:9F:BE:DE:74:F2:C1:9C:02:B0:53:D3:93
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F432858486D90596295B9325B12D980C0
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/6e3468c4-90ed-3c55-9272-bfaed0242e22.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     19229
IP address blocks:        171.74.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:59:62:95:b9:32:5b:12:d9:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=cc4c9dff-67c3-4f52-9032-ee9c5c6d46b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:4a:c1:79:c1:6f:76:d3:35:dc:7b:fc:08:
                    00:3f:33:21:f4:55:f8:13:98:67:da:b6:81:4b:1f:
                    58:79:51:f0:a4:e7:b1:88:1e:53:70:48:4f:93:d4:
                    c8:c1:4b:4e:65:af:d8:76:f5:bc:b6:81:18:22:b6:
                    9a:c6:f9:f1:a1:c0:33:71:fa:b9:4e:9f:a7:2b:25:
                    c9:76:46:e5:1e:91:8f:b6:3f:c3:b5:a3:9a:33:f2:
                    52:3d:3e:ba:a6:f3:14:27:5f:51:2b:2b:a5:3e:e6:
                    4d:9d:06:33:40:9c:3f:88:54:b2:30:97:51:b5:d2:
                    d1:65:1a:b6:e7:f6:31:09:80:2f:72:98:82:eb:75:
                    d8:c0:20:7a:c4:ab:43:e2:d3:e0:56:ad:a7:56:c1:
                    e8:12:f7:06:d0:59:5d:48:24:39:1f:06:ab:79:d2:
                    d4:98:49:79:98:e7:ff:89:39:b1:8e:bc:b7:81:09:
                    da:e1:09:94:67:a0:dc:9d:8e:87:24:0d:e5:b1:44:
                    76:f4:01:0d:4c:b9:5d:a7:11:ee:76:04:b0:a5:e1:
                    86:04:bb:d8:4b:da:95:1a:5a:7b:2d:a7:67:df:08:
                    91:10:2a:ae:b5:28:0b:1a:aa:14:60:65:f6:89:86:
                    c9:80:0c:9b:18:18:87:55:cb:9b:a8:81:a5:81:5f:
                    2e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C4:8D:64:A5:51:CA:1F:9F:BE:DE:74:F2:C1:9C:02:B0:53:D3:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/6e3468c4-90ed-3c55-9272-bfaed0242e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.74.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:86:dc:ab:b6:2f:02:74:b8:44:c8:f2:56:52:d4:21:51:5b:
         fb:7e:05:17:d1:84:79:20:13:e1:02:5a:29:ad:15:09:94:fb:
         1e:73:82:1c:81:03:64:3c:fc:e7:81:38:7c:17:e2:fe:df:6c:
         91:23:30:d1:5b:f2:b3:f5:49:ff:5e:42:01:84:12:f2:26:3a:
         fa:7a:e9:ec:e2:d8:43:70:7e:2a:73:5f:78:e2:15:67:07:07:
         fc:43:7d:f9:42:6f:0b:ea:2b:5e:d0:c2:4b:df:10:01:4c:93:
         cf:8a:33:87:82:a1:8c:98:55:00:98:80:5f:4a:9a:97:21:83:
         8c:aa:12:66:6c:d4:dc:37:88:76:90:cb:9d:b7:c2:42:25:ee:
         fb:e0:18:62:09:09:eb:8a:ca:d2:69:75:1d:f7:04:53:f7:ad:
         9a:92:62:3f:6d:2f:6d:e3:ab:c0:27:7b:67:17:18:36:fd:4b:
         3b:39:93:4d:d7:ec:bc:60:eb:9a:34:a6:ba:50:f7:b5:6d:61:
         1f:3e:63:05:1c:7e:01:53:15:42:50:f9:93:36:4d:b3:4e:5b:
         23:78:6a:bc:f3:15:6c:0a:32:2a:bf:d1:e9:7b:73:d3:b1:a0:
         a2:6d:b0:ba:c2:51:95:71:45:24:96:ea:d8:25:b8:e4:cf:69:
         9b:24:3c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:18 2025 by rpki-client