Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/e75cf125-8715-3d14-8f55-bb352f87cf59.roa
File:                     e75cf125-8715-3d14-8f55-bb352f87cf59.roa (raw, json)
Hash identifier:          mZgd+DbmlzayLG5AcV/het09m2Ol34y8k1upzfm4zCU=
Subject key identifier:   20:26:23:CB:7C:02:F5:77:75:07:4F:01:D8:22:73:16:34:B6:E7:EE
Certificate issuer:       /CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
Certificate serial:       010D0C9F432858481C9A7860A9B179F95513EF80
Authority key identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/e75cf125-8715-3d14-8f55-bb352f87cf59.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     11961
IP address blocks:        64.89.208.0/20 maxlen: 20
                          72.250.128.0/19 maxlen: 19
                          108.59.112.0/20 maxlen: 20
                          216.228.32.0/19 maxlen: 19
                          2607:8380::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:78:60:a9:b1:79:f9:55:13:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=67898678-c785-40e1-8b69-ac3e247a08b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e1:93:c4:d7:60:bd:b9:47:6e:d2:ec:ff:d2:
                    65:0e:32:98:57:9b:c7:41:4e:40:12:30:e8:e1:a0:
                    42:bd:db:09:22:93:d9:9b:91:53:b0:ba:a5:bd:03:
                    0e:6e:5c:ee:f5:6a:b5:96:ac:61:87:f4:43:6c:0e:
                    cf:59:a1:c4:19:ce:d4:c1:29:11:c0:01:74:93:8d:
                    73:ee:69:72:47:73:38:70:0c:2c:cd:ea:ab:6a:6a:
                    ea:46:ab:45:22:13:b1:0b:75:c1:4c:39:bc:31:2a:
                    df:f2:7e:a3:7a:e6:d3:35:63:46:95:ec:dc:6a:eb:
                    25:17:b8:8b:99:03:e1:1a:ef:ea:86:0a:1a:27:5b:
                    6c:46:37:a9:a3:33:ef:aa:73:50:af:2d:eb:b9:b9:
                    ec:d8:cf:23:de:f8:9c:1e:d6:d3:aa:ca:53:5b:68:
                    b8:fd:43:01:9e:4c:74:57:e1:4d:81:ed:2c:8f:07:
                    32:02:0c:26:59:ec:3c:5c:39:de:a0:80:94:26:16:
                    1a:8c:7c:a5:11:26:9a:a6:52:b8:fb:7d:bb:fb:91:
                    8d:7b:76:00:43:38:13:df:ea:41:00:cf:05:8f:c7:
                    3f:c5:99:bc:94:16:53:1c:24:b8:f1:88:e6:33:4b:
                    10:73:d3:95:d3:42:4b:62:08:bc:62:ad:0c:24:76:
                    99:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:26:23:CB:7C:02:F5:77:75:07:4F:01:D8:22:73:16:34:B6:E7:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/e75cf125-8715-3d14-8f55-bb352f87cf59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl

            X509v3 Authority Key Identifier:
                keyid:2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.208.0/20
                  72.250.128.0/19
                  108.59.112.0/20
                  216.228.32.0/19
                IPv6:
                  2607:8380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:89:46:c1:08:86:91:9a:b6:a9:e7:f9:19:cc:5d:a1:3e:f4:
         07:ab:8e:71:19:c1:b6:b3:33:1f:d6:32:d2:62:31:63:90:7d:
         ef:81:f3:ec:16:d3:70:10:ee:a1:f5:26:eb:c1:ac:f5:ae:3b:
         c5:c8:9b:d0:a9:65:ee:5a:ac:30:e0:45:f7:32:62:77:07:7e:
         29:84:2d:68:e0:d9:14:fc:ac:07:58:bf:d8:6e:0b:10:0d:a3:
         82:32:ce:dd:24:c5:c0:f9:ef:0c:f5:25:25:1c:59:1b:f7:5d:
         e5:60:05:d8:58:7b:3f:f6:69:ad:26:09:c5:11:96:d1:42:bb:
         49:fd:76:31:99:c2:42:7d:ef:71:88:d6:0c:1e:66:79:60:c8:
         08:59:07:36:47:76:6a:00:c7:b3:7f:83:29:41:99:1d:2c:ba:
         aa:e0:ac:f0:48:04:b5:89:b5:64:61:10:e4:41:1e:39:87:01:
         8a:c9:1c:1d:9c:a7:05:65:06:32:b6:97:17:bb:c8:9a:14:9e:
         cb:fd:48:86:7d:92:da:de:c5:eb:36:f3:03:d0:ba:38:cb:a3:
         f5:d2:79:f3:37:eb:24:8e:bb:a9:45:0d:ea:ce:71:98:5e:35:
         3d:1a:87:54:02:f6:49:b8:8d:ed:2c:24:63:97:b7:38:b8:44:
         49:d9:56:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:35:43 2025 by rpki-client