Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa
File:                     747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa (raw, json)
Hash identifier:          6fWXGEr8655xZpJbN9QyBJm/FXYAJF104SEvRk4JuFU=
Subject key identifier:   D2:AC:39:7E:D1:1A:04:F5:68:7A:84:3B:C4:C6:24:28:E2:06:84:22
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285848222FDA570369024A4EAD8580
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     14297
IP address blocks:        139.131.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:da:57:03:69:02:4a:4e:ad:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=17d4c709-f1f9-41bb-88f4-bcf79e28c6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:ff:4b:57:e0:76:3d:c8:ea:50:46:af:81:
                    0b:34:b7:c1:53:ff:2c:9f:dc:0f:d4:e4:05:80:b4:
                    db:e8:ea:91:c1:fc:20:f9:3b:66:47:8f:41:7b:15:
                    6e:15:8f:dd:ec:59:0e:bd:51:b9:f1:ff:dd:b9:b0:
                    00:6c:e1:fe:d7:fe:cb:c1:05:93:e2:f3:af:44:50:
                    b9:b9:a5:ff:55:92:5b:7d:3e:4a:cd:cf:5e:a8:4d:
                    9a:12:5c:46:16:21:fd:61:d5:b8:46:2f:50:20:6b:
                    d2:6a:3d:7c:10:0e:fb:90:c8:54:c4:33:9a:9b:4e:
                    7c:78:55:53:61:d1:22:c5:ab:84:90:2c:ac:2f:45:
                    37:18:94:e8:cc:14:b3:01:e3:22:dd:67:bc:00:fc:
                    51:02:6f:74:e5:1a:26:93:4c:b4:0b:c4:2c:4a:18:
                    de:49:3f:1b:c4:d4:33:5c:ac:2b:59:aa:9f:b3:bb:
                    2a:50:78:ef:f7:b0:a5:1d:77:54:ed:ff:d1:f2:08:
                    95:7f:5c:9f:a3:da:76:0a:0f:3c:1b:c8:ee:38:4e:
                    8b:27:9d:c3:b2:f0:68:35:b2:ac:1d:fb:db:b8:e0:
                    6d:ab:78:35:cd:e7:9d:cd:64:5e:5b:77:aa:ff:14:
                    a5:21:73:02:0c:62:cc:88:a2:21:43:6e:a7:30:ca:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AC:39:7E:D1:1A:04:F5:68:7A:84:3B:C4:C6:24:28:E2:06:84:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:e6:a4:e5:59:ec:6d:14:9f:0c:f4:34:0a:34:f6:ae:13:30:
         ca:c6:55:24:23:c6:b6:7f:04:58:23:b6:4a:13:07:f7:a9:03:
         97:8d:5f:57:ff:da:ff:a1:d8:b5:c3:64:fa:be:ca:e1:73:12:
         bb:cf:cf:35:08:10:43:99:e1:90:75:07:a4:ce:8d:3b:38:9c:
         90:88:96:80:00:4f:ad:cc:e4:a2:59:62:16:ec:2a:ed:b2:b0:
         5e:b8:2d:cb:8a:7f:81:1d:bf:d7:a0:e3:62:c8:b0:a5:cc:72:
         e9:c5:74:7a:c3:dc:41:5d:d0:89:56:3d:2a:15:8a:d4:35:cc:
         0a:e8:9e:48:09:6a:e3:a4:47:7b:3e:4b:20:9a:cb:0c:72:30:
         36:4b:56:74:50:43:ce:4c:31:99:b6:cb:28:0c:8d:8c:c8:54:
         29:b2:db:9b:8a:33:9c:35:82:78:8e:42:c3:fc:41:2c:f7:45:
         0a:30:3d:f5:d4:17:bd:78:00:58:40:2c:ac:a7:17:b2:d4:5a:
         ec:20:98:52:d5:44:6b:67:ac:6a:af:7e:eb:cb:ee:7c:7c:f0:
         2b:27:8f:b4:db:fd:67:86:78:d5:91:a6:a7:d6:cb:a3:12:7c:
         57:bb:80:7c:2a:a1:95:31:a7:a2:64:52:f3:d6:ad:f5:a5:f6:
         d0:39:a3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:35 2025 by rpki-client