Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/e96e1717-553d-3837-8418-c1aad542d35b.roa
File:                     e96e1717-553d-3837-8418-c1aad542d35b.roa (raw, json)
Hash identifier:          R2fT/p0fOoyM42Z+mAgPzkJ6s9w/SigWA1qJNX2MfUU=
Subject key identifier:   AD:C6:6D:81:CD:76:50:9D:0F:0C:71:9C:BD:7B:D1:A0:96:FD:2D:E9
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F4328584855D59DEA549496662CC25900
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/e96e1717-553d-3837-8418-c1aad542d35b.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     6939
IP address blocks:        64.112.76.0/22 maxlen: 24
                          208.64.216.0/22 maxlen: 24
                          209.142.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:9d:ea:54:94:96:66:2c:c2:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=0207a834-2ffb-4d0e-aaaa-85b524e23643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c0:bf:f9:92:9e:1c:0f:1a:8c:f0:39:3d:47:
                    f6:d5:a2:7d:78:23:f4:75:88:ba:4f:e1:f3:75:64:
                    9c:85:ce:64:a8:72:9c:5a:d6:b7:6e:f1:18:0e:ef:
                    d2:3e:73:20:18:bf:b0:71:fb:c3:fc:eb:5f:a8:2c:
                    df:28:4f:1c:f3:f2:1f:19:9c:d6:a7:fe:16:6b:11:
                    87:04:04:83:e9:55:e3:4d:a5:64:b0:c3:bb:7a:37:
                    41:97:90:c8:e7:7e:d7:19:73:35:80:4e:4e:cd:8a:
                    1c:a9:4d:f3:de:12:77:f5:a6:f0:cf:47:f5:77:cc:
                    2d:c8:52:92:7c:80:f6:58:22:02:dd:70:c8:72:3f:
                    e9:2d:eb:41:33:01:47:74:07:50:7f:c1:c0:93:88:
                    9b:e4:87:35:8c:84:24:1e:a4:ca:fa:79:d5:17:de:
                    23:f4:ac:5e:3e:21:3a:49:6b:0a:33:33:0e:8d:8e:
                    08:73:bb:bc:ee:e9:78:bd:1b:08:77:0f:aa:93:80:
                    dd:f3:bd:5a:6d:c1:bc:b6:bd:75:d2:2c:68:71:14:
                    13:b2:a7:3d:f8:6f:fe:ba:b7:e5:a7:47:f0:15:bc:
                    61:de:ff:69:f6:ac:9a:dc:cd:04:95:cb:98:82:e7:
                    41:86:45:2c:6b:94:ad:03:2d:46:65:88:98:cb:93:
                    c2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C6:6D:81:CD:76:50:9D:0F:0C:71:9C:BD:7B:D1:A0:96:FD:2D:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/e96e1717-553d-3837-8418-c1aad542d35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.76.0/22
                  208.64.216.0/22
                  209.142.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:5e:a2:13:65:a5:bb:c6:2a:19:e8:19:9d:fa:68:a0:43:c1:
         c9:2d:d3:33:be:f4:05:f0:68:09:81:af:7c:04:7c:26:73:5e:
         d7:d4:35:af:75:df:35:3a:de:e5:53:d2:f3:5b:0a:1b:36:fb:
         bb:39:44:8b:5c:30:fb:2e:a4:15:19:42:29:8f:eb:e9:fa:fb:
         ae:a6:54:43:64:6b:07:1b:fb:db:12:12:5d:11:4d:85:e1:20:
         4b:40:3e:0e:49:6f:2d:18:e2:b1:93:60:fd:85:70:ca:52:a5:
         b9:7b:08:ba:0c:e3:1d:d4:b2:da:46:76:2e:6a:b2:f1:98:10:
         ca:51:c8:6e:4c:b8:06:25:8a:f2:bf:16:f5:8a:dd:2a:a1:8e:
         c8:d5:e2:93:40:8a:95:04:d5:b2:4d:83:a3:b4:34:75:18:2b:
         f8:53:89:7a:90:5f:39:75:e0:9b:f7:b2:13:9c:ef:1e:dd:76:
         c0:44:e7:8d:7d:2b:1f:37:1d:45:d7:a5:9f:44:4e:15:6b:c9:
         78:1d:3f:b9:d7:bb:b5:f0:df:f1:4d:2b:ce:ea:d0:a9:de:e0:
         c3:17:9c:19:e5:15:5c:39:49:94:9a:24:b1:bf:4c:9f:dd:34:
         bf:14:50:8b:f8:45:e8:be:0a:99:44:4e:fe:8f:0f:2b:92:5a:
         6e:b6:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:43:54 2025 by rpki-client