Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d6a926d-d0f9-370b-bd20-175046b4ccd0.roa
File:                     1d6a926d-d0f9-370b-bd20-175046b4ccd0.roa (raw, json)
Hash identifier:          yFs33sxEc1p4aLxpir3VN3RrCFszse3cKzAPJxlL5XY=
Subject key identifier:   03:F8:BF:D8:3B:07:AA:43:B3:A6:7E:AA:ED:13:66:CB:B7:9E:49:7B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858480EA51E713F8B7F9F8B4B6F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d6a926d-d0f9-370b-bd20-175046b4ccd0.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     36183
IP address blocks:        172.225.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:1e:71:3f:8b:7f:9f:8b:4b:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=05fb3bfb-dcbe-4584-90c2-5b5a944de3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5f:35:29:fb:ad:55:59:df:fd:8e:4e:62:57:
                    49:5b:94:c9:6c:35:d8:c8:3a:d6:7e:d2:ea:57:71:
                    b9:66:db:dd:0e:04:d2:45:c8:9f:53:67:eb:23:54:
                    ef:82:3d:4c:4e:5a:20:ec:e5:90:3f:83:f5:64:76:
                    58:bf:2c:43:b7:0d:83:43:9f:2e:ae:6a:87:5c:ec:
                    3e:c4:2d:a1:06:3e:c6:05:b4:f8:4a:03:21:06:ef:
                    08:9a:f8:01:8b:29:a4:75:d6:92:19:9b:ec:38:56:
                    1d:a5:8c:62:6c:2e:42:0e:08:3a:9b:3e:97:00:f0:
                    65:8e:f9:b5:53:86:c8:9f:8d:b6:6e:f5:9b:44:ab:
                    92:e2:89:93:c3:3b:8a:ca:c3:f9:fd:d7:e4:95:20:
                    7d:1b:6e:a1:4e:de:aa:66:c1:33:ad:48:b4:21:dd:
                    98:69:01:d1:0b:db:d3:42:50:33:3b:cb:3b:97:4b:
                    f9:0f:a1:d1:25:24:b2:21:5f:e1:d2:92:01:b5:56:
                    a3:57:b8:94:c0:e8:5c:e8:0f:4d:55:14:50:94:8c:
                    79:af:b2:9f:a2:4a:20:52:b2:09:70:c2:fe:31:dc:
                    90:1f:64:63:a1:b0:7a:d4:2a:84:56:90:cc:33:41:
                    36:42:1c:4a:7e:65:4d:b8:9d:41:a2:a9:29:48:e5:
                    f1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F8:BF:D8:3B:07:AA:43:B3:A6:7E:AA:ED:13:66:CB:B7:9E:49:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d6a926d-d0f9-370b-bd20-175046b4ccd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a4:bf:a7:9d:10:5c:d4:c5:30:25:df:9f:d2:b7:00:6b:78:
         7d:1c:4d:09:14:52:43:1a:21:bd:35:3c:73:23:bb:bb:df:65:
         cc:ba:c9:d3:b0:c2:2e:06:33:35:47:5b:32:63:b8:05:91:98:
         83:d9:ee:34:60:40:a5:30:22:af:d8:d5:4e:6f:df:31:f4:5b:
         55:94:54:2d:f4:12:f4:19:d5:22:9d:6e:65:85:bb:9b:a0:56:
         11:96:8a:55:c6:6e:c5:24:75:40:98:0c:df:28:dc:30:49:ef:
         90:c7:30:c7:51:0e:f9:1f:b5:b9:76:d2:8d:b4:50:e8:68:e9:
         5d:7c:e6:d5:fd:8e:78:28:59:c2:3e:ac:c0:c5:01:7d:82:20:
         aa:97:09:aa:de:81:6f:87:fc:48:dd:fc:f6:12:9a:76:c8:16:
         f3:f1:bf:2f:5d:1c:52:d0:26:2a:90:89:42:62:81:c6:61:ed:
         59:4b:00:a9:5f:79:c3:b6:17:86:3a:10:56:8b:fc:9b:77:0c:
         ae:67:85:41:55:77:9d:c8:2d:b4:b6:b8:bd:54:2a:dd:46:af:
         c2:c8:28:0b:5d:05:0e:fd:a0:1e:30:1c:3c:13:bd:3f:9b:b4:
         68:82:a1:ac:25:e5:00:e5:da:21:ff:ba:77:d7:e4:ce:e7:47:
         2a:f4:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:58:07 2025 by rpki-client