Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa
File:                     17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa (raw, json)
Hash identifier:          Xs4ziMzDWP4exSTTY5JpZIsoBgy8u9Sv2zlqQqZbjXk=
Subject key identifier:   C2:ED:E5:C7:94:3D:8F:DD:CF:09:62:91:92:17:35:5D:92:C4:BB:14
Certificate issuer:       /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
Certificate serial:       010D0C9F4328584838855E84E45152F2DD082FC0
Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     36666
IP address blocks:        72.10.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:5e:84:e4:51:52:f2:dd:08:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=74b4d5b0-8085-48b6-83fd-42cd87878ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:3c:22:4d:20:6c:7d:29:bf:a7:bf:fe:f9:
                    69:d5:19:ad:26:02:46:10:4c:83:0b:c5:bb:79:62:
                    d7:50:4d:53:92:a4:ea:38:df:42:69:d7:bb:ef:82:
                    62:ec:6d:e8:c9:19:69:86:90:a4:a2:df:ce:34:0c:
                    c5:7c:b7:c8:da:72:cf:69:8c:72:b0:00:e2:65:a3:
                    44:15:c4:55:96:e0:76:cf:bd:a8:91:32:47:c0:43:
                    7b:7d:fc:57:f3:f9:a8:bb:7a:82:24:dc:25:07:ca:
                    4a:2b:8c:62:99:16:58:a0:15:b7:98:ea:a2:ce:0e:
                    02:87:76:1c:60:f3:9f:ed:35:61:ce:2a:06:8e:13:
                    92:23:92:cf:b1:e5:1c:cc:2d:86:e9:7c:0c:dc:32:
                    f7:d1:2a:2e:5d:10:c6:da:8c:fb:db:9d:b3:5a:2a:
                    31:b5:f9:d5:04:a7:e6:15:00:52:22:f9:43:de:8d:
                    c3:39:95:ba:11:3d:cc:60:9b:9c:52:02:ba:04:a3:
                    92:0a:9a:4c:85:85:c3:09:f8:ff:fe:fb:76:5a:c6:
                    58:ed:38:26:71:49:df:13:21:3f:59:af:d5:4b:c2:
                    c6:37:c7:17:da:97:83:0e:40:51:38:83:d2:c2:59:
                    6b:c8:49:49:08:4f:30:be:8d:ea:c5:d2:67:ca:4b:
                    74:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:ED:E5:C7:94:3D:8F:DD:CF:09:62:91:92:17:35:5D:92:C4:BB:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl

            X509v3 Authority Key Identifier:
                keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c8:40:0c:f3:be:8e:57:b1:91:fd:d5:eb:67:f9:4c:b2:ed:
         fe:54:ec:83:6a:58:ed:44:85:5b:8c:bd:32:8f:64:a2:70:53:
         da:a8:73:76:72:5c:80:cb:ab:0a:64:60:d5:18:6b:95:af:7b:
         f5:9c:87:35:2c:2f:95:3f:b6:4f:83:8c:30:c6:1d:cd:fe:e0:
         1a:d9:85:9f:99:aa:71:81:38:42:fa:4a:b8:46:13:c4:1c:cd:
         ea:8a:7f:87:6a:f9:f5:12:21:3e:03:2b:c3:e9:df:8d:33:b9:
         5f:2c:d8:0d:db:96:65:5f:08:35:d7:fe:bb:39:b3:14:07:a9:
         26:1f:fb:73:66:8e:a8:8b:13:fb:0e:6e:c4:ce:43:89:21:ec:
         ad:90:52:91:6f:c8:61:0c:69:67:a2:ca:45:1e:2e:fb:3f:99:
         51:72:54:e3:e2:4f:88:76:d8:e1:e6:41:66:f1:57:c5:b2:89:
         7f:8c:1a:28:83:10:90:41:c6:5d:2e:18:09:c9:ab:ac:f7:3c:
         69:8f:d0:71:e5:95:df:24:9a:1b:f2:e4:1d:49:ff:c8:4b:ed:
         b5:ed:84:40:40:e0:4f:c7:7c:77:c0:13:8c:f9:f0:ab:12:c8:
         e1:bd:4e:36:05:ea:64:4d:e9:54:5b:da:d3:f6:86:3e:24:9b:
         67:7e:03:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:09 2025 by rpki-client