Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4dbaf2b2-8563-3d07-8696-1ab0390f55e7.roa
File:                     4dbaf2b2-8563-3d07-8696-1ab0390f55e7.roa (raw, json)
Hash identifier:          NMZbP3AHmwvdzKMc4Ib1Xq2HsL98TW9aP4bHayPXa4U=
Subject key identifier:   86:BC:AB:3F:CD:1D:AB:4E:A7:36:01:37:31:91:54:83:8F:32:2A:4A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037AA374BA83D1540340DF00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4dbaf2b2-8563-3d07-8696-1ab0390f55e7.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        71.92.16.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:a3:74:ba:83:d1:54:03:40:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=c8d8cc1a-0338-4cb2-9556-405fd75047eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:a7:e3:8b:81:67:a4:db:5f:71:5d:9f:c2:
                    1a:0d:93:b1:a4:72:2c:ef:1b:9f:82:27:38:e4:d4:
                    be:e5:23:4f:9e:0e:d9:03:4e:98:74:33:a7:41:aa:
                    40:9f:d9:0b:24:92:49:8d:1d:42:3e:60:29:c8:07:
                    9c:0b:61:bb:66:5e:10:34:81:ad:ff:93:9c:db:5d:
                    a7:9c:1c:6a:58:db:0b:ea:88:28:27:b5:1e:ab:3c:
                    b5:bb:a6:b2:aa:4b:91:2e:9a:04:a2:34:1e:8b:aa:
                    b1:be:1e:1a:b3:92:18:ae:d9:69:e5:1c:26:9f:20:
                    b6:b9:1f:83:d5:34:85:46:49:f2:c1:dd:7e:f6:66:
                    68:e4:34:49:58:97:3e:84:f0:a6:62:38:22:ea:05:
                    dc:62:49:03:dd:36:33:b2:37:ad:0c:79:c9:34:58:
                    e9:9a:15:53:b4:02:6f:c3:57:04:ad:6b:50:5b:6a:
                    a8:f4:ab:4f:e4:c1:7e:2c:76:6e:d2:63:66:73:ab:
                    02:27:59:93:df:46:f5:70:76:6f:c9:c1:5b:f8:fa:
                    20:ae:6d:cf:18:5a:00:24:9c:44:71:a8:5d:55:c4:
                    64:f1:05:da:89:2a:73:b1:95:4a:ef:f0:ec:33:e7:
                    8f:8a:4b:c2:c9:22:ad:ef:15:af:29:e5:6d:83:de:
                    a8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BC:AB:3F:CD:1D:AB:4E:A7:36:01:37:31:91:54:83:8F:32:2A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4dbaf2b2-8563-3d07-8696-1ab0390f55e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.92.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:de:de:f2:b8:54:43:b5:e9:5a:73:eb:5a:38:f9:ec:23:a6:
         ba:8c:f9:09:33:ee:03:0b:a5:ce:ac:6e:2a:e5:ef:3a:b6:6c:
         58:b4:42:1e:3b:be:a3:dd:2e:91:3f:ff:f3:1e:b3:45:04:2f:
         d1:d7:ee:09:8e:cd:bd:47:bd:1f:4f:25:b2:e5:db:4e:5d:21:
         f9:f3:1e:db:a8:f0:b9:f0:95:26:f1:3b:17:a7:9f:dd:2e:db:
         1f:c2:c7:84:da:a9:3b:02:a0:4b:98:a5:2e:04:35:06:a9:e7:
         21:b8:b4:a7:66:80:8b:09:d0:64:10:77:51:14:80:84:fd:21:
         1d:a6:4c:a3:58:31:e7:01:0f:3e:47:c8:f5:24:5a:e0:ec:a8:
         06:88:3e:18:1f:e6:85:28:48:3c:63:2e:96:a5:11:88:00:af:
         f1:b9:cf:2d:4b:a4:8f:01:9f:52:21:17:d6:ea:24:00:4b:76:
         f1:6a:3a:fb:84:c9:d2:19:2d:84:c8:27:29:87:cd:0a:37:dc:
         91:93:46:a1:dd:d1:f8:a3:eb:a9:12:1b:ce:bd:86:3e:54:5f:
         da:47:53:b7:22:fe:a5:ab:88:6b:c5:b0:3e:83:d1:ef:e1:cf:
         6c:e2:09:39:85:7b:3d:e9:6b:f9:31:a1:d3:58:b6:1f:74:7c:
         7f:65:b2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:37:16 2025 by rpki-client