Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa
File:                     555e037a-a202-3c23-9d76-142b857e9d3c.roa (raw, json)
Hash identifier:          6bOraDLX2cHmRunvB9dxmDgu3mY+P/X51G/jln2pBxI=
Subject key identifier:   8F:34:4D:51:BF:E5:03:B0:AD:30:07:E2:7D:58:18:DF:D1:10:72:31
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E8F516C513E263EB3780477C
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        70.32.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:16:c5:13:e2:63:eb:37:80:47:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=18f96150-c261-4f5e-a864-7a1abc120da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:7e:1f:08:40:20:d7:07:68:84:ff:53:5f:
                    b1:f2:61:1e:0c:70:9c:01:ea:54:4c:14:95:64:9a:
                    28:63:e7:47:6a:2e:0c:14:17:e4:67:52:15:9e:e8:
                    ef:27:68:89:ff:61:98:64:cd:67:de:e2:5f:fe:a5:
                    9d:7c:b9:c1:67:86:e1:f0:51:15:4f:21:96:fc:28:
                    25:26:ec:ba:de:3e:1d:25:7b:0e:7d:df:b0:16:44:
                    a5:0b:d7:54:8c:a8:1d:92:be:b4:4f:b6:72:fb:1b:
                    4e:ca:6f:ae:04:a2:49:18:80:05:05:4c:f5:a9:14:
                    66:f9:06:f7:b9:c7:15:73:6f:a1:87:cf:0a:7d:12:
                    80:eb:d8:c7:79:9d:f5:3b:1d:43:02:8a:d8:d5:96:
                    58:87:aa:6d:13:8a:cc:67:da:12:35:78:43:05:dc:
                    d1:6d:63:f0:6b:8a:c7:bf:d7:49:ba:d0:91:54:05:
                    78:89:96:d7:21:c8:f9:9e:08:cb:8d:88:06:1f:39:
                    a8:fa:89:d6:3c:84:22:55:52:1a:86:97:41:c8:0d:
                    bf:cb:c6:db:21:3e:3e:86:54:29:72:a1:18:90:f9:
                    f9:c1:e0:1b:33:95:59:32:d4:50:fd:3a:16:6e:8c:
                    c6:f6:4b:44:8c:0f:bf:45:d3:3e:d0:dc:6e:73:9b:
                    62:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:34:4D:51:BF:E5:03:B0:AD:30:07:E2:7D:58:18:DF:D1:10:72:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/555e037a-a202-3c23-9d76-142b857e9d3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:83:b0:1d:d4:ab:11:f6:7c:bf:66:95:4d:64:3c:3e:8c:e7:
         e8:b6:1d:5d:46:71:cf:7f:18:8a:09:8d:36:3c:e9:70:07:52:
         06:1d:9c:30:11:f0:6e:d6:43:e6:14:16:58:2c:ec:1a:17:64:
         ac:cc:09:ff:2a:fe:88:c1:19:fe:04:c8:27:7d:4e:1a:92:75:
         0d:aa:73:45:9c:52:99:00:eb:9b:ef:7c:76:bd:c0:76:d9:5d:
         2d:41:14:cb:eb:8a:57:64:fe:7d:7d:d9:16:2e:8c:ab:bf:85:
         36:55:d1:c0:78:9e:e6:6b:90:8e:21:fc:4a:f0:00:4e:3b:5b:
         0e:60:a0:eb:e9:68:53:c6:80:dc:a7:91:4c:97:d0:11:5f:b1:
         9c:3d:48:bc:08:41:a5:4b:0c:c6:56:1d:f0:7d:70:5d:11:c6:
         5e:f2:a4:0e:50:f4:c8:fb:fe:84:e5:15:f8:e9:cb:24:a2:28:
         8e:8a:45:6f:ca:60:cb:f6:87:9c:3b:05:7c:8a:0e:f4:60:50:
         91:c9:9b:a9:80:f1:35:6e:9c:15:61:46:26:ad:13:41:35:b4:
         dd:b2:80:03:ce:84:19:48:af:68:2a:38:41:39:8d:5f:99:3a:
         f3:8c:97:80:4e:60:bf:ec:d2:b3:26:b7:d0:19:61:17:41:e3:
         d2:6f:84:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:09:05 2025 by rpki-client