Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/0e20e7da-2b52-3082-83cf-50c9e0078c97.roa
File:                     0e20e7da-2b52-3082-83cf-50c9e0078c97.roa (raw, json)
Hash identifier:          eu419qSvE3cj3klWNwUUHhgJ4Fl+WhepEQSR6SiRDxE=
Subject key identifier:   BE:26:9D:C3:72:0E:52:41:EB:CC:CA:E6:FB:56:AF:E4:19:3C:38:B5
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285848EF615C36A9113F39A95EAD20
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/0e20e7da-2b52-3082-83cf-50c9e0078c97.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     33311
IP address blocks:        65.51.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:5c:36:a9:11:3f:39:a9:5e:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=2c866d03-a1c5-4641-be0e-765e1902fd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:64:4f:66:e3:fe:c6:e1:15:70:fc:98:b1:
                    c9:bf:f9:79:98:b3:10:5a:c3:de:a4:29:67:6f:c6:
                    38:34:06:99:54:6d:5c:6a:f9:14:2c:11:79:3a:69:
                    59:18:ea:38:e4:ad:92:6a:71:75:4f:1e:2b:be:39:
                    4f:40:ac:11:4b:a8:32:95:7d:5c:49:aa:e7:de:40:
                    2a:19:21:01:d9:66:4d:44:e9:83:46:6d:ab:25:5b:
                    81:80:86:c2:ef:70:22:c8:f4:38:18:1b:7f:0c:42:
                    16:72:8e:74:93:fa:7c:6f:09:1f:c7:b0:c6:cd:ca:
                    d1:15:79:f5:6a:af:2d:60:d8:d8:52:41:1a:d5:85:
                    70:43:29:97:9c:c7:5a:20:da:ec:6c:ce:3a:18:1f:
                    7d:76:c8:47:e2:09:8d:9e:e1:98:80:81:85:e2:ea:
                    45:6b:54:14:fb:d2:c6:54:b3:68:d7:9a:ca:b2:ee:
                    e3:b1:c3:a8:76:9c:cd:fa:73:b9:46:a4:65:b0:5b:
                    e8:9b:d2:c3:0c:e9:af:79:b8:76:7a:17:b4:68:42:
                    57:38:85:1e:8d:5f:be:ec:5a:f2:0f:4e:e0:d8:ba:
                    84:8f:af:70:65:38:5a:69:56:79:b9:26:40:15:4f:
                    03:d9:50:2e:39:cf:06:0a:d7:06:97:bf:20:f3:74:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:26:9D:C3:72:0E:52:41:EB:CC:CA:E6:FB:56:AF:E4:19:3C:38:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/0e20e7da-2b52-3082-83cf-50c9e0078c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:1a:fb:cd:74:2e:df:7b:6d:45:06:83:78:a5:c6:ea:3a:1c:
         5d:a7:5a:32:65:54:03:64:36:bc:2c:ec:f9:c4:31:7b:5a:37:
         26:04:cd:fd:ff:2a:b2:92:12:85:6f:fc:f8:a4:22:35:e4:8d:
         64:13:bd:53:2a:03:98:0e:67:8e:a3:6a:4e:44:ef:d6:8f:d3:
         a0:e4:eb:50:34:a0:45:40:a7:75:04:d3:5f:83:7f:73:02:39:
         ed:27:bf:a4:6f:f3:02:42:98:dc:64:30:b6:72:4e:ef:25:68:
         ed:1d:60:29:74:88:82:60:0b:89:a0:9a:d9:a0:e4:84:96:5d:
         94:47:2e:4d:ce:f0:5e:02:54:01:b8:05:a5:66:68:c7:75:60:
         4a:3b:16:b9:ec:d3:ab:7b:78:88:01:ed:f3:da:2d:da:cb:ce:
         b4:8a:68:e9:94:ea:80:f0:e6:f1:2c:51:92:79:f8:6c:eb:68:
         b4:17:e2:d8:6e:38:da:3a:77:b3:19:d5:1e:40:cd:2f:fe:c3:
         e8:93:50:9c:be:da:0d:17:c9:bc:67:c8:79:46:28:e8:b4:1a:
         ea:0b:ac:ce:15:06:dc:c7:ef:23:5c:dc:5a:23:6b:a6:1b:7a:
         ba:8d:7f:7b:b8:04:58:8e:9e:eb:f2:f4:11:79:a4:0e:6c:a1:
         b8:ca:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:58 2025 by rpki-client