Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/5942460a-897b-305c-a0c4-e27bb4252238.roa
File:                     5942460a-897b-305c-a0c4-e27bb4252238.roa (raw, json)
Hash identifier:          FB9ZbUSiYEc6cuLwfnu5gRd1pptmKVwhQhOS9dmGd1Q=
Subject key identifier:   16:E8:F5:B9:ED:04:B8:CD:5E:DA:2E:EE:6A:64:9E:5C:88:BA:11:53
Certificate issuer:       /CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3
Certificate serial:       010D0C9F43285848159FE0BE1103AB96FD068080
Authority key identifier: 77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/5942460a-897b-305c-a0c4-e27bb4252238.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     15198
IP address blocks:        24.52.44.0/22 maxlen: 22
                          24.75.232.0/23 maxlen: 23
                          24.75.234.0/24 maxlen: 24
                          24.75.235.0/24 maxlen: 24
                          24.75.236.0/24 maxlen: 24
                          24.75.237.0/24 maxlen: 24
                          24.75.238.0/23 maxlen: 23
                          208.115.94.0/23 maxlen: 23
                          2604:b180:200::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:e0:be:11:03:ab:96:fd:06:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=e2c29850-4bbd-4ef7-ad72-41a5ed36a4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:ed:f3:3d:53:bd:df:c2:44:c6:d9:d1:f8:
                    a7:58:a3:68:46:95:a2:1f:3b:ad:68:86:be:54:66:
                    f6:03:e5:96:21:b3:bd:c4:0d:c1:8b:3f:66:92:5d:
                    5f:13:de:7c:e7:d7:be:00:07:17:2c:b7:94:5a:4e:
                    95:3c:dd:eb:41:b3:df:9c:a0:cc:3f:6b:f3:dd:2e:
                    6d:1a:a1:6a:01:4d:bf:a7:25:85:89:6d:77:08:a7:
                    14:41:54:c1:4d:64:29:17:0a:b1:d2:28:f4:4d:f2:
                    5d:70:26:7c:96:d2:d1:08:f8:17:5b:94:73:7e:82:
                    06:82:04:97:57:7d:0c:ea:0c:36:7e:32:71:5e:98:
                    83:a8:26:15:62:be:69:96:cb:b6:84:84:6d:5f:e7:
                    38:ca:12:75:27:f4:85:d6:05:df:b6:a4:74:c0:72:
                    c5:7a:34:55:22:3f:8e:08:2d:1a:07:a8:bf:64:33:
                    8e:43:a2:4a:45:53:91:48:4e:c5:f0:0f:2c:ff:7f:
                    b4:a5:fe:d7:c2:76:a9:e9:21:56:2a:16:dd:27:e5:
                    73:d6:d2:f2:f4:95:34:cb:ac:1f:b6:91:6c:ae:31:
                    0f:a3:e3:03:92:7f:53:36:ce:3d:4f:09:94:88:be:
                    4c:d7:0a:3d:aa:d5:27:3a:4e:c5:d0:3a:c3:bc:4e:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E8:F5:B9:ED:04:B8:CD:5E:DA:2E:EE:6A:64:9E:5C:88:BA:11:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/5942460a-897b-305c-a0c4-e27bb4252238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.crl

            X509v3 Authority Key Identifier:
                keyid:77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.52.44.0/22
                  24.75.232.0/21
                  208.115.94.0/23
                IPv6:
                  2604:b180:200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:27:45:95:97:7e:89:dd:49:78:1c:71:e6:d9:62:3c:c8:b8:
         b2:16:4c:7e:c6:34:97:a5:2d:29:17:11:bf:a8:6e:a3:a1:c5:
         fe:09:c7:ca:f6:e0:54:1d:1c:0f:3e:90:2e:38:13:2c:d3:69:
         5a:50:7b:f5:51:b5:86:d8:c3:5f:cf:14:28:35:7e:ce:45:3c:
         32:f4:d4:f0:65:9a:7f:ab:5d:a7:6d:ab:a5:cb:15:3c:5d:82:
         d2:b2:a1:48:e9:f8:6b:2b:68:70:11:91:33:fd:8b:00:7c:03:
         94:07:6f:d4:0d:48:8a:d9:63:60:1e:3b:bd:95:80:83:4e:b8:
         68:cf:ae:2d:64:7c:17:c5:f6:73:6c:25:a4:45:a1:e6:99:cf:
         06:68:36:ed:4f:44:69:9a:9a:4c:b5:52:76:23:5a:1a:7a:00:
         de:97:f2:8c:50:99:62:e9:42:8b:f8:d3:27:f9:24:ab:aa:51:
         92:d2:12:94:06:c0:1c:1b:7a:c7:82:58:3a:b2:7e:15:6c:c8:
         c2:1e:03:97:92:65:38:79:9f:cf:62:5d:b6:37:45:c1:9d:1b:
         57:28:c6:47:5d:c5:2b:78:8b:60:3b:4e:23:33:16:8c:bb:05:
         f5:c2:ec:53:01:c8:51:40:43:c7:69:d3:c3:e5:12:5a:df:fa:
         10:5d:74:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:13 2025 by rpki-client