Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/0047fcfd-7aec-34bb-aede-a399b404d33d.roa
File:                     0047fcfd-7aec-34bb-aede-a399b404d33d.roa (raw, json)
Hash identifier:          6Q0Ay+A5l+lrpqyiVeJAY/RQC8aA41OcaCZQI/y6jvs=
Subject key identifier:   A6:C4:4D:C2:F7:3A:0E:46:23:B6:F0:B4:19:5D:78:28:E7:FE:C6:EB
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F432858483B5011C7A55815C5BB4FAC40
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/0047fcfd-7aec-34bb-aede-a399b404d33d.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     35916
IP address blocks:        172.111.57.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:11:c7:a5:58:15:c5:bb:4f:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=aed1fa82-7ee0-4312-902a-cfd1206740a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f7:83:11:da:a2:f6:ed:93:91:74:b9:f4:b6:
                    e6:2c:b9:33:08:0a:af:08:c0:34:69:5f:92:79:28:
                    00:55:f0:79:51:31:6f:f2:29:b1:ae:50:38:d2:54:
                    6c:7b:b5:9c:00:d6:6e:16:b0:8f:49:2c:2c:f1:ef:
                    41:c5:c8:e8:64:34:58:c5:6c:7e:49:5e:0a:a5:e4:
                    dd:26:11:ea:e0:99:49:32:bf:7b:ff:b5:8f:50:b7:
                    33:c2:c5:b3:1a:b6:67:fd:2c:fe:85:ed:90:e3:ca:
                    52:06:ff:d3:74:33:a6:b2:35:ef:87:5c:73:ef:0f:
                    b6:fd:e9:e6:ab:3c:95:20:65:9f:ec:a1:6c:54:40:
                    28:5c:9b:fe:ba:ab:c0:08:49:9a:f8:0a:3f:8c:3b:
                    dc:1c:02:c5:04:53:a5:50:21:b8:0a:d6:da:d1:2f:
                    48:60:5f:18:50:19:2d:bb:18:84:b5:df:0b:62:f5:
                    c3:a1:37:e4:e9:07:23:50:96:e8:ad:20:bd:95:86:
                    9a:f7:8d:e7:08:ea:9f:89:82:ff:b8:bc:e0:f9:82:
                    5f:12:dd:e2:46:06:d0:33:6e:81:b5:12:71:8d:8d:
                    e3:e4:1a:68:63:42:92:a0:2c:b6:bf:73:05:2b:98:
                    57:4f:b2:f2:28:e6:c2:6b:71:6c:3f:fe:81:e5:61:
                    cd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C4:4D:C2:F7:3A:0E:46:23:B6:F0:B4:19:5D:78:28:E7:FE:C6:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/0047fcfd-7aec-34bb-aede-a399b404d33d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:bf:a6:ca:6b:95:af:4d:9a:8d:4a:a9:ec:c7:cb:e2:b0:bd:
         2d:94:14:1d:9a:5f:ce:ea:a4:54:d4:e0:3b:06:a9:d9:c2:a8:
         29:4d:f6:11:94:54:df:45:3e:ee:57:29:ba:98:8f:75:33:42:
         ff:4c:ba:4d:49:71:53:1f:7f:3c:13:f0:c4:f8:90:e7:c6:8b:
         45:07:ba:cc:e3:ed:19:a7:63:50:32:85:32:3e:5e:66:01:3a:
         ad:fe:e3:ef:55:d9:15:7b:2c:3d:49:47:f0:7e:d2:cc:06:ea:
         c2:c5:db:fb:12:a6:f5:13:c8:12:76:c4:3b:aa:c1:f5:fd:1e:
         ef:a8:29:92:e8:bc:b2:c5:1c:d3:6c:d4:59:a3:53:ae:bd:2f:
         11:4f:09:68:2b:87:0f:31:41:4e:7b:48:59:08:28:bb:36:0a:
         1d:19:c6:c6:5e:6c:02:6a:06:d4:b6:64:24:38:8b:7e:11:ca:
         b4:d4:23:7b:91:b9:d7:af:49:e2:62:ab:10:82:9e:67:93:6c:
         4f:9c:22:22:4b:62:53:b3:b1:a1:c6:47:37:bb:9b:7b:a2:db:
         b2:29:b3:38:82:a0:77:f6:1a:51:6f:6b:8c:ba:64:0b:13:13:
         88:0a:d7:5f:ba:1f:60:48:1d:3d:9e:4d:ac:a6:62:ea:68:4a:
         95:fc:d5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:33:57 2025 by rpki-client