Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/9873fa7c-f2ed-3f7f-a640-9986aeaf95e2.roa
File:                     9873fa7c-f2ed-3f7f-a640-9986aeaf95e2.roa (raw, json)
Hash identifier:          vsCX48JHk888CW4VkJK9R+ey7MFrlOn48k3Yl3SNGNo=
Subject key identifier:   69:0C:39:2C:75:20:50:3F:35:DF:51:25:B2:E3:56:FF:DD:1D:28:54
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285848A9962A090182E9FB5ED53B00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/9873fa7c-f2ed-3f7f-a640-9986aeaf95e2.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     400836
IP address blocks:        65.51.173.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:2a:09:01:82:e9:fb:5e:d5:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=24c73598-a699-44b2-876d-e7a1f6ae2803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:a1:f6:58:8a:de:85:33:cb:ef:ee:4b:65:
                    f1:72:53:64:2c:e6:61:3a:1f:a4:1a:d5:82:a5:77:
                    0a:92:8a:14:3e:ec:e0:e3:eb:35:09:f2:26:b2:c6:
                    eb:85:25:44:cc:57:14:3a:c3:8c:3d:13:e7:37:aa:
                    d0:30:0c:8f:73:20:ef:a8:e7:d1:74:d0:1d:bb:8d:
                    e7:a2:46:e4:67:5e:64:20:81:f1:fb:b2:8c:5f:8f:
                    31:b6:30:b0:1d:69:4f:42:9a:94:12:66:65:09:43:
                    86:7f:90:40:16:c4:38:5d:92:5f:a1:91:fe:32:10:
                    eb:92:3b:30:88:78:f2:67:24:5a:a7:56:1a:00:18:
                    05:5e:12:bc:e9:cf:7f:f3:9f:32:ef:7b:16:b4:38:
                    ff:24:5a:e7:5c:84:00:4e:85:1a:72:50:28:47:cd:
                    6c:74:2c:7e:ba:7e:b5:ab:db:2f:60:c3:9b:38:18:
                    49:cb:1a:0f:21:67:b4:da:21:2a:5f:70:f4:ac:1c:
                    93:41:ba:4a:4e:c1:fb:f9:1e:8d:7e:b3:1e:b2:90:
                    09:a5:8d:c7:a4:0e:6b:a9:14:dc:ab:85:c2:76:d4:
                    a7:e3:cb:31:35:97:b1:cf:40:e7:e9:29:ca:a5:40:
                    a7:5f:c3:8b:94:21:71:39:fe:eb:21:18:d7:cd:7e:
                    08:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0C:39:2C:75:20:50:3F:35:DF:51:25:B2:E3:56:FF:DD:1D:28:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/9873fa7c-f2ed-3f7f-a640-9986aeaf95e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:15:de:5f:bb:76:d1:e4:51:b1:84:fd:54:3b:a3:33:9b:d5:
         83:6d:bf:90:5d:65:62:cc:e5:e2:21:e9:04:dc:6d:07:c0:3d:
         af:54:3c:d4:d2:69:03:6e:11:97:da:63:c2:57:57:4b:e6:32:
         4c:c3:b8:de:de:02:c0:4f:0c:64:15:dc:fe:91:d2:c8:ee:de:
         76:78:f5:65:2f:71:45:75:3d:b5:02:72:2a:a0:61:4f:01:4e:
         ec:8b:08:3b:58:57:a4:1e:4b:c9:a2:c9:54:7e:bc:d9:53:21:
         09:13:e9:a0:a3:66:8b:6c:6f:11:f4:13:cd:2b:d9:13:da:08:
         be:64:b2:6b:e7:1c:c3:99:34:e0:7a:c0:ce:c4:97:e3:96:ac:
         43:60:43:68:1a:63:41:22:d5:a1:90:92:f0:16:28:10:7c:dd:
         1c:e2:32:b3:84:96:4f:38:4e:49:59:34:5f:61:34:96:51:57:
         4c:84:c7:41:07:8b:80:45:d4:a4:76:eb:6a:f0:86:14:67:71:
         a1:b9:87:7e:c2:67:9a:03:db:66:da:2a:7e:7c:0b:80:dc:81:
         f0:28:84:74:95:09:46:71:19:32:f2:a5:8e:4f:e6:87:43:74:
         ce:37:3f:17:65:21:b1:e9:d9:3a:97:c0:09:48:92:5d:f3:72:
         e1:06:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:07:50 2025 by rpki-client