Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b89edfd6-efc9-3fbb-8ff4-bb384d97af2b.roa
File:                     b89edfd6-efc9-3fbb-8ff4-bb384d97af2b.roa (raw, json)
Hash identifier:          UPiin9N1fHQA1RHvKgx2CpzMl/NWsw9FBZb6Qux70Jw=
Subject key identifier:   46:3F:91:1E:A2:7C:36:53:89:77:9C:46:46:60:A6:40:E3:27:EF:A5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584812D54035A8CEB38F9FD00CE0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b89edfd6-efc9-3fbb-8ff4-bb384d97af2b.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     32212
IP address blocks:        71.9.108.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:40:35:a8:ce:b3:8f:9f:d0:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=1741d05e-0d20-4928-934e-bcdc3b002759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:9e:4c:de:b0:bf:be:b1:ff:2e:cc:3b:72:
                    89:98:57:e6:d4:cf:c6:b8:33:89:a9:21:a6:4c:ad:
                    12:0f:03:dd:59:7f:4a:61:b9:50:05:c1:d3:82:ab:
                    51:ba:ee:e5:c6:88:a5:b9:64:0d:94:a3:bf:5f:51:
                    2a:2c:1c:04:d6:b1:2e:df:a6:75:4b:d3:c0:51:eb:
                    b9:b3:03:20:55:7b:0a:c1:11:b1:83:c5:e6:86:f8:
                    b1:b6:5d:6f:da:53:84:84:a1:94:95:b5:24:4d:2b:
                    8d:d7:f7:38:fc:eb:30:2b:2a:70:9b:ee:24:ee:19:
                    c5:68:09:65:7d:c9:e3:72:ac:0c:50:78:bb:dc:35:
                    9c:90:27:16:3f:b1:42:2c:fd:d3:f8:3d:48:68:56:
                    3b:74:a9:3d:48:84:61:7c:5b:94:9e:4d:25:a6:5f:
                    f5:ce:7c:12:e2:52:11:2f:5c:55:f8:7c:7a:18:0a:
                    74:10:2c:85:7c:73:ed:10:58:3b:ec:e8:59:92:d7:
                    d9:e6:e2:4a:69:39:e3:04:e2:c0:74:29:01:eb:68:
                    b2:4d:da:63:8c:b4:51:82:f0:37:a9:46:c1:92:16:
                    66:0f:0e:7a:35:15:49:bc:d1:e4:6c:58:3a:d7:1b:
                    c8:a1:b5:2c:b2:93:9f:74:d2:6d:d3:92:0d:24:83:
                    3a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3F:91:1E:A2:7C:36:53:89:77:9C:46:46:60:A6:40:E3:27:EF:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b89edfd6-efc9-3fbb-8ff4-bb384d97af2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.9.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:91:23:dd:f8:94:91:de:5a:a4:57:d7:fd:e7:91:7f:d7:07:
         fd:9e:22:63:61:38:25:97:61:b0:64:81:22:04:6b:10:02:bf:
         b3:0f:6c:b6:c0:d8:46:fd:d0:2c:36:fe:70:ed:0f:30:52:92:
         c5:cd:f8:8c:ad:cc:48:6a:40:96:ba:75:d1:b8:45:3c:2c:f0:
         14:4e:23:b1:24:66:12:00:a8:21:51:af:87:84:5e:63:1c:91:
         b7:12:20:07:ec:58:33:f5:16:55:65:8a:96:83:b0:96:95:30:
         2c:be:3a:16:66:23:11:df:4a:1e:64:a1:fc:c0:15:b7:db:6d:
         3f:3c:c1:ec:2a:66:f0:cd:f7:32:d7:44:72:4c:f4:03:a9:13:
         ae:db:ab:07:f4:52:b0:9c:aa:cb:85:1f:de:39:6f:61:7b:04:
         e4:98:ea:b5:48:e2:87:8a:63:c3:7b:ea:ac:cc:20:80:2b:a9:
         27:51:ef:34:fc:77:c3:76:cc:e1:bd:2d:38:db:03:bf:1f:9f:
         b4:55:d3:7d:7a:10:8d:f0:72:4d:e9:3f:23:86:76:47:8b:b9:
         b6:87:df:d3:63:3e:fe:4b:d9:d3:dd:e9:76:ca:05:82:82:0b:
         19:78:c5:90:42:83:72:67:be:5b:96:f0:4a:d6:0f:da:2a:2d:
         ce:f5:ee:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:55:53 2025 by rpki-client