Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b3d1120a-b857-30de-bd4c-58937c25ac9b.roa
File:                     b3d1120a-b857-30de-bd4c-58937c25ac9b.roa (raw, json)
Hash identifier:          lTLEYo0iefZN7z/0SpnnPVV03O7KGkvhRXGIKghRHXU=
Subject key identifier:   8A:C4:C3:0E:74:3C:47:BE:C3:B8:A6:99:9D:0E:18:75:16:08:2B:62
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B44CFBA99BF3E8546ED40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b3d1120a-b857-30de-bd4c-58937c25ac9b.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        71.8.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:44:cf:ba:99:bf:3e:85:46:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=d9937c80-2d7b-42a1-abb9-b95d4828d70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:58:ad:4f:70:01:1e:f8:72:ac:fa:75:4f:
                    b7:f0:28:c5:b6:fe:2f:c1:1d:85:0a:1a:ef:28:6b:
                    17:9c:a0:17:a6:c6:cf:eb:05:2f:ac:a3:5b:4f:56:
                    a9:87:77:ee:11:ff:17:bf:dc:14:03:45:35:89:74:
                    18:cd:67:6d:18:27:f3:87:00:ed:05:1a:24:37:9c:
                    d7:66:b3:da:5e:98:f5:78:bb:ba:0a:19:57:d5:6b:
                    bd:14:69:d7:44:a3:c8:33:0e:6a:90:22:6e:11:7b:
                    5d:24:0f:3c:ec:8e:2e:26:fc:28:9a:6a:3a:68:43:
                    1e:85:a4:7a:0b:53:8a:a4:5a:c6:dc:96:24:8e:7c:
                    30:11:4b:74:c4:7c:55:c0:2f:ed:98:5a:b0:7c:35:
                    e6:58:28:65:cb:e7:6c:2b:66:a9:18:a1:31:5c:56:
                    b1:d9:07:37:30:c1:ec:67:b7:d5:0d:c8:01:8a:0d:
                    6f:25:1f:fb:98:8d:fb:42:4b:ca:fb:16:67:ff:2c:
                    a7:c1:ce:5a:08:24:58:4f:eb:37:df:dd:a1:2d:40:
                    cd:c9:5d:f9:10:ef:9c:f3:9e:1d:3b:d8:3d:63:33:
                    5b:9c:b4:17:8c:95:51:f3:f8:0e:29:39:ca:a5:b1:
                    52:8e:dc:2a:1a:bc:21:66:39:20:78:76:d0:db:35:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C4:C3:0E:74:3C:47:BE:C3:B8:A6:99:9D:0E:18:75:16:08:2B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b3d1120a-b857-30de-bd4c-58937c25ac9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.8.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:e7:df:a1:40:d4:56:2e:77:6b:2c:eb:09:7a:45:8b:92:81:
         db:45:32:e5:7f:f0:99:af:3c:02:d1:bb:96:a3:0b:c1:1e:96:
         cb:43:03:5f:c7:37:7b:7d:54:b7:65:cb:22:23:4f:83:c3:4c:
         c5:28:98:e4:03:37:20:f8:3c:ee:3a:73:1d:f9:81:b9:3a:17:
         3d:58:76:e5:4b:81:02:ff:d0:b1:fe:f2:8b:bb:5d:d6:93:ac:
         8a:21:f9:72:fc:e3:3c:22:14:37:c7:43:b8:9c:d0:8c:34:1c:
         7e:cb:27:78:1e:59:d8:a4:bd:53:ff:78:e7:c5:4e:9e:74:b0:
         0d:5e:32:65:f1:54:4f:06:f4:08:2a:f5:8b:51:9e:0a:8c:bd:
         c7:7a:ed:3a:20:4f:c9:18:17:49:8d:c4:0e:08:d8:da:85:0e:
         5f:9d:19:b3:e0:53:37:b4:b7:52:6f:82:1b:39:6e:a2:5a:3f:
         ca:18:c9:f3:67:44:c9:2a:c0:97:5b:a1:36:30:b7:6f:7f:d2:
         d9:d3:92:e3:b0:5f:64:2c:ab:83:1f:33:eb:b9:8a:23:72:25:
         7a:22:66:be:d1:86:04:c9:ce:b1:90:99:3f:b1:04:27:10:09:
         f5:ff:01:09:96:63:10:cb:ae:cd:23:ae:bb:81:88:f1:05:5f:
         f0:92:97:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:38:55 2025 by rpki-client