Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa
File:                     3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa (raw, json)
Hash identifier:          4AR8u7tvk0keiTmPUeDGvVh/FibmEnIVGYFSxOFzeTg=
Subject key identifier:   8E:26:61:89:7E:07:BE:A0:0A:F3:36:2F:D3:84:96:3D:68:C3:81:38
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AFB5F153BF15528AB62580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        72.31.192.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:b5:f1:53:bf:15:52:8a:b6:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=6fb867bc-ba2f-44a8-b827-4c459bb6e603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f6:5d:ea:52:0e:24:ea:8b:db:66:e6:f4:c7:
                    00:04:09:2f:6a:17:60:6a:40:d0:dc:d8:24:72:35:
                    2f:9b:76:cc:59:11:62:a0:bf:20:22:fe:31:73:18:
                    1a:dc:ee:3c:8b:d1:fc:7a:df:b9:bd:b3:81:12:78:
                    76:b7:41:48:af:5a:f0:69:74:ee:cd:5e:e7:8b:12:
                    03:6d:57:e1:c2:90:0d:c8:44:12:cd:71:50:51:d9:
                    49:34:ba:a8:4a:97:5d:38:a0:f5:69:90:46:7e:8a:
                    c1:66:60:77:95:0f:84:82:e2:ef:82:d8:3d:d1:03:
                    2e:ed:bf:b8:b7:31:bf:4d:8d:63:ec:81:fd:26:39:
                    b3:3f:d2:3b:c2:84:bd:0a:bc:28:50:43:35:39:c5:
                    7a:a5:4b:5c:ee:e6:35:20:12:e4:21:7d:90:52:88:
                    23:88:bc:f5:40:9e:32:24:c2:4a:a0:07:30:1d:92:
                    1f:fb:00:38:89:24:63:d5:d0:cb:2e:60:6b:2e:cd:
                    9e:b9:ab:c6:6c:b9:ce:f0:0b:8d:df:20:85:6a:30:
                    87:ef:0b:bb:9d:99:81:5f:49:83:a5:d7:f3:a0:73:
                    e9:1a:4c:c1:a7:1b:33:4c:73:71:1d:51:cf:d1:56:
                    ed:e4:8d:ed:93:63:24:df:5d:df:9c:43:8e:a4:c4:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:26:61:89:7E:07:BE:A0:0A:F3:36:2F:D3:84:96:3D:68:C3:81:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c5:06:83:d3:1c:69:94:72:fb:8a:2c:5a:6b:51:5a:a7:79:
         1a:b3:47:cd:1c:38:5c:de:e2:2f:23:78:12:6a:2a:f8:a5:83:
         1d:12:e4:c6:c6:82:10:2a:30:b5:37:38:b8:b8:35:06:bb:dc:
         67:71:33:ce:dc:37:ed:50:13:db:fc:41:92:9b:03:10:ed:e8:
         ad:d5:37:e8:ac:f1:b1:c6:1f:4c:74:d5:5a:e4:e4:00:0d:8e:
         ca:ec:cf:a6:69:20:e5:ad:0c:52:00:97:0c:34:fc:24:70:ec:
         5c:3e:45:e1:1d:70:52:c0:24:f3:09:b1:42:68:ef:55:96:ef:
         3a:1f:3f:13:28:9b:02:01:91:ca:1f:75:fc:40:e7:6a:87:9f:
         f9:ab:b0:df:f7:db:ee:e9:66:bc:33:48:25:ec:e8:c2:1e:c8:
         96:6b:d0:85:b8:6c:62:10:2a:07:c7:97:1b:a6:7f:14:be:ad:
         a3:80:5c:1c:3c:b0:49:6c:a4:a9:fb:f8:c5:51:8c:6d:57:6e:
         f2:ed:d0:f8:2e:bf:44:7c:b3:9d:86:62:ed:2b:7d:2b:be:c5:
         19:f5:e5:a0:39:cb:70:39:fb:e1:b9:b5:75:28:07:f9:d0:10:
         ea:44:61:45:48:6f:27:38:04:a1:57:58:4d:85:fe:85:17:8c:
         6e:97:5a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:17 2025 by rpki-client