Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ba0482b-8ba4-3e7b-bb91-06264d77fb0c.roa
File:                     8ba0482b-8ba4-3e7b-bb91-06264d77fb0c.roa (raw, json)
Hash identifier:          sDtJDdlFPxopY536+gDmc4jXmB1zalTXfVz0jHn1UJk=
Subject key identifier:   CD:09:1D:B3:B2:E7:BF:DC:85:A0:CC:3E:47:EE:1E:DA:02:B4:02:8C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1F9EB6893AC1EFA805ED0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ba0482b-8ba4-3e7b-bb91-06264d77fb0c.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        35.131.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:f9:eb:68:93:ac:1e:fa:80:5e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=855856f8-1762-4dd1-9594-1498446634fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:58:00:86:c8:30:07:74:5f:f6:21:1e:26:bd:
                    9c:db:68:dc:0b:8a:96:2d:5f:dc:92:a8:78:bc:a5:
                    a5:3f:64:82:a4:f5:71:57:40:ea:45:ac:7a:6a:f6:
                    b6:52:7f:3d:aa:1b:1c:ee:fd:35:a1:42:19:f0:d6:
                    22:e0:bb:fb:8d:54:74:28:1a:44:89:ae:f1:07:f2:
                    fa:f3:d3:cb:85:1d:05:2a:09:73:b2:00:1b:52:f2:
                    c2:93:68:2b:7d:a8:f1:94:d1:85:30:48:d5:b3:6e:
                    9e:88:b0:3b:88:40:75:7e:45:cb:3a:65:6f:0c:c6:
                    68:4c:2c:1c:50:e3:83:8f:73:a9:05:74:a7:01:17:
                    1c:a7:ee:ec:73:54:41:08:c8:99:b9:94:03:67:7c:
                    d2:e1:c0:a8:ec:ba:84:38:4b:be:11:25:93:01:17:
                    7d:50:a1:8a:b8:79:9d:c4:59:9c:8e:23:2a:d9:74:
                    8f:d5:f7:6b:96:d7:ba:78:ba:5e:d7:e7:59:d6:f6:
                    43:34:a7:e5:bd:70:1b:33:2b:7e:5e:90:ca:69:2e:
                    a2:95:3d:18:87:77:8e:af:7a:b1:0d:2f:81:cf:ea:
                    fd:c4:15:1c:ca:46:03:62:75:5c:a4:48:57:c6:03:
                    3c:24:08:5b:8e:47:0f:cc:2c:4e:22:49:2c:4c:e1:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:09:1D:B3:B2:E7:BF:DC:85:A0:CC:3E:47:EE:1E:DA:02:B4:02:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ba0482b-8ba4-3e7b-bb91-06264d77fb0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.131.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:62:af:5c:33:5d:3e:5a:93:75:a2:e4:44:42:da:90:a5:aa:
         c7:0c:04:f6:be:18:21:11:af:d1:29:1b:9e:01:6a:eb:68:2f:
         9f:16:86:91:4b:6f:2e:48:c0:16:6e:bc:c1:01:2f:ef:1e:ab:
         8f:17:7a:ca:20:23:8b:52:7f:31:23:38:bb:da:07:cb:19:79:
         d6:72:cd:8b:85:91:44:17:b1:fa:fc:26:fa:76:ca:d5:81:7e:
         ab:54:09:29:3b:cd:d1:63:68:a8:99:97:44:0d:60:ee:ae:5e:
         64:51:44:a8:dc:de:59:5f:9f:2b:4e:6c:d6:a1:e4:f8:a4:78:
         f6:18:9c:73:a6:4c:07:77:a9:17:14:3c:4b:69:6c:08:1a:70:
         9d:1f:77:89:51:18:30:77:11:4e:61:fd:2e:c8:ac:67:c3:17:
         8e:1b:de:b7:0d:03:b9:cb:83:8e:81:89:58:d9:02:38:78:92:
         c7:8c:1d:99:88:d9:37:4d:1c:51:1a:03:b0:0e:4d:87:f8:f4:
         6c:ce:45:30:77:dd:1a:7a:9f:8f:b5:1b:85:25:3a:3d:46:d0:
         f5:1b:36:e4:1d:d7:cc:8d:59:13:99:80:41:ee:e0:af:dd:7a:
         49:4e:d2:11:50:c3:f6:e3:51:00:28:f0:b4:ee:87:02:37:c8:
         10:a2:86:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:51:04 2025 by rpki-client