Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/36891b6f-364a-36d2-91fd-846ddb4cdb41.roa
File:                     36891b6f-364a-36d2-91fd-846ddb4cdb41.roa (raw, json)
Hash identifier:          J8p7Kqy4c3btyDW18QzLyo+5oKJRUETM+GxOw9zUe4M=
Subject key identifier:   A4:9E:1B:6E:E2:9C:EE:E3:D4:9F:2C:80:D0:DD:37:EA:13:03:16:F5
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F43285848090FAF3F4FDD36C80AD462C0
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/36891b6f-364a-36d2-91fd-846ddb4cdb41.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     22742
IP address blocks:        72.10.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:af:3f:4f:dd:36:c8:0a:d4:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=5555955c-bc47-4893-b112-494a058521c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4c:49:f0:93:65:c9:c9:4f:28:61:1c:9e:63:
                    28:6b:83:f2:72:11:6a:cb:4e:4e:32:ab:a0:4f:38:
                    49:40:75:ff:10:1f:eb:18:73:81:3e:64:0a:f7:c1:
                    91:f2:68:5d:c4:72:b3:2c:d7:5d:5f:48:fb:d2:06:
                    6d:18:80:3a:c9:bf:f3:d4:85:54:2a:db:cb:a5:75:
                    63:2c:79:82:ae:ff:9f:97:1c:0f:42:fa:22:a9:18:
                    cd:08:89:84:f1:ea:b0:d5:f9:46:bc:97:9a:4d:e9:
                    bd:db:27:cb:81:35:69:82:82:82:f9:db:fb:19:67:
                    67:ea:ea:37:c9:b3:96:5f:48:eb:dd:f8:d8:78:23:
                    d2:e9:b7:06:58:3a:b7:a1:69:77:34:f7:95:dd:dc:
                    b5:c5:1e:06:01:d9:6e:a1:b9:1d:1e:a4:66:ed:08:
                    3e:26:05:b4:55:ac:f2:85:eb:e6:76:70:90:50:9f:
                    ab:8f:03:c9:23:31:30:fb:ee:fa:07:1e:34:a6:be:
                    ec:f6:ce:cc:a6:0b:82:8a:2b:bb:69:6e:68:4e:96:
                    0b:0a:d4:eb:50:f1:8b:d4:22:b2:4b:7b:89:70:fc:
                    c7:95:59:b1:71:0d:d6:1f:66:fc:ae:43:d1:cf:a3:
                    31:69:c4:f4:60:87:0b:35:05:63:82:a3:a9:06:96:
                    69:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9E:1B:6E:E2:9C:EE:E3:D4:9F:2C:80:D0:DD:37:EA:13:03:16:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/36891b6f-364a-36d2-91fd-846ddb4cdb41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:63:f1:c7:8c:20:16:13:ae:b8:3b:3b:71:77:c5:a4:0c:9b:
         c3:bb:92:12:82:09:1d:cd:b2:8d:a7:a6:2f:8e:a8:8c:49:b0:
         12:fa:73:f0:ac:58:2a:70:c8:b6:86:ca:f3:53:8c:6d:8e:05:
         cd:04:bf:67:6d:77:24:71:77:c7:8e:56:f4:c4:67:ef:bd:0c:
         d8:dd:be:71:d2:96:e6:1f:23:7c:63:0b:06:9a:f3:81:e9:80:
         ea:d7:19:31:d2:b8:96:57:ee:09:9e:af:1b:c9:4e:dd:c5:32:
         8a:cd:1e:6c:92:dc:e4:b3:aa:51:02:ac:0c:3a:c4:5a:a2:5b:
         a1:6a:08:8e:3a:3e:21:8c:51:cd:31:3d:db:db:df:13:ea:2d:
         68:2c:af:d4:26:e8:a2:51:32:45:79:f3:6d:62:ab:ea:8c:56:
         17:a1:c4:c2:05:8a:12:ed:a0:49:41:5d:aa:8a:2b:1d:83:56:
         48:ad:dc:28:08:3d:66:3b:db:5f:b4:e0:0c:19:45:ef:6c:60:
         c4:eb:0f:1a:6f:b6:58:1f:e0:69:9f:74:93:60:3d:48:43:52:
         d2:0a:6b:4a:b9:d6:9b:03:4f:c4:6b:50:67:d9:b3:91:9f:69:
         c1:4f:6e:7f:f5:a7:43:69:5c:47:9e:ed:6e:24:bb:6a:bb:4f:
         35:d6:71:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:27 2025 by rpki-client