Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/db3c1469-53ef-353a-b4c0-6b78c0d24d6c.roa
File:                     db3c1469-53ef-353a-b4c0-6b78c0d24d6c.roa (raw, json)
Hash identifier:          W+XR8Co7AGuIQI9NN39WlFvCqQqAjntb4eXiR8vN5QE=
Subject key identifier:   80:40:74:DE:1C:D2:1A:30:16:22:7E:07:EF:B7:FA:6C:6E:A6:87:A1
Certificate issuer:       /CN=750824e4-669c-4a78-911c-087bf64a7f4a
Certificate serial:       010D0C9F432858485E35AA6CA409FFA38DE4BF80
Authority key identifier: 38:54:59:88:87:D9:D6:6D:A5:A5:17:4B:AB:0F:11:46:E5:1C:4D:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/db3c1469-53ef-353a-b4c0-6b78c0d24d6c.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     62809
IP address blocks:        23.148.176.0/24 maxlen: 24
                          23.148.177.0/24 maxlen: 24
                          104.250.224.0/22 maxlen: 24
                          136.175.232.0/22 maxlen: 24
                          139.64.128.0/22 maxlen: 24
                          206.28.180.0/22 maxlen: 24
                          2605:8c40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:aa:6c:a4:09:ff:a3:8d:e4:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750824e4-669c-4a78-911c-087bf64a7f4a
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=cad9863e-631a-4c39-8c3a-fa5b6c162d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:e2:88:19:de:9c:66:b6:bd:0f:e3:4e:c3:
                    bf:6b:fb:24:30:a3:6a:3c:aa:4d:89:40:5d:cb:5e:
                    1b:c8:0c:f8:80:66:16:61:57:46:75:4d:24:6c:97:
                    68:2f:d4:92:93:ad:f9:6f:4b:17:14:a7:e6:49:f0:
                    da:a2:7b:c1:49:f4:68:7d:63:02:8e:f1:c0:21:5c:
                    11:e0:ed:63:41:6e:87:4e:1f:90:b1:dd:b2:86:c5:
                    44:8a:35:47:89:6d:b5:6c:56:91:81:56:ed:cf:af:
                    45:58:90:5b:3d:73:ba:1c:d5:ad:37:ad:9c:81:5f:
                    d4:7c:ba:05:0e:d5:39:7b:4e:8a:85:71:be:aa:a7:
                    38:cb:b1:d2:20:ff:1c:60:f4:8c:0d:1c:b0:c7:13:
                    42:f3:55:94:42:9a:37:84:78:b8:58:54:67:d0:2b:
                    97:82:88:cf:37:a3:5e:10:76:79:fe:97:c8:61:af:
                    16:09:69:9d:6f:f2:84:1d:e9:96:86:3b:c7:cc:86:
                    22:96:ea:a8:90:c6:fd:53:b1:6f:14:01:82:7a:8a:
                    21:8d:ba:a5:48:1b:41:c4:d2:79:c5:05:47:c7:dd:
                    1f:85:56:73:3c:4c:90:b0:f2:5d:4a:95:45:f0:5b:
                    d0:7e:7a:29:1d:e9:dd:fa:92:dd:71:7e:03:e3:ad:
                    84:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:40:74:DE:1C:D2:1A:30:16:22:7E:07:EF:B7:FA:6C:6E:A6:87:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/db3c1469-53ef-353a-b4c0-6b78c0d24d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/750824e4-669c-4a78-911c-087bf64a7f4a.crl

            X509v3 Authority Key Identifier:
                keyid:38:54:59:88:87:D9:D6:6D:A5:A5:17:4B:AB:0F:11:46:E5:1C:4D:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.176.0/23
                  104.250.224.0/22
                  136.175.232.0/22
                  139.64.128.0/22
                  206.28.180.0/22
                IPv6:
                  2605:8c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:ed:68:7f:7d:76:e0:8e:36:d4:99:2f:90:71:04:d3:82:
         3a:bd:d8:fb:69:02:8c:af:36:b2:bf:49:75:ed:81:3e:8a:61:
         e8:16:59:7f:0e:a6:c7:52:74:e9:1d:00:21:db:5c:51:f6:be:
         f0:5d:b5:3e:4d:bd:d4:8e:11:dc:40:54:3e:7f:b2:e8:cf:1d:
         a8:15:8c:48:46:08:bc:13:db:6b:43:67:42:81:5d:c4:dc:10:
         46:90:c8:5a:4e:de:b0:30:6e:09:02:84:a3:5e:b6:d9:1a:a7:
         cd:5c:65:ff:e1:c1:5b:09:4d:af:0f:3a:7c:b3:ac:1d:c3:69:
         4c:82:b7:ad:2e:66:0a:28:4d:d3:04:d6:7e:a8:51:7a:5b:8c:
         51:93:23:e2:02:c4:43:45:90:f1:5e:34:c1:4f:75:79:f9:a9:
         d5:de:14:eb:67:9e:60:62:80:52:12:4b:78:77:a6:35:24:32:
         71:96:9a:63:ff:aa:1a:62:4b:e6:ee:46:71:58:f4:ab:72:bd:
         f5:eb:17:64:a0:48:c7:99:3e:22:79:85:62:cc:df:4a:1f:47:
         97:c1:be:ea:79:7c:42:1d:86:69:b5:83:79:05:b5:1b:ea:8d:
         69:c8:cb:14:90:f1:19:29:ee:9d:cd:91:17:a6:8e:f1:86:38:
         0d:62:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:30:11 2025 by rpki-client