Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96e8f30b-f65c-3e7d-8eea-1504ce830a8e.roa
File:                     96e8f30b-f65c-3e7d-8eea-1504ce830a8e.roa (raw, json)
Hash identifier:          0P5AJ47LZEtNyHQfc6QmaPUoKmiPyora+VgdBsyCkYE=
Subject key identifier:   69:D8:DF:62:4E:D3:DA:2D:BA:4B:0C:E8:4F:81:2B:36:FB:01:70:7F
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847FDE4DEF9234E6A1FD03F3600
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96e8f30b-f65c-3e7d-8eea-1504ce830a8e.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     6079
IP address blocks:        75.153.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:de:f9:23:4e:6a:1f:d0:3f:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=a6fa55cd-10e7-4d71-a54a-90a849ac2f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:91:74:d6:4a:b1:aa:47:d5:62:33:a5:d9:
                    96:c6:f8:5f:43:ce:9e:6b:41:58:b1:d0:e4:72:51:
                    c1:4e:6c:31:4c:b1:0a:10:72:55:3d:86:21:4e:94:
                    26:a8:df:c0:b7:c2:06:2d:11:a4:d1:f0:73:0b:7d:
                    d9:a1:2c:b2:8f:c7:0c:60:fc:62:bc:f3:d7:12:99:
                    b3:f4:1c:fc:17:52:c8:22:32:b6:b5:07:95:9c:4e:
                    d9:a7:5d:a1:43:93:59:b0:34:39:c0:3d:c6:d6:6b:
                    1a:62:f6:2a:c6:ac:1b:81:dd:f5:96:a0:38:9a:d3:
                    03:43:29:75:66:d0:14:10:5f:f4:5b:01:e9:f4:ba:
                    be:c1:1f:cb:4a:ce:2a:52:9f:df:8c:49:47:3b:20:
                    34:22:21:1b:02:ee:1d:03:0b:b5:07:f6:44:7e:0b:
                    b4:54:28:e9:4a:f7:33:72:96:bf:94:65:5f:49:fd:
                    9d:3b:00:65:11:c2:dd:1c:68:fb:aa:97:19:c1:35:
                    d7:78:06:d2:e6:0f:38:a6:4d:8a:28:c5:f8:b8:50:
                    9b:e2:03:3d:53:58:e9:0a:f3:88:0c:cb:05:b0:a1:
                    55:58:b4:57:10:89:9a:17:58:12:9b:a8:52:5b:7d:
                    c3:70:dd:d8:d5:08:11:85:3d:cd:8c:78:60:07:55:
                    a3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D8:DF:62:4E:D3:DA:2D:BA:4B:0C:E8:4F:81:2B:36:FB:01:70:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96e8f30b-f65c-3e7d-8eea-1504ce830a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.153.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:57:c7:86:28:fd:7a:11:a4:0b:c6:f3:dc:33:7f:3f:a1:70:
         c0:34:af:1c:fd:60:71:d3:c2:e1:7f:2f:8c:96:c9:37:b3:fa:
         71:22:af:a9:b1:be:ad:32:d0:8d:b7:52:ff:fd:31:b4:d0:e9:
         de:e3:8c:42:c1:d4:9e:28:f0:f7:18:fb:2c:36:18:4f:f7:6f:
         bc:b9:a7:ac:07:5b:9a:11:80:b8:c7:8b:63:a8:1e:fe:42:2c:
         ec:b7:a4:08:2d:bc:73:f7:0e:6e:3e:5c:01:28:d9:0d:3d:38:
         e3:b2:76:3a:20:ef:3e:43:bc:0d:12:5e:ba:f4:08:2e:73:54:
         8e:f2:6d:38:5f:2d:d3:92:22:a3:e8:f5:56:a9:0d:3b:02:0a:
         d6:a4:c8:8e:03:b9:f4:76:3c:ba:83:b2:6d:48:eb:43:03:a9:
         b8:af:35:66:ce:c8:90:8d:26:a8:c4:e1:d2:2f:fe:e1:78:45:
         01:a0:c2:81:25:f1:c6:dc:5b:3d:28:c3:00:a6:8e:b4:e6:5e:
         1d:40:e2:53:dc:23:8b:ac:a0:9c:ef:1b:60:af:39:a4:7c:0c:
         f8:a2:1d:df:87:87:37:87:06:c1:fe:6f:a3:80:12:b0:6b:27:
         3a:13:22:51:40:c6:c3:4e:b9:af:60:d4:8c:c6:38:0f:46:a3:
         c8:20:b9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:37 2025 by rpki-client