Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5856eae9-9332-3fd4-b7c9-f243db302cc8.roa
File:                     5856eae9-9332-3fd4-b7c9-f243db302cc8.roa (raw, json)
Hash identifier:          he35p1oHvEj4t7NJe9XpggaY/ZpQwiW/dfcbWPRXNms=
Subject key identifier:   B6:3C:04:D6:69:FA:14:49:4E:F0:31:BB:D3:DA:35:8A:CF:54:E3:E8
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285848CC7B9FFC302F3D9463D25910
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5856eae9-9332-3fd4-b7c9-f243db302cc8.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     7764
IP address blocks:        148.129.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:9f:fc:30:2f:3d:94:63:d2:59:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=a2617977-b086-436e-b046-5beb68472476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:44:96:51:fc:b9:22:a4:5a:e5:9e:e7:5d:12:
                    e3:d8:33:69:03:42:13:bd:a5:60:b5:d6:f4:f3:52:
                    e5:ed:af:a8:c7:8f:ed:6f:17:22:0e:40:c5:83:7d:
                    b6:08:d0:f8:cd:24:5f:a0:61:49:bd:3a:c3:bd:82:
                    85:95:b2:6a:4d:bb:25:bc:40:37:4b:0c:78:61:6d:
                    80:be:2e:46:f9:db:b1:c7:4e:d0:26:ca:50:91:c5:
                    8c:bd:a3:d0:79:18:f7:bf:20:bc:c6:05:b5:1a:3e:
                    f1:f6:5a:82:c6:8e:ab:d5:d6:74:e6:95:c9:13:35:
                    15:77:cf:08:2f:d2:70:12:ae:fd:59:c5:55:b8:6b:
                    2b:40:c3:70:49:47:01:68:05:c5:01:ef:f5:8e:72:
                    d9:65:a0:17:54:ac:1b:9a:bf:d7:f3:b1:83:dd:d8:
                    52:13:76:34:76:4a:ac:95:fb:8f:32:f0:83:f1:77:
                    3b:21:f6:86:5f:c1:da:bf:5b:b8:1b:ca:fd:ce:66:
                    b9:5e:3c:d6:cd:77:38:ae:36:68:42:33:7a:5e:07:
                    9a:3f:bf:7a:ef:7c:98:ce:ee:9a:47:e4:8a:b1:50:
                    f8:e5:8e:77:23:1b:95:15:2c:f8:d8:63:81:39:a2:
                    dc:2c:da:1d:8e:48:a6:fb:94:1b:81:5a:59:28:5e:
                    08:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3C:04:D6:69:FA:14:49:4E:F0:31:BB:D3:DA:35:8A:CF:54:E3:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5856eae9-9332-3fd4-b7c9-f243db302cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.129.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e5:6c:ee:7d:64:bc:c5:7c:fe:a9:f1:9e:54:43:08:a1:41:
         37:d4:56:6a:01:f9:85:f7:c5:92:2f:fd:2e:db:b9:61:5b:53:
         9e:1e:83:77:a4:f0:58:3a:22:59:e7:7b:5c:59:64:7d:4d:3c:
         a4:92:5d:d5:a0:58:04:3c:ce:08:1f:d7:f7:80:39:f5:29:ba:
         17:8e:de:1e:a0:13:bc:7d:35:80:72:47:aa:ad:37:08:b4:ef:
         c2:94:9f:9a:46:45:2f:20:62:ca:1d:4c:50:fa:46:e6:aa:58:
         5a:f0:4f:cc:c9:5a:49:ce:ae:b9:63:06:c9:62:5e:4c:80:8e:
         be:4c:9d:bc:bb:a7:47:3f:9e:d2:c1:b1:22:80:a6:f6:93:e5:
         e0:b1:42:31:da:a3:a8:9f:6e:e7:d6:09:a9:5f:64:88:2d:98:
         da:8f:1d:1a:4e:ba:3d:5b:34:2a:37:2e:f6:73:e0:5f:90:99:
         38:d7:a2:66:69:56:f4:96:bb:34:e0:43:c5:b4:d8:b0:1b:2a:
         ff:74:b7:b8:66:a9:e4:bb:b7:24:3f:0f:f6:b5:ae:58:f3:47:
         67:2b:a2:5b:e8:b3:be:f9:5f:b3:62:91:a0:ef:ee:7d:2a:c3:
         20:61:54:29:7e:20:26:e1:d3:ff:d4:8f:39:d8:e8:3a:48:6b:
         9c:3a:8e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:36 2025 by rpki-client