Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/35526ede-5a4d-30d2-b89b-307f7bd348da.roa
File:                     35526ede-5a4d-30d2-b89b-307f7bd348da.roa (raw, json)
Hash identifier:          ERJQsTlN8XNXMuCaEiv7NoHXePd1b4wvQl+w1WPTtWk=
Subject key identifier:   12:BB:F7:4D:97:C2:8F:54:10:82:70:C6:7E:C8:67:58:F1:3C:7E:B5
Certificate issuer:       /CN=e4bd0e94-6557-4459-b9ca-7bbf8fe73f58
Certificate serial:       010D0C9F432858485B6AFDA656C025562AD4F0A0
Authority key identifier: C2:63:D8:50:63:80:22:7D:EC:2E:61:BB:35:1C:1F:AD:33:94:16:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/35526ede-5a4d-30d2-b89b-307f7bd348da.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     36103
IP address blocks:        67.207.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:fd:a6:56:c0:25:56:2a:d4:f0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bd0e94-6557-4459-b9ca-7bbf8fe73f58
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=98648959-9eb1-429e-81dd-9dd2a572e958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:af:a5:23:bb:66:6a:54:fc:47:21:55:29:7d:
                    33:41:e3:ce:86:7d:bb:2d:b7:74:ea:cf:ee:ba:f2:
                    98:7d:ac:5f:b6:19:21:25:e9:6c:58:ea:63:66:d4:
                    83:cb:4b:09:7d:0b:cb:f1:1a:35:02:bf:75:a2:e8:
                    ea:f6:3c:ff:cc:3d:da:ea:46:84:4a:60:b2:ca:68:
                    d8:2d:d6:c0:27:c9:0e:5c:7b:34:3d:80:7b:76:ce:
                    8d:7d:5b:c5:cb:c4:2e:d2:c5:3f:4a:6c:12:1e:5b:
                    be:c0:ce:ed:0b:d1:f2:48:77:9f:34:40:d1:5f:62:
                    c2:7a:77:2d:6f:b7:cd:ef:38:ba:9a:17:c6:d6:e3:
                    98:0e:2d:41:ed:14:9d:01:5d:9f:83:d3:84:76:11:
                    92:6f:3a:7b:ba:6e:cd:e8:04:0e:83:73:cd:69:d0:
                    76:22:c4:8c:ae:6c:cf:ea:ca:f7:96:d0:8c:7c:49:
                    9b:e8:53:bd:c4:33:fd:c5:90:0e:e2:67:c3:22:d8:
                    47:71:bb:41:54:fd:26:9c:19:c6:be:d9:bd:a7:2f:
                    31:19:74:c6:b6:fd:e1:4d:e5:c4:9f:cd:c5:3a:fa:
                    40:59:0f:ea:ad:12:eb:a1:a3:58:5f:c9:92:39:b0:
                    a6:f2:78:e9:07:8f:4f:93:6c:12:ad:21:84:b7:6a:
                    34:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BB:F7:4D:97:C2:8F:54:10:82:70:C6:7E:C8:67:58:F1:3C:7E:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/35526ede-5a4d-30d2-b89b-307f7bd348da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.crl

            X509v3 Authority Key Identifier:
                keyid:C2:63:D8:50:63:80:22:7D:EC:2E:61:BB:35:1C:1F:AD:33:94:16:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.207.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:7d:64:22:53:9d:9c:8e:ba:3f:12:bb:be:07:f3:22:7e:c5:
         37:f5:e0:54:68:3d:a1:1e:39:be:74:90:ae:c0:1a:d7:03:3d:
         a3:e3:6c:3d:96:cb:79:8c:2f:7a:f7:d6:51:43:3f:05:76:c3:
         17:3a:8b:08:3a:78:fe:0e:dc:4b:64:f1:b8:6f:73:91:00:a4:
         85:b8:19:e3:d2:96:b8:56:3b:c6:8e:da:c6:11:bf:48:52:cc:
         e7:5c:68:02:ac:35:93:f3:ea:fd:66:3e:af:b3:8b:5b:07:a1:
         11:0b:49:22:cf:62:7d:77:68:33:a9:cb:9c:f2:db:4e:cf:fa:
         88:f9:b6:18:06:48:bb:39:ed:53:db:dd:50:b8:a8:ea:5b:4a:
         99:7e:61:0e:31:1d:68:c3:3b:0f:49:52:10:53:72:79:dc:6e:
         f3:e2:2e:ee:e1:f6:df:38:f7:88:f0:0b:46:56:1f:a4:92:ca:
         c4:7f:57:bb:29:78:2c:af:71:d8:8d:a6:5a:84:f8:20:93:fe:
         3e:d4:d6:91:f4:fa:fa:2f:41:11:15:ec:c7:92:c2:13:0b:42:
         8b:2b:ee:88:0a:65:5c:69:1c:85:89:28:2b:8e:d8:81:de:59:
         2a:c4:7b:83:7d:0a:6a:c8:a5:86:81:d8:59:2d:7b:35:4d:a1:
         ba:ab:98:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:48:41 2025 by rpki-client