Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa
File:                     fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa (raw, json)
Hash identifier:          0B/unraLeEn2E8PUWzBkLYXLbOHz2GFzS1Hr141Qjoo=
Subject key identifier:   7B:B6:21:E7:7A:C8:D2:61:E8:52:29:DE:E0:B1:68:75:46:49:F0:EE
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F43285848090FBC631641B7B6BE3D9600
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     54032
IP address blocks:        72.233.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:bc:63:16:41:b7:b6:be:3d:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=c08aba52-c3aa-4029-adf8-e123e790414f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:d1:33:9a:83:45:07:dc:f3:bc:5c:8f:68:
                    9d:3a:e0:ea:7d:14:5b:64:69:6c:d4:75:a6:18:09:
                    15:d0:04:bd:5b:b0:4a:e2:9d:e7:82:18:29:8f:31:
                    a0:53:bf:20:89:cd:9c:42:82:a6:ee:48:4d:50:46:
                    9b:3e:b7:ee:6d:01:bd:f7:96:81:32:40:c9:c8:db:
                    c5:28:d4:1c:2d:7f:d8:4e:de:b0:bb:76:d3:8c:00:
                    12:bb:fd:4d:e3:1f:43:1c:44:42:f6:fc:4f:06:7f:
                    36:ab:29:38:97:f8:ea:0b:33:66:0d:3b:82:c1:c6:
                    72:82:73:e8:63:65:d5:e5:74:69:6f:ee:30:8e:88:
                    1b:0c:da:b3:14:33:a1:6b:5e:b9:e4:fd:6e:a8:8f:
                    68:7f:d7:9e:1c:c8:0b:d9:07:d9:4c:c5:f7:32:81:
                    ed:d7:8f:12:b8:bb:0b:af:b5:ae:18:6a:06:d7:41:
                    0d:1a:62:a7:6d:91:3f:9a:77:de:59:fd:a2:73:1b:
                    f7:d5:5a:8d:05:cb:51:11:6c:32:df:04:bc:49:7f:
                    86:e8:35:d1:7f:0e:22:76:4a:1b:36:c0:44:3a:68:
                    d9:48:f1:9b:c5:09:e7:49:c0:7a:a0:11:73:22:48:
                    90:01:63:69:a9:fc:8f:ab:41:2a:9b:28:78:49:11:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B6:21:E7:7A:C8:D2:61:E8:52:29:DE:E0:B1:68:75:46:49:F0:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.233.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:2c:5b:89:b0:81:61:2c:2b:c8:03:eb:39:83:76:31:18:52:
         2d:19:20:bf:9d:10:33:a4:a2:62:e9:c2:99:90:14:f3:05:cf:
         b1:af:1a:be:0d:f7:de:5d:62:9c:2d:13:46:a9:a2:3d:68:1c:
         4b:01:40:da:cf:e7:52:f8:41:ec:96:99:e9:86:7a:63:9a:24:
         e9:9a:3e:26:e8:f2:53:bc:c4:14:9f:6b:db:87:0a:40:e8:d9:
         31:01:20:88:da:d3:84:3b:44:59:ca:90:7c:94:5a:13:09:4c:
         69:bc:56:89:1b:cd:b6:94:bb:ab:de:93:dc:27:de:cc:cf:10:
         46:ab:f7:74:c3:d8:17:5f:58:8d:22:0e:6a:c9:a8:cf:0a:db:
         30:a0:be:32:e5:55:90:f7:9f:b5:58:b9:43:7b:e4:1b:11:06:
         b5:87:5e:c8:4d:c0:f8:79:a0:a1:a4:61:6f:d1:26:81:6a:c6:
         4c:5c:ac:3d:69:f5:32:48:5e:ef:27:61:8d:3a:e0:46:64:5e:
         51:8a:9b:f8:37:1b:ea:e6:7a:57:3e:12:86:42:5a:19:58:9e:
         19:32:d3:17:49:27:ab:dc:62:e8:cf:ce:c1:02:de:2b:89:a0:
         ec:f3:d9:03:49:39:22:72:5f:35:c7:95:6b:4d:08:49:a4:60:
         cc:b5:1e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:12:00 2025 by rpki-client