Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/53b04310-5f1e-318a-9e95-16a44646a11f.roa
File:                     53b04310-5f1e-318a-9e95-16a44646a11f.roa (raw, json)
Hash identifier:          Yt6iWi6AQoy4UNc7Khr+TZhlVn2H8ukd1mNpdlx8Nnk=
Subject key identifier:   AE:D3:AD:F3:17:F6:12:7E:15:8A:3D:1E:14:95:F5:77:48:90:CF:4B
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584882809076753A744686AECCE0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/53b04310-5f1e-318a-9e95-16a44646a11f.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     12083
IP address blocks:        24.214.64.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:90:76:75:3a:74:46:86:ae:cc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=bc1fed78-d773-4715-94c2-b9a97305686d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:65:5d:ae:15:ba:28:c7:92:97:a6:5f:f3:3e:
                    28:ab:d0:39:f9:d1:9a:ce:c1:c3:6b:6d:67:e9:77:
                    98:5a:03:ac:41:2a:12:e8:64:61:a5:95:c6:6c:f8:
                    8a:99:de:6c:88:b4:9c:ea:62:2f:c0:c1:c5:fd:05:
                    e3:44:b2:06:6f:27:f7:62:e3:fa:5c:1e:4f:c7:be:
                    c1:19:7a:a3:35:3c:74:a8:ad:30:8c:11:96:39:4a:
                    63:de:52:53:38:9c:9a:f5:79:5d:88:33:5e:0a:8d:
                    fa:34:05:0d:29:26:c9:b3:a9:ae:65:4e:3d:7e:ad:
                    17:9e:61:de:7e:ed:a0:ae:39:28:c5:13:11:80:ab:
                    6f:62:97:a3:b4:7d:2d:0d:b6:eb:7a:95:df:49:ad:
                    c2:d3:d1:4a:13:a2:ec:46:e7:e6:bb:ad:d8:7b:96:
                    f2:a7:75:62:88:3a:c0:4d:4d:cb:f8:58:3d:9b:67:
                    10:e8:60:26:5f:4d:94:e5:88:90:57:6e:a8:85:21:
                    aa:88:28:0d:5c:6e:b4:bd:34:65:48:f6:36:01:e5:
                    e0:f7:be:58:81:85:4b:b5:f1:f3:50:aa:5a:0e:ae:
                    81:f8:81:a8:90:58:68:a7:4a:ea:6e:2e:69:8d:ec:
                    7f:e5:99:d0:1a:71:3a:c1:05:c3:28:b4:0e:1c:67:
                    9c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D3:AD:F3:17:F6:12:7E:15:8A:3D:1E:14:95:F5:77:48:90:CF:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/53b04310-5f1e-318a-9e95-16a44646a11f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.214.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b1:9d:7a:f0:98:51:30:7e:b7:5a:df:20:c4:60:6f:da:74:
         32:99:71:ea:b5:88:c7:9a:81:71:65:ee:aa:a4:a7:a9:ae:45:
         5c:f2:e9:3c:e9:91:56:ad:93:ba:96:93:3e:82:87:24:63:8b:
         33:33:aa:8e:16:f7:dc:f2:b0:6a:ec:a5:f5:a9:24:7d:8d:27:
         39:6a:3d:4c:2e:68:9a:34:3a:08:00:90:ff:e3:17:34:1e:eb:
         f6:ac:61:1b:3f:d5:58:b1:70:3f:d7:7d:be:ee:63:77:e6:44:
         0d:1e:11:e0:6f:21:f4:0c:07:91:f7:f6:c5:73:a6:29:84:88:
         48:6a:e9:e6:ed:de:36:a9:bf:90:c9:cd:6f:71:61:f6:27:69:
         e1:f5:d7:95:8a:db:dd:fc:d9:78:27:6d:91:d9:9d:51:6e:fe:
         03:c0:3a:47:3b:07:a9:d1:63:48:29:13:e6:07:b9:f6:11:3c:
         5b:d4:63:50:c6:07:5e:71:82:65:3e:35:0b:c4:d8:a6:83:d6:
         4e:92:dc:d5:69:54:22:af:af:45:27:12:d4:00:44:1f:47:71:
         19:0a:ac:a2:20:07:e9:06:08:19:2d:f9:9b:8c:49:3a:22:14:
         1b:85:48:68:e5:0f:9f:ca:1c:5e:84:06:9f:8e:f3:23:8d:52:
         76:39:30:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:06:31 2025 by rpki-client