Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/1ce33f06-30a4-32ed-8f59-596eecccf046.roa
File:                     1ce33f06-30a4-32ed-8f59-596eecccf046.roa (raw, json)
Hash identifier:          XzAQgpcEeoyr+BUw0dnYd917I0Xp7cH3o7urP05MIA4=
Subject key identifier:   EF:E2:93:79:67:2F:C2:66:2E:14:E4:5C:02:26:C1:CD:C1:61:6B:F8
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F43285847FC7F971EEDC5690291A46AD0
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/1ce33f06-30a4-32ed-8f59-596eecccf046.roa
Signing time:             Sun 24 Nov 2024 14:00:39 +0000
ROA not before:           Sun 24 Nov 2024 14:00:39 +0000
ROA not after:            Sat 22 Feb 2025 14:00:39 +0000
asID:                     174
IP address blocks:        74.91.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fc:7f:97:1e:ed:c5:69:02:91:a4:6a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Nov 24 14:00:39 2024 GMT
            Not After : Feb 22 14:00:39 2025 GMT
        Subject: CN=60885c3a-96d6-4530-a1e9-7e7f24fab7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d8:c5:34:fe:6a:0f:73:41:0a:b1:87:d2:25:
                    c1:76:d3:d6:34:93:58:93:49:62:75:62:21:ce:2c:
                    75:18:1c:7b:b4:9c:15:c3:9c:a1:b5:a6:e9:db:9a:
                    7b:7a:9b:db:0a:ad:06:ea:7f:5e:71:b8:9c:99:ba:
                    af:c4:39:7f:74:f9:67:62:47:06:59:33:16:5c:f8:
                    ac:37:f6:8f:17:c2:2e:ed:00:91:6f:82:8b:67:c1:
                    cf:83:74:d6:a1:9b:b1:46:88:b2:b7:f6:f0:46:89:
                    06:a8:4b:b3:ee:e1:7d:5a:25:07:b1:82:3e:3c:3a:
                    76:61:10:fe:58:47:84:49:4a:ce:c4:83:ed:2c:76:
                    bd:cd:fa:c2:ea:b0:78:9f:18:c0:d4:0a:35:30:19:
                    20:f2:d5:21:e6:16:eb:a1:aa:c1:27:9b:0f:a4:e9:
                    59:58:f3:0b:52:54:5d:d1:e3:b2:ee:2c:ba:7c:58:
                    86:f1:fa:1c:05:49:d7:bc:dd:59:b4:2e:63:a0:66:
                    c9:89:38:98:4e:39:07:3d:5d:02:c7:e0:c6:ac:70:
                    46:f7:ac:4a:b9:46:57:6a:22:cb:ac:3b:18:6f:fa:
                    64:5b:fd:ba:3b:2d:b7:86:be:d1:a6:3d:20:0a:6c:
                    01:55:fe:56:d2:53:53:ea:52:e7:41:5b:bd:fa:ec:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E2:93:79:67:2F:C2:66:2E:14:E4:5C:02:26:C1:CD:C1:61:6B:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/1ce33f06-30a4-32ed-8f59-596eecccf046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:7d:8c:79:92:c3:10:5a:54:94:56:0d:c0:60:4c:11:7f:b1:
         68:b4:e4:7c:cd:20:dc:9c:bc:17:1d:76:5f:3b:9e:86:c8:2a:
         87:de:30:f9:f4:48:e9:73:b7:49:a2:92:35:ba:c1:38:b1:0f:
         7a:bc:09:b2:c5:24:bd:64:23:99:91:3a:13:f4:23:ee:81:40:
         f1:59:dc:e4:d5:c5:48:bf:59:1e:4b:c1:52:ed:b9:6f:27:94:
         6d:56:50:5c:ab:6a:2d:f3:8d:ee:ba:01:e6:73:22:b2:ee:07:
         de:89:35:47:a3:2b:37:ca:d6:98:94:20:91:54:f7:3c:31:74:
         be:3a:ec:5f:9c:5f:7c:45:96:6d:8b:92:e7:26:e9:3b:1f:bd:
         dc:3d:30:40:34:21:62:52:0c:0d:18:31:ab:12:0f:cf:9d:bb:
         3e:23:8b:1d:a0:e5:b1:af:2f:ff:fa:09:13:80:e3:76:67:8c:
         e5:6c:26:e3:35:af:e5:88:e4:39:b1:c8:0d:6b:75:02:88:6d:
         f0:88:40:3c:52:fe:f8:a1:e2:74:90:20:04:1a:df:56:c7:0f:
         82:85:ec:67:31:05:11:cc:41:e7:9d:9a:05:f9:40:2e:19:f4:
         f9:52:ad:b0:ae:d2:33:50:83:ba:5c:5d:a2:4e:b7:b6:f2:57:
         6e:d6:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:38 2025 by rpki-client