Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/94f8bbca-26d2-3412-8e59-4be7a1c60a21.roa
File:                     94f8bbca-26d2-3412-8e59-4be7a1c60a21.roa (raw, json)
Hash identifier:          SL8vNuHxIvyiWRjfA5ryN1/zYx9nQTkBqu2Z667TZjY=
Subject key identifier:   2E:76:3C:6F:9D:B8:1D:61:A2:D6:B4:EE:75:A4:FA:1C:26:EA:C7:48
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D18E99BF45DE20EE8E07C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/94f8bbca-26d2-3412-8e59-4be7a1c60a21.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        75.133.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:8e:99:bf:45:de:20:ee:8e:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=2e77dab2-6f2e-43f1-80da-e0c8688c99fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:42:be:b9:ae:95:3f:af:41:3d:53:2a:0b:ee:
                    77:a8:66:9b:19:a2:60:7f:88:f9:44:e4:26:d0:ee:
                    88:cc:5c:5d:9e:33:ff:29:2d:66:3c:b2:f3:bc:ac:
                    a9:05:a7:65:56:90:53:7a:4a:b7:08:98:e6:0f:b9:
                    3e:b8:32:39:48:f4:49:18:11:15:bd:5c:39:48:6e:
                    65:fe:01:e2:cc:88:33:f0:65:74:ef:9f:7b:29:2b:
                    95:6a:db:8a:5b:68:72:88:ba:f6:42:9a:59:32:f9:
                    e0:5d:8c:a7:86:55:fd:9f:b9:1d:38:e0:47:59:6c:
                    ae:d1:49:39:f0:0d:74:e2:7f:ed:5e:ba:32:ed:51:
                    f9:bc:e4:cd:86:c1:be:75:35:cf:2e:28:0b:61:e6:
                    da:5d:ef:a6:c4:54:c1:ea:5e:1c:96:e2:02:a5:3f:
                    f7:23:54:95:a5:67:29:a5:46:2d:f2:67:4f:96:22:
                    71:ca:63:cc:69:7d:05:1e:99:f7:21:95:3f:c8:66:
                    16:b7:73:23:b3:94:06:74:45:53:49:b0:28:0c:3a:
                    fd:29:a4:87:93:63:76:02:29:14:25:28:c0:34:d5:
                    1a:e5:32:84:d5:68:1d:2b:4c:3d:0c:6b:f8:cd:bb:
                    69:7c:ac:20:a6:52:a5:65:57:82:44:10:58:c2:d5:
                    0f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:76:3C:6F:9D:B8:1D:61:A2:D6:B4:EE:75:A4:FA:1C:26:EA:C7:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/94f8bbca-26d2-3412-8e59-4be7a1c60a21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.133.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:42:70:0f:b9:c9:2f:63:b7:52:c1:d4:8e:10:82:37:b6:9d:
         46:44:55:2a:0e:57:a4:9d:a3:81:24:f0:2a:4b:db:07:53:b6:
         cf:6f:cb:b5:3c:aa:1c:76:0f:d8:cc:7f:47:0b:53:67:61:90:
         6a:57:cf:77:d3:8c:85:8d:cb:98:64:9c:a9:27:e5:48:07:2e:
         bf:e2:a3:31:d8:a5:10:82:1e:dd:74:42:0b:84:4b:77:be:30:
         b4:ea:fc:36:9c:f1:d8:cf:03:fb:3d:a8:a4:9e:ff:10:13:e7:
         57:87:d3:c8:ae:3d:96:e7:5a:3a:b1:f2:e3:98:08:45:cc:34:
         c6:b5:63:f2:e4:53:8d:1d:41:35:0e:91:1e:73:0d:91:19:20:
         25:29:5d:b2:84:9a:a1:c5:d1:e8:fd:94:c4:9f:27:b8:84:0a:
         c5:79:cb:e5:24:0d:4f:3b:39:fa:27:f9:14:a9:6d:9e:e5:7b:
         10:00:3d:b7:0c:5b:ce:52:46:d8:03:13:22:6c:97:8d:4f:8e:
         a1:2b:ca:ae:51:b8:a0:bb:3e:6f:37:16:6c:da:09:90:3c:90:
         ac:8b:37:fa:f8:62:2b:b2:b8:bf:3f:3e:e9:4d:18:f9:dc:c7:
         67:46:56:2c:35:d7:34:a6:0f:09:7a:94:6b:f8:e6:b7:b0:25:
         42:99:b3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:13:13 2025 by rpki-client