Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa
File:                     8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa (raw, json)
Hash identifier:          9tLMxKM5mnLv1vGSCrTiZNjuQnFx23PGWfThztFVSgQ=
Subject key identifier:   AD:4D:CF:89:E6:BD:31:63:46:D2:63:4D:71:10:D4:10:9A:CF:B5:26
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858487755D8DDE886A6D7109B8E80
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        74.121.53.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:d8:dd:e8:86:a6:d7:10:9b:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=6f5b03be-13fd-458c-b6d2-862f4c22aeb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:42:c8:27:4d:d0:fb:1b:71:01:7b:3b:64:
                    89:ea:82:13:f2:ec:b8:76:b8:1b:63:23:d4:3c:4b:
                    8d:c0:07:81:9a:77:b3:09:44:b0:91:e5:8c:33:bd:
                    c0:d3:17:dd:58:79:08:f8:0a:a1:a3:46:e3:cf:2d:
                    d8:d4:8d:12:dd:ed:89:bf:15:ca:ef:19:14:46:dc:
                    24:56:54:a8:00:12:54:b9:75:73:39:67:79:43:39:
                    47:ee:91:08:7a:20:12:54:81:8f:09:4c:59:67:29:
                    cd:77:3a:c3:d2:ce:03:78:a2:7a:f8:cb:02:9a:89:
                    fc:72:ca:e7:bf:e1:7f:a6:ea:84:4a:27:39:8d:06:
                    25:b3:5b:a8:5e:e5:56:d6:60:e7:a4:af:5f:c6:61:
                    a8:84:fb:4b:27:5b:40:18:72:8b:92:a6:ba:e2:e1:
                    48:8e:a2:9c:89:31:e6:ce:70:c1:9c:22:4e:67:39:
                    08:d0:da:67:c9:8e:e4:dd:64:ee:dc:57:a7:31:1a:
                    ae:67:1b:d0:42:89:59:9f:37:c6:ff:c3:ef:ef:6c:
                    a9:f3:f6:bb:ab:e8:3e:ea:36:59:e0:43:1a:6d:29:
                    43:a8:1b:d3:88:64:a0:ec:62:89:8e:63:82:06:89:
                    70:a8:78:1b:e0:0a:e9:eb:c0:b8:27:de:e4:da:29:
                    96:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4D:CF:89:E6:BD:31:63:46:D2:63:4D:71:10:D4:10:9A:CF:B5:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:20:f5:d6:1d:17:92:0b:21:ac:1a:ae:6d:62:e2:8b:1a:81:
         7c:3e:d4:13:8c:44:7a:7e:f7:d5:e4:e0:4f:98:ec:46:e5:9f:
         95:e1:0f:48:7a:ee:5d:5f:00:ae:95:6a:54:b2:a0:db:4f:8a:
         0a:e2:68:99:fa:8e:6a:08:d5:0f:de:ec:90:46:eb:6a:b6:46:
         2f:85:ce:16:b9:ee:68:61:12:3d:ca:c9:c6:b2:ad:58:00:25:
         bf:2a:f2:3e:45:fa:c3:2a:f2:29:47:1a:ff:91:bb:07:fc:b0:
         91:e3:fb:03:f3:17:51:51:0d:00:07:66:1d:76:ba:a1:94:9d:
         a4:ee:1f:20:4e:5c:e5:12:18:5f:06:80:23:fd:22:8e:45:1b:
         22:5f:63:c4:9f:51:0a:fe:45:0c:5b:c3:c7:f8:80:09:2f:a2:
         01:ba:17:ac:cd:ef:ec:aa:3e:e2:9f:b7:79:a7:da:fe:aa:6c:
         cb:81:5f:43:0e:80:3e:c3:fd:43:a7:8b:50:2e:db:25:89:e0:
         f8:8b:b2:e0:b8:1b:5b:ff:3f:d5:c0:a7:e2:fe:e2:b4:7a:9f:
         55:9a:fe:a2:8a:54:3d:85:eb:a5:5d:24:75:82:6f:e1:18:84:
         9c:b9:d2:db:eb:83:6b:4e:1a:ea:30:b9:26:0a:2d:59:9b:09:
         a5:9f:37:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:10 2025 by rpki-client