Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/57713aa8-56f3-328a-a902-df23acbd523b.roa
File:                     57713aa8-56f3-328a-a902-df23acbd523b.roa (raw, json)
Hash identifier:          gSLzyExpYkt5wuAJxCkxb22U4vUgJJMoyfv6EsUXFcs=
Subject key identifier:   5B:BE:E6:01:48:41:0A:F2:02:DB:A2:9C:D9:C2:AE:6E:6A:74:EA:37
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D00BADCF72EDE761D79600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/57713aa8-56f3-328a-a902-df23acbd523b.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     36103
IP address blocks:        65.49.120.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:0b:ad:cf:72:ed:e7:61:d7:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=c0aad48e-83cd-40e0-bccc-247b4e15cf9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:84:e9:ed:77:9e:cf:1b:d7:89:31:bf:ca:81:
                    c9:4d:cc:ae:90:de:62:8f:bb:ea:2d:50:67:00:95:
                    e3:0f:58:b3:d5:41:55:c6:24:fc:ae:64:63:87:3b:
                    63:54:05:1b:cc:fe:49:16:3e:7f:25:61:10:92:d7:
                    98:73:c8:94:b0:2c:67:d5:1c:5a:db:e6:6a:80:b5:
                    fa:73:ee:67:44:7a:d9:50:8c:c0:c3:3c:af:79:f9:
                    d9:bd:5f:2c:4e:10:1c:ed:75:9b:4e:df:92:b6:08:
                    f9:a2:e1:c4:e2:b6:90:8f:2c:a5:94:31:3c:84:e7:
                    da:48:87:4a:4e:8d:7e:d5:ab:e1:14:39:43:01:46:
                    60:5a:0c:7c:9b:6d:45:60:a2:1c:4a:31:ea:07:57:
                    ad:ef:24:60:b2:5e:ae:c5:9d:68:30:0e:84:15:5e:
                    9a:5b:1c:18:7d:31:30:a2:b5:ee:bd:43:09:11:74:
                    39:68:ea:13:a2:cf:7c:90:9d:2b:6c:e5:f1:6f:dd:
                    20:a9:e8:c5:0d:74:2e:70:28:0b:18:38:29:dd:f0:
                    0c:23:62:3d:1b:8a:ec:7b:07:87:01:68:30:a8:bb:
                    3e:c2:c2:64:b0:fd:01:6d:fc:9d:30:32:69:f5:70:
                    0e:2a:98:00:51:85:e5:3d:12:36:cd:52:3e:8f:5f:
                    b6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BE:E6:01:48:41:0A:F2:02:DB:A2:9C:D9:C2:AE:6E:6A:74:EA:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/57713aa8-56f3-328a-a902-df23acbd523b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:1b:bd:ce:de:ab:1a:bf:da:78:44:d9:2e:38:fb:42:30:fd:
         7a:e6:63:4e:70:ba:80:04:7f:02:5b:5c:8c:62:3d:29:55:b0:
         0b:0a:74:f9:13:4b:b6:45:e3:ea:b3:25:73:f4:e6:67:3c:a3:
         4d:3c:43:0c:e8:a5:6f:08:1c:93:dc:e2:fb:0b:71:5d:36:29:
         f0:b0:83:76:ae:b2:72:09:0c:d0:2b:27:60:de:45:d8:5b:5a:
         f9:75:c3:56:60:94:10:fa:e7:ba:3c:8f:b9:dc:c3:32:e0:e4:
         ad:d9:4b:44:11:27:a4:e8:60:02:35:1a:63:fb:c8:f9:de:48:
         b2:ec:81:27:0d:ef:28:a2:19:ed:79:84:0f:4a:ef:c1:89:ff:
         a0:f1:4d:6e:20:f0:85:71:c0:93:8e:e6:47:81:aa:cc:49:61:
         cf:98:4a:24:74:e6:8e:98:b3:b8:b9:b7:cf:df:76:e4:76:d6:
         56:9f:51:e2:6d:bf:3c:90:50:c4:71:67:2d:43:da:45:5d:b1:
         c8:57:d1:b1:e2:96:a0:a2:b5:ec:1b:b5:d0:33:4d:f5:95:ef:
         1c:14:68:e4:dd:f2:07:db:bd:a5:bd:94:d1:82:12:47:81:fb:
         d3:3c:6e:c0:29:8e:e8:77:e6:0d:52:38:f4:44:ac:a9:3e:08:
         2f:15:55:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:35:52 2025 by rpki-client