Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7b49abf9-369e-3d57-ad4b-cbfaa4539da3.roa
File:                     7b49abf9-369e-3d57-ad4b-cbfaa4539da3.roa (raw, json)
Hash identifier:          vNHAkRRwkO5m5clF9IImZHmwB6orOID/0W7zwG8xBkE=
Subject key identifier:   F3:3A:CC:D9:EE:CC:94:5C:41:F6:BF:0C:7A:64:4B:7C:56:65:8E:FE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D28E7DC60753798A0F1FC00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7b49abf9-369e-3d57-ad4b-cbfaa4539da3.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        72.28.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:28:e7:dc:60:75:37:98:a0:f1:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=3c396be7-ea3f-4e8b-9d92-03c6f79acd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:cb:f3:cd:90:4b:e7:de:fb:4a:45:f5:5b:
                    6f:56:13:53:b7:96:73:ad:5a:70:8f:a5:6f:ef:47:
                    78:7f:3d:a4:d5:aa:cd:1c:6e:94:70:f1:1b:12:1e:
                    45:99:72:21:e4:77:aa:11:40:b7:78:80:3d:85:bb:
                    d3:8b:8e:68:f9:c8:2f:e4:b5:f6:21:d0:51:d0:8e:
                    85:86:6d:b9:74:ec:aa:fd:db:36:a1:f4:1e:7d:c9:
                    bc:6d:73:7f:bf:39:3b:48:a3:ea:19:25:65:42:f1:
                    42:fd:d2:d0:35:25:ff:cd:3b:5d:d1:89:64:cb:6f:
                    63:37:a0:58:41:29:b3:1b:ae:05:1a:61:76:f4:60:
                    c4:ba:1e:64:5f:84:81:e1:7c:93:a0:6d:af:ef:3f:
                    5d:98:94:c3:57:62:0c:32:47:17:4e:c2:5c:d6:5c:
                    e7:8d:3f:dd:4b:ff:05:f4:56:64:aa:56:53:e3:e1:
                    fe:2e:29:46:9e:10:20:20:44:9f:d9:68:70:0b:05:
                    a9:f1:8e:81:9a:25:0f:47:f5:2c:76:0b:10:42:77:
                    62:76:ba:60:80:4a:6f:41:b7:3b:8b:b8:9e:0a:62:
                    6b:04:d0:6a:a1:c3:67:c3:d6:13:65:1a:38:f2:3c:
                    ae:25:86:8a:18:17:63:c3:31:3d:97:a1:5d:7d:78:
                    f5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3A:CC:D9:EE:CC:94:5C:41:F6:BF:0C:7A:64:4B:7C:56:65:8E:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7b49abf9-369e-3d57-ad4b-cbfaa4539da3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.28.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:5a:a7:d6:38:80:5c:39:96:d3:98:87:47:0a:24:bd:0b:fa:
         2a:c1:49:07:82:07:7e:af:05:2d:73:80:cb:82:83:be:5a:ee:
         5f:66:71:58:9d:b0:13:fa:76:c1:aa:08:43:31:20:43:f6:e0:
         43:29:33:55:f5:1f:ac:9d:9c:fe:b6:1a:d1:10:2a:cf:cd:18:
         7d:b6:ee:c4:4c:c9:91:e3:6a:71:93:e6:cc:7d:49:60:3f:6a:
         c9:e3:83:bb:ed:c5:ed:ea:a3:82:58:9b:61:86:60:12:6c:b3:
         8e:e0:cc:79:50:3d:fd:1c:dc:b8:ad:1c:98:ba:7f:c5:7b:56:
         d9:d5:a8:80:25:1c:00:af:a9:e2:08:32:9a:06:4b:c5:b8:c7:
         98:87:22:9a:39:1f:40:07:64:de:da:9a:13:ac:50:92:cb:8d:
         29:9d:d8:e6:e2:78:e2:b1:65:9a:b0:97:81:60:77:d1:54:ab:
         ea:07:e0:10:fa:bd:aa:ae:45:82:85:83:99:03:76:ae:47:b0:
         7c:8a:49:d0:6c:00:33:0d:e3:91:4b:9b:04:1d:bd:1e:dc:90:
         c9:55:9c:40:a4:0a:9a:f7:b3:37:2e:eb:32:84:c7:16:ed:1e:
         a3:04:b9:f9:50:ea:a1:c5:cf:1c:e3:4f:08:4c:ae:60:35:99:
         48:5c:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:17 2025 by rpki-client