Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/1291833c-59e9-3300-872f-ed24b4c85804.roa
File:                     1291833c-59e9-3300-872f-ed24b4c85804.roa (raw, json)
Hash identifier:          HvqKzawlf/FClUb2IHvGK9oNTIy5DuyQG59UtWEmw2Q=
Subject key identifier:   7B:4A:92:06:90:EB:E9:5D:8C:7C:A8:68:64:6F:C9:1D:CE:CA:5D:F2
Certificate issuer:       /CN=5fe50bbd-28d3-4434-bf61-3151216bd374
Certificate serial:       010D0C9F4328584819CFC6CDEF5E8EEC0EBBAA3E
Authority key identifier: 0D:87:E1:30:E6:10:9F:FD:61:DC:D2:29:CF:2B:19:92:3F:A4:B4:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/1291833c-59e9-3300-872f-ed24b4c85804.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        64.190.110.0/24 maxlen: 24
                          64.190.111.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:c6:cd:ef:5e:8e:ec:0e:bb:aa:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fe50bbd-28d3-4434-bf61-3151216bd374
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=dd9a74dc-0a6b-40e9-8626-1c4d707ec50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:68:1b:3a:01:a2:67:8e:8b:43:e3:ad:99:
                    1b:fc:dd:53:e4:27:e4:bb:cc:3f:6a:83:cf:a2:ff:
                    20:2d:a8:c6:f4:31:fb:1c:81:a9:b2:1c:75:09:a8:
                    c4:d9:f7:31:39:7d:c2:e8:85:51:3f:50:51:9d:15:
                    e2:95:45:6d:61:8b:38:6a:f3:3c:28:c3:ff:df:3e:
                    68:1c:66:72:16:c2:7b:42:f2:a5:07:8b:ab:0f:79:
                    3d:08:ee:2f:55:9a:39:1c:36:90:a6:74:59:67:35:
                    d4:a7:c4:c6:6f:9e:de:27:61:42:bb:ee:61:ae:aa:
                    ae:b3:3d:e6:2c:d9:47:dc:15:d4:0a:28:17:61:13:
                    bc:3c:9b:0b:c3:29:4d:2c:38:00:ff:a5:68:e5:c7:
                    6c:22:31:d4:87:a5:fc:16:30:d4:53:44:b5:83:e3:
                    16:ca:1b:5f:7d:92:d5:8c:ea:d0:bc:86:be:eb:4c:
                    03:57:d4:de:8f:2d:a8:fb:bc:cf:84:5e:76:c1:7e:
                    b3:bf:68:d4:33:20:35:5e:5b:74:b4:a5:2b:b9:d6:
                    4c:18:cc:d4:23:4a:4f:fe:02:13:7b:1a:a0:e4:a1:
                    98:23:cb:d6:5d:5c:a9:40:b5:2d:50:20:92:e4:12:
                    f9:ab:d0:34:56:54:09:fa:23:e0:a0:be:7f:b9:e0:
                    24:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4A:92:06:90:EB:E9:5D:8C:7C:A8:68:64:6F:C9:1D:CE:CA:5D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/1291833c-59e9-3300-872f-ed24b4c85804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/5fe50bbd-28d3-4434-bf61-3151216bd374.crl

            X509v3 Authority Key Identifier:
                keyid:0D:87:E1:30:E6:10:9F:FD:61:DC:D2:29:CF:2B:19:92:3F:A4:B4:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:59:7f:c6:6d:5a:19:95:5d:77:79:17:6f:77:72:4e:a2:b2:
         c9:e0:a9:b0:e1:a8:a5:4d:32:eb:5d:19:6d:8b:55:a4:39:93:
         aa:b4:2f:a9:af:c8:ab:da:0e:41:7f:3d:2d:fd:20:97:01:b1:
         f8:e5:79:6f:84:6f:a0:ed:27:be:0f:da:f7:d8:c5:da:1c:00:
         fb:e7:bf:d1:67:ef:d8:82:0c:60:9e:1b:f5:13:e1:0c:60:8f:
         e0:d1:13:c3:73:8e:10:ef:9e:bd:2e:51:ed:7e:0c:aa:59:01:
         bf:7b:d8:04:35:90:8f:da:b3:75:57:26:c9:4a:c4:0c:56:17:
         d9:90:84:43:31:62:72:b5:a4:09:e2:5f:30:99:74:1d:63:2a:
         6e:3c:1b:95:85:a8:82:2f:37:bc:cb:0b:be:f1:4a:4c:e1:8c:
         30:dc:52:6e:aa:51:f9:0d:38:14:6e:ec:03:c1:b4:ed:24:f5:
         4b:74:4c:b0:d8:ef:dc:57:55:73:c2:fe:47:b7:a4:d7:41:84:
         1a:f9:e8:c8:b6:35:9f:ec:fb:e7:c6:34:b1:a3:d3:b6:f8:c1:
         98:5a:3a:e2:de:54:c9:a9:5f:5a:53:fe:0b:93:b1:8f:51:c7:
         56:aa:4b:10:92:27:86:d4:e7:39:52:37:22:e8:dc:df:83:15:
         b2:b0:be:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:37 2025 by rpki-client