Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/f3242823-2b2c-394d-b738-86d40bb02316.roa
File:                     f3242823-2b2c-394d-b738-86d40bb02316.roa (raw, json)
Hash identifier:          14p0O7U0GVqiwPkAvQVjZf3CH3GzdCU5IljhNNZM6tI=
Subject key identifier:   6C:4A:A7:9E:9C:33:1C:AF:0B:BD:F3:C5:2F:D9:B7:95:E0:0D:FC:1C
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F432858485E35AEE7B477A76FDF4F74C8
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/f3242823-2b2c-394d-b738-86d40bb02316.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     138699
IP address blocks:        71.18.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:ae:e7:b4:77:a7:6f:df:4f:74:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=8d831b75-203b-4ce4-9641-db8eee7d2c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f6:d2:bd:c1:0a:01:3a:08:5e:eb:74:2e:91:
                    d9:c0:fe:db:ed:85:4f:df:4b:bb:ae:91:b1:28:e3:
                    63:4f:c8:4e:1b:12:67:52:1b:ca:93:f4:cc:0e:e2:
                    77:d8:3b:3a:1d:34:43:4f:2e:82:5e:5e:05:f3:11:
                    e3:f5:25:e1:75:2f:5e:63:06:c4:d9:f8:fd:d9:eb:
                    f2:e4:bf:37:bc:2e:60:cc:fd:ce:42:57:a0:02:ee:
                    b9:49:9f:1b:1c:be:d5:e3:15:72:d5:99:a3:6a:66:
                    e9:43:cd:7a:17:17:75:0d:c1:16:9a:06:aa:20:d6:
                    9d:15:1b:f6:bf:b1:2d:0f:99:d1:e4:af:87:4b:f2:
                    e2:12:00:65:22:78:56:a1:f0:63:50:2e:87:57:54:
                    7f:d1:c6:fd:fa:d4:e8:83:52:e2:7e:a5:b2:83:ee:
                    46:ad:5f:de:46:88:d2:b6:a8:ab:e3:07:e8:b8:d9:
                    c7:dd:b4:1a:09:d4:ad:1c:69:82:86:c4:cb:34:8c:
                    11:bc:0e:39:57:d7:fe:b3:cf:70:eb:71:2c:c6:23:
                    17:41:31:08:06:96:3b:60:2b:82:22:91:1a:22:0f:
                    69:03:68:e1:38:07:87:aa:a5:f1:c0:1e:12:8d:13:
                    96:71:87:77:b0:c0:d3:09:e5:99:33:9a:be:fd:f9:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4A:A7:9E:9C:33:1C:AF:0B:BD:F3:C5:2F:D9:B7:95:E0:0D:FC:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/f3242823-2b2c-394d-b738-86d40bb02316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.18.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:42:43:89:bf:6a:4f:6a:c9:af:86:f1:36:c4:42:70:92:15:
         93:c1:2a:0f:45:58:48:1a:86:64:49:0e:6b:80:0a:0f:75:23:
         f0:3d:35:18:9e:60:a0:9f:d6:97:f5:c2:1b:41:9b:76:fe:d5:
         89:18:cc:4c:c9:a0:17:b4:62:b0:09:19:53:74:15:3f:5c:cb:
         e1:c0:a5:7f:54:ee:89:af:79:68:9e:b7:67:a9:f1:85:96:05:
         ad:b0:0c:a6:48:ec:f3:07:a2:87:8e:11:a7:8b:a4:c6:b3:31:
         5f:0a:41:a3:80:59:f0:17:3e:fa:d1:e7:6f:fe:1b:7d:ab:46:
         89:50:bd:ab:74:c3:8e:0e:75:ac:3e:89:94:4a:30:dc:7f:5f:
         b0:9a:18:30:d9:1e:32:f8:10:bc:34:ec:be:33:8f:30:d1:5c:
         ca:d0:ee:97:26:0d:3f:32:12:9d:bf:a3:da:ae:8d:f7:f6:7c:
         50:58:5d:eb:fa:b4:c4:5e:88:c3:2c:72:1c:29:2a:9c:1f:98:
         58:d8:15:fa:47:f9:76:84:0d:37:86:e8:b9:3c:e3:83:49:a7:
         29:e1:32:f6:87:ee:41:69:96:82:c2:cd:bf:29:78:aa:75:eb:
         ac:ac:97:ba:dc:d1:c7:c6:57:01:ab:60:6b:4e:95:bb:ef:44:
         8e:7b:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:16:57 2025 by rpki-client