Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4d01044-9015-32e6-86c6-35e507c506f9.roa
File:                     f4d01044-9015-32e6-86c6-35e507c506f9.roa (raw, json)
Hash identifier:          5jefv+KCRZPoxxJH76VuOefNvnDq4hT2yWt04rQ6ll0=
Subject key identifier:   F6:44:ED:A4:5D:97:46:58:63:5C:75:78:35:AD:B9:CC:73:EF:81:5E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B55D8000D6F163A3361680
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4d01044-9015-32e6-86c6-35e507c506f9.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     577
IP address blocks:        76.70.160.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b5:5d:80:00:d6:f1:63:a3:36:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=2e4fc972-a154-4b0f-b96c-ba8e266f78f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:05:a8:3f:44:1b:1b:8c:04:4b:b4:29:55:
                    a3:46:1c:51:68:fa:11:69:12:b4:9b:5e:b6:db:08:
                    f4:21:cf:28:87:db:8b:23:8d:0c:01:b6:36:7c:6b:
                    17:41:e3:89:48:94:75:cb:f9:f8:9c:27:fb:51:74:
                    9d:0d:76:93:71:fe:13:16:9a:f8:01:6c:d2:97:0d:
                    35:63:b4:2b:2f:ed:a9:ab:5d:5f:df:af:3e:9e:3c:
                    8c:a2:c6:53:8f:17:ab:03:93:c0:e4:55:3b:be:c5:
                    bb:43:ea:a8:b5:1d:1f:e9:98:16:38:b2:a2:34:58:
                    19:68:e9:3f:6e:76:ad:61:d6:90:3a:29:17:34:3a:
                    e1:55:49:e5:4b:5f:b8:e3:3d:30:d6:be:19:ed:92:
                    74:53:2d:73:28:fe:5d:cd:53:a1:e2:ab:55:b3:b7:
                    31:bc:ac:0e:2e:79:91:6b:04:e5:e5:34:e7:d5:8d:
                    04:fc:35:a0:29:7c:64:f2:60:aa:32:20:7c:b9:7e:
                    43:60:11:f0:97:8f:54:72:c8:56:09:8f:af:97:6e:
                    a5:19:6c:2d:ab:54:1d:4c:58:1f:f8:3d:25:17:4d:
                    1a:03:34:e2:82:22:c8:bd:70:54:6b:04:de:ec:23:
                    a8:24:bf:9c:eb:99:b9:3d:9a:46:65:b9:1c:2d:1c:
                    61:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:44:ED:A4:5D:97:46:58:63:5C:75:78:35:AD:B9:CC:73:EF:81:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4d01044-9015-32e6-86c6-35e507c506f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.70.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:72:be:ba:ef:fb:ae:e4:77:93:40:66:e0:1d:2d:7f:47:19:
         7d:57:5c:94:74:da:e0:35:27:1f:e2:d6:fc:e3:87:70:0a:a2:
         70:b9:54:36:66:20:0b:81:e9:72:01:a4:fc:49:67:82:c4:63:
         23:cf:aa:7b:07:35:15:62:a1:50:72:cb:a1:1f:2b:ba:b5:bc:
         e7:8b:a9:a1:47:5f:50:1c:23:81:65:64:b9:5d:64:cb:b8:05:
         88:63:17:f1:a6:a7:56:f3:6c:0f:4a:8d:8c:f6:76:11:c5:a9:
         e7:b2:1c:54:0e:80:90:5d:32:90:80:94:fa:e5:80:5e:f4:55:
         c0:86:36:9c:98:c2:7a:91:b8:c8:17:c0:73:12:d0:1f:b8:9b:
         00:3a:a9:b1:75:18:0a:62:1c:10:85:84:87:c4:24:d5:e3:42:
         99:51:4e:da:35:34:c1:00:20:b6:fa:d2:65:98:91:6f:78:4d:
         98:94:e0:90:09:55:58:7d:88:c5:ab:ec:69:4b:54:5b:4a:e5:
         06:45:79:b5:8e:3a:98:d9:09:72:8e:b2:bb:72:2e:97:db:50:
         3d:cb:3c:01:e3:55:c1:5a:0a:5c:0c:98:f8:39:73:bd:52:83:
         f5:48:ec:b1:e7:b8:10:67:1a:b2:07:4f:30:ee:d1:56:71:c4:
         86:d5:4b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:36 2025 by rpki-client