Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/4f9328ea-492f-3885-a2be-20a77b7c2626.roa
File:                     4f9328ea-492f-3885-a2be-20a77b7c2626.roa (raw, json)
Hash identifier:          e/8mQkd47vyuepjJvGkv6bbv9MexPQ3kTwHnmKMatnI=
Subject key identifier:   B9:F7:EF:5A:A8:39:32:67:4C:6D:24:9B:C2:E2:C9:6F:D5:E3:BF:A8
Certificate issuer:       /CN=d001dd1f-946b-457b-98d8-41701665309e
Certificate serial:       010D0C9F432858488AE0961922B96C77912F9FBF
Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/4f9328ea-492f-3885-a2be-20a77b7c2626.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     23465
IP address blocks:        76.77.192.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:96:19:22:b9:6c:77:91:2f:9f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=11573f0d-cf2a-4e85-b5df-f2dcd47c7d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:5b:17:2c:f1:de:cc:e0:aa:44:d3:d4:ef:
                    7f:f0:26:4d:d9:1a:92:ca:39:80:54:ac:65:e0:2d:
                    02:c0:c5:1f:30:f9:60:42:97:88:e7:02:02:b9:2d:
                    05:d1:1b:6d:01:de:95:52:f7:cb:26:59:f1:f7:8a:
                    2d:dc:fc:0e:8b:c5:c5:53:1f:e4:89:e4:e8:02:06:
                    0d:65:e9:54:bf:3d:75:98:50:01:d9:1b:d0:5c:54:
                    75:33:e9:a9:b6:ee:aa:87:d4:a3:07:9a:cd:66:60:
                    81:d3:92:a1:ad:b5:6b:2c:a3:69:90:5f:69:10:a4:
                    2f:2e:39:a1:95:f0:67:7f:d1:55:08:07:fe:5c:de:
                    d4:bf:02:9a:fe:ab:a8:2f:d3:6c:e3:f4:96:86:8c:
                    16:1e:5f:27:6f:26:3c:4d:50:87:c4:ca:85:03:8c:
                    d7:7f:11:18:65:1c:f9:8f:18:4d:c4:c1:15:68:65:
                    17:37:64:9f:86:18:5a:d1:2a:fd:8f:31:2a:de:aa:
                    c3:41:52:e5:69:d5:1f:5d:a9:f1:7c:7b:35:07:29:
                    1b:b2:ba:16:84:ea:26:b1:fa:ff:1a:97:7b:11:74:
                    55:39:75:4b:90:4a:82:6f:98:cf:af:dd:94:f8:0a:
                    ae:06:07:4a:3a:58:72:35:25:5a:5f:8c:08:7b:dc:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F7:EF:5A:A8:39:32:67:4C:6D:24:9B:C2:E2:C9:6F:D5:E3:BF:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/4f9328ea-492f-3885-a2be-20a77b7c2626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:6d:dd:0d:6c:be:ba:f9:49:8f:41:98:c8:d4:58:eb:df:4e:
         99:4b:61:69:2d:72:8c:42:1a:18:5e:82:f8:bf:a3:be:a9:66:
         30:6f:2b:c6:a0:a2:5b:97:eb:72:f8:8e:d9:89:1a:1a:9d:40:
         8e:e5:ee:b0:a0:14:d2:3b:53:89:9b:e2:82:7c:5e:be:23:83:
         dd:39:3f:a6:29:bc:52:7c:ad:e5:73:88:1b:ab:a8:88:af:ac:
         01:58:6c:74:85:7f:dc:10:07:d2:ff:82:d9:7c:5c:67:86:eb:
         80:10:35:e5:75:11:91:3d:c4:69:6d:d1:e5:ac:ca:58:21:2b:
         da:e8:05:08:3a:12:65:8b:a5:e3:98:47:c5:84:ba:33:59:b6:
         31:84:ff:a6:f1:3d:57:15:0b:63:fe:6d:9b:67:51:be:a3:e6:
         dc:a0:e1:b7:59:b1:5e:83:15:be:a3:e7:13:7c:f5:4d:b9:d0:
         fe:27:05:ff:d6:3d:2e:c9:e6:9c:ea:5c:74:b1:e1:70:31:d9:
         cb:fb:4d:c9:83:88:e9:00:b6:64:d0:5b:ac:01:81:e2:93:f7:
         9d:72:54:27:09:09:3a:4e:e6:7c:d3:c2:a7:ce:c9:ad:02:20:
         91:18:ea:2d:55:56:5c:db:10:5a:35:09:be:c6:3b:8a:8d:d3:
         db:2f:9a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:35 2025 by rpki-client