Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ac5265f0-7bff-30d8-9cf7-d04ec8941bc5.roa
File:                     ac5265f0-7bff-30d8-9cf7-d04ec8941bc5.roa (raw, json)
Hash identifier:          KDWGj5W2igzfDop/3TXmSmB5zB3cTYtQX43baKLogX8=
Subject key identifier:   01:33:FD:E3:2D:86:00:76:E1:7B:52:AD:6A:C6:69:D9:A6:7F:9D:17
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584839EAB510B694E07123003A00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ac5265f0-7bff-30d8-9cf7-d04ec8941bc5.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     30058
IP address blocks:        50.7.96.0/24 maxlen: 24
                          50.7.99.0/24 maxlen: 24
                          50.7.104.0/23 maxlen: 23
                          192.240.108.0/24 maxlen: 24
                          192.240.110.0/24 maxlen: 24
                          198.255.6.0/24 maxlen: 24
                          198.255.7.0/24 maxlen: 24
                          198.255.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:b5:10:b6:94:e0:71:23:00:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=bb78426f-c94c-4c45-b79a-f9493c7b4fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ed:00:e1:1f:24:41:b2:14:26:70:c1:8e:53:
                    a6:fc:99:22:c7:40:76:71:08:69:37:42:b0:36:6c:
                    10:7a:04:1d:c2:aa:a7:32:6e:45:fa:7b:91:30:1c:
                    da:a9:86:2e:24:47:05:d9:72:d5:ac:ca:8d:ec:1e:
                    13:93:76:79:53:4e:3d:03:67:81:51:8f:4e:ea:59:
                    b6:cc:e7:21:3f:71:cc:f3:60:ad:39:c4:c9:d6:e1:
                    36:9c:9f:1c:7b:75:5a:c4:07:10:7c:e7:f4:e3:4b:
                    75:31:8c:d8:e5:78:de:cf:8d:32:eb:0e:d8:50:a5:
                    0c:37:ad:30:7b:00:bf:0e:f4:43:32:cb:71:4f:27:
                    12:dc:43:7c:e0:5e:82:ca:5e:95:a5:c7:97:cd:4d:
                    10:28:ef:b9:55:b8:25:5c:fc:ca:6f:5c:04:1b:c0:
                    d0:f6:15:65:c1:28:81:bc:60:12:3d:65:99:63:a3:
                    bf:60:80:e0:0e:6f:07:98:0e:bc:c0:63:63:4d:cf:
                    46:77:7a:24:b0:6b:b9:c7:9e:4f:ff:d6:b7:26:e2:
                    66:af:20:ab:16:2c:55:ef:17:a5:05:70:24:54:e3:
                    df:a3:df:ab:1d:56:92:8e:fd:3f:7a:3e:f5:4c:dd:
                    37:cd:d0:11:0d:fb:08:7b:73:b4:5a:d5:dd:69:e7:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:33:FD:E3:2D:86:00:76:E1:7B:52:AD:6A:C6:69:D9:A6:7F:9D:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ac5265f0-7bff-30d8-9cf7-d04ec8941bc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.96.0/24
                  50.7.99.0/24
                  50.7.104.0/23
                  192.240.108.0/24
                  192.240.110.0/24
                  198.255.6.0/23
                  198.255.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d9:61:41:a8:c9:71:e5:fa:41:a2:c6:95:c6:33:60:ac:e1:
         18:15:13:91:0d:aa:19:bf:aa:fa:7b:1d:2a:72:ba:5b:0f:27:
         ad:94:7d:9e:b1:dd:8a:c8:69:a8:de:6c:c4:b7:f3:fb:de:26:
         75:54:9f:66:28:96:e1:de:4d:be:b8:8e:fe:ab:1a:b4:4f:55:
         5d:21:39:da:6e:48:b9:8d:f7:92:a2:ad:14:a1:32:8e:92:2a:
         86:d8:b0:b3:fa:f7:5c:6c:90:28:11:35:37:dd:4b:00:c4:db:
         13:2c:44:03:b8:14:06:42:b4:f7:26:8e:5e:ad:88:80:48:d9:
         77:d5:b5:5f:c6:ae:f7:01:62:0d:eb:4f:df:cd:0d:a9:01:4c:
         2a:7a:bb:f1:39:f5:83:eb:a9:c5:31:5a:de:5f:0f:cd:da:c0:
         f9:65:a4:28:eb:e8:92:e4:01:fd:0a:46:9e:35:da:1e:b4:a2:
         c4:a8:ed:d8:03:66:d5:00:70:7a:e7:b1:2b:40:80:cc:db:4b:
         c1:55:96:38:f3:97:b0:6b:53:28:55:3a:c6:68:9e:b1:c0:a7:
         87:0d:51:87:50:c0:1a:7b:4b:e3:14:bc:0b:20:12:31:80:81:
         b6:78:b4:ef:c7:24:c0:40:60:d3:61:66:de:94:37:53:2a:77:
         5a:2a:5e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:12:13 2025 by rpki-client