Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e8a019c9-f1ec-3359-a095-365452fea81d.roa
File:                     e8a019c9-f1ec-3359-a095-365452fea81d.roa (raw, json)
Hash identifier:          8BU9H9GEIA1ufQODMKcCfztkg/olhF5doE76bxDt7U4=
Subject key identifier:   DD:10:69:E1:D4:B5:C5:A4:CF:8D:18:6A:A0:24:37:08:F2:B0:B2:EF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C580FAD2B31C7774DCD9E5C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e8a019c9-f1ec-3359-a095-365452fea81d.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     40306
IP address blocks:        70.41.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:fa:d2:b3:1c:77:74:dc:d9:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=70d8d541-1b8c-4c54-836d-ad5670c9d48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dc:60:56:1b:15:5a:45:c6:fd:7d:4e:20:59:
                    cd:17:0b:53:04:c5:5d:3c:90:cb:c7:e2:8b:20:da:
                    55:b5:a3:05:bf:be:4a:b0:35:04:94:df:18:d1:ec:
                    06:79:8c:28:86:e2:38:25:17:8a:6f:32:a7:e2:40:
                    dc:a3:b7:3c:86:36:8e:a5:46:62:e2:ec:92:c7:49:
                    c6:c3:8b:d5:3a:c1:26:54:f8:11:87:4f:3f:34:1d:
                    c8:60:ad:a6:8a:f2:04:95:6a:03:83:82:d4:06:f2:
                    ff:13:a0:cc:75:e6:7d:5c:d0:17:64:ae:72:fa:ae:
                    30:14:c3:4b:a3:82:9b:61:2a:37:37:ab:f9:73:3b:
                    20:49:88:7c:41:1e:65:c2:88:e6:c5:1c:57:f7:ed:
                    bd:16:21:f7:ff:3b:06:1b:6b:2b:22:3b:d8:d8:7d:
                    b3:8d:31:82:9c:8d:41:b3:fa:a3:02:40:2d:9a:dd:
                    36:a2:95:cd:fd:60:14:c1:1a:d8:8b:50:8c:00:b8:
                    13:a5:3e:b9:0e:e8:a0:c1:90:5b:ae:22:6d:e0:19:
                    d6:a5:47:9f:72:aa:79:87:fd:85:56:c4:9c:53:80:
                    09:36:3d:4a:cd:38:db:f4:98:0b:67:80:4d:61:cd:
                    83:68:39:6f:fe:cf:44:39:c2:48:80:49:c4:8d:a9:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:10:69:E1:D4:B5:C5:A4:CF:8D:18:6A:A0:24:37:08:F2:B0:B2:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e8a019c9-f1ec-3359-a095-365452fea81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:58:bd:d4:0a:d0:27:ce:f0:cb:62:2f:db:da:68:b3:eb:3a:
         d4:6e:b1:2d:91:40:6e:e9:c8:dc:b6:1b:d9:15:4a:67:e5:b3:
         ed:d6:57:f0:58:c4:c7:ee:de:e3:77:69:40:ea:10:2c:57:a7:
         cd:d1:f9:cf:cb:aa:06:0d:1c:59:bc:57:9c:6d:54:80:d2:39:
         80:3a:27:09:e7:86:b3:a3:ec:c9:de:c3:ab:59:08:3b:d5:fb:
         32:0a:f9:cd:a8:5f:b8:d4:be:9a:cb:b1:48:0f:82:62:b0:d6:
         80:12:c0:87:60:a4:1c:c8:cd:15:3b:ec:6c:4b:c9:12:40:14:
         01:ac:ef:0b:43:7b:ce:c1:45:b0:56:b6:44:be:96:a3:24:0b:
         d4:e1:7a:ac:db:a5:2e:f4:86:bc:0d:6a:a2:9b:bc:3c:5b:9c:
         e6:dd:3a:58:76:39:86:f9:90:08:35:eb:9b:0c:a6:dc:b9:c5:
         d3:09:ef:2a:c7:28:66:cf:a2:5c:b3:84:13:74:ba:19:27:f4:
         a9:4f:09:88:5f:e9:be:22:3e:c3:05:5e:cb:70:24:e3:52:fb:
         29:5a:47:e6:59:e2:29:55:d6:14:13:ec:ac:e3:93:02:a5:07:
         24:f0:fd:8d:b4:3e:85:e8:70:9f:4c:fb:49:06:50:f2:42:86:
         4a:5c:cd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:09 2025 by rpki-client