Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/1ef1cfa5-f797-3fa1-a58c-e1647b4c340c.roa
File:                     1ef1cfa5-f797-3fa1-a58c-e1647b4c340c.roa (raw, json)
Hash identifier:          d2M0sktMQCKkvvtV+BPv8O3YDhWBv7KPY70NSAEUIgM=
Subject key identifier:   3A:E4:BF:91:65:8B:22:DC:77:E6:C1:69:B4:02:1E:83:29:0B:C9:2E
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F43285847FB1A31B969D56CD79084E880
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/1ef1cfa5-f797-3fa1-a58c-e1647b4c340c.roa
Signing time:             Sun 24 Nov 2024 02:00:27 +0000
ROA not before:           Sun 24 Nov 2024 02:00:27 +0000
ROA not after:            Sat 22 Feb 2025 02:00:27 +0000
asID:                     5645
IP address blocks:        69.196.128.0/18 maxlen: 18
                          69.196.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fb:1a:31:b9:69:d5:6c:d7:90:84:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Nov 24 02:00:27 2024 GMT
            Not After : Feb 22 02:00:27 2025 GMT
        Subject: CN=e73110b3-94b0-45ef-aa34-f611f5a249aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b5:06:b9:aa:ab:f5:3e:46:6f:c5:a7:b8:1f:
                    2f:4d:b7:bb:5a:08:39:c3:5d:ac:bb:32:b5:42:e7:
                    ce:5f:40:39:7e:47:a1:b4:28:7b:48:8d:36:76:b5:
                    c1:5b:7a:cb:88:a0:e2:ea:b1:07:fd:b9:8e:42:f1:
                    da:2a:da:e8:25:69:dc:b9:d6:c3:d0:12:3d:89:2d:
                    69:6f:db:8b:b0:5b:b5:8e:58:5e:c3:1b:ef:fe:9f:
                    16:41:64:d7:68:e8:9d:a6:aa:b3:d4:fc:dc:1b:c2:
                    7f:3d:f9:a5:c5:21:b4:3f:62:49:af:5e:04:77:9f:
                    4e:a3:1c:30:0e:6b:f8:7b:b1:17:dd:bd:fa:19:9f:
                    57:de:35:f7:5e:88:77:92:02:09:5c:e5:b8:3b:0b:
                    f5:fb:79:3c:c2:70:86:52:7a:a8:3e:b9:c6:64:d4:
                    5f:cd:a3:1e:a7:ba:53:9b:7b:47:09:31:80:52:06:
                    6c:8b:20:d6:6b:06:38:af:ed:2b:51:70:66:85:0e:
                    8e:db:58:68:9c:aa:43:55:a7:21:c0:d9:55:4c:ab:
                    94:9e:32:0c:3d:71:08:85:5b:d3:ac:8f:a0:57:2b:
                    7c:ce:60:14:86:b8:c2:e1:7b:53:b7:c8:b3:a6:3c:
                    6c:09:2f:6a:db:53:16:7c:53:08:3e:11:af:44:37:
                    d6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E4:BF:91:65:8B:22:DC:77:E6:C1:69:B4:02:1E:83:29:0B:C9:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/1ef1cfa5-f797-3fa1-a58c-e1647b4c340c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.196.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:34:75:1a:98:5f:c8:bb:bf:58:e2:be:ef:81:58:f4:ed:8c:
         b6:f9:4a:bc:d8:af:12:b4:c0:7d:77:bb:f3:98:3d:1b:9b:40:
         50:a9:6a:e6:a7:e4:63:10:3a:e7:81:d5:ef:ea:ad:37:e4:aa:
         b0:2f:34:76:88:eb:55:01:f2:6a:63:d0:d8:dc:c0:32:a0:fe:
         04:8b:dd:c3:95:7c:7e:f8:a7:a9:a0:81:07:4f:b3:a5:ba:2a:
         af:fd:5a:18:d7:9c:12:79:27:c0:8b:a0:55:25:10:a2:6b:b0:
         b1:20:13:11:b3:b8:e5:91:5c:b8:db:9c:e3:87:3c:ed:a7:b8:
         92:ac:f8:ee:7f:70:7e:33:f4:5e:b9:aa:3e:46:f4:6d:5c:35:
         59:96:82:07:61:a8:04:18:06:c5:ef:10:f2:20:1e:25:49:2e:
         e5:7d:a6:8b:58:96:bd:be:2d:9b:9d:b0:82:03:2a:bc:d1:45:
         f4:1c:11:a8:34:b5:ee:d0:33:c8:b4:1f:4a:7c:ff:30:86:28:
         9d:5e:2a:1a:13:fe:25:81:b6:df:47:ad:e7:14:ba:98:eb:74:
         6b:48:33:e1:4e:aa:99:70:f2:88:ec:aa:f0:ff:3b:90:e3:9d:
         03:de:ee:45:d4:1b:af:67:54:cf:6b:ac:47:b3:c1:ed:3e:3f:
         70:10:af:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:53:18 2025 by rpki-client