Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/175d9699-647a-3be1-872f-0acb3482b083.roa
File:                     175d9699-647a-3be1-872f-0acb3482b083.roa (raw, json)
Hash identifier:          0DQ9EHO0OpKDnVL0zFUcqiJyJh70kCl/GwcnmRyMg1Q=
Subject key identifier:   00:86:40:1D:26:A7:2A:4E:0A:5C:4D:0B:49:8F:43:96:93:D2:41:7D
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584827C54D830420A155FB02B800
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/175d9699-647a-3be1-872f-0acb3482b083.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     11693
IP address blocks:        72.15.122.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:4d:83:04:20:a1:55:fb:02:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=cfa16a00-9046-4656-a428-0840d1efe45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:90:2f:34:d0:b0:21:80:9c:3b:9e:c2:65:55:
                    b9:17:c8:11:71:05:88:04:ef:c6:84:a1:90:6f:2c:
                    60:62:d4:70:33:bc:b4:15:6a:95:c3:ff:c1:95:ae:
                    a1:1f:3d:81:9c:6d:3f:18:cd:27:d4:4a:50:9a:b7:
                    81:2e:12:d8:e1:81:07:c9:f4:4c:43:2f:9b:fb:38:
                    37:a8:07:7a:3d:de:06:77:b3:ed:16:f0:cc:b6:fe:
                    96:e9:9f:d2:4c:aa:47:e5:7d:eb:e2:45:b6:70:5b:
                    90:3b:44:41:19:58:67:87:fb:51:77:56:89:21:6c:
                    1d:0d:9f:6c:99:b6:c0:23:0c:91:ab:c3:c7:86:7e:
                    e2:4f:2b:77:fb:18:c4:63:28:4b:be:15:00:51:a7:
                    9a:b7:78:d8:7b:1f:a0:e6:be:eb:3b:44:f6:45:f7:
                    50:c4:74:3c:9f:8d:8b:7d:e2:ca:1f:88:58:67:e4:
                    8a:2c:70:2e:f9:e6:d3:5e:53:a3:4a:66:68:77:bb:
                    6e:26:4e:3a:1e:b3:71:f1:ea:12:41:bb:70:4d:43:
                    b4:7e:33:af:c6:0c:25:e2:f0:2d:7e:25:43:82:5d:
                    5f:e6:73:e0:4e:f9:86:0a:28:f6:33:6b:dd:a9:20:
                    9f:f4:59:d3:a6:f1:09:21:13:67:fd:82:06:83:0c:
                    50:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:86:40:1D:26:A7:2A:4E:0A:5C:4D:0B:49:8F:43:96:93:D2:41:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/175d9699-647a-3be1-872f-0acb3482b083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.15.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:48:78:f5:7e:07:ce:af:bb:40:f8:b0:44:2d:20:b4:68:cc:
         18:33:cc:0e:d3:fe:43:a2:18:b8:a8:f4:d7:ad:76:30:44:bb:
         55:21:75:ba:ce:a8:95:10:df:90:a7:f7:c4:3b:ed:3d:43:1e:
         ba:af:eb:b6:f3:07:35:b8:19:7a:7e:5d:92:56:44:53:ba:25:
         37:4d:72:a8:87:4b:d3:16:51:1b:76:a1:0c:35:4e:5c:f2:c8:
         96:06:6f:32:a5:07:09:3a:53:5d:ae:72:82:7a:a9:85:80:ce:
         74:9d:67:86:06:9d:38:b7:ca:31:06:a6:e5:e1:81:cc:34:34:
         9d:1a:7d:c5:8d:8d:ca:59:e2:7f:e2:99:ec:cf:0d:5d:19:1f:
         e5:cd:58:60:5a:9d:17:20:bc:35:cb:23:c7:f0:67:60:51:55:
         7b:b1:e9:08:3f:fe:32:65:08:54:5c:90:bd:8f:1f:03:e8:64:
         c2:e5:76:80:8f:c0:29:bd:88:fc:ab:46:f9:45:29:92:52:40:
         03:ff:59:d0:e9:42:75:df:aa:dd:a6:ff:1e:43:99:80:58:4e:
         b4:18:c7:a7:ac:24:72:df:76:93:a7:d7:5c:1d:12:c5:3f:a3:
         e4:42:26:34:b9:5f:68:9a:01:b9:c7:39:4f:93:27:93:6e:c2:
         c9:10:49:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:38:46 2025 by rpki-client