Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10aad3e4-4596-3b98-bcdd-3945b3e6289e.roa
File:                     10aad3e4-4596-3b98-bcdd-3945b3e6289e.roa (raw, json)
Hash identifier:          RS+h8v+OUF0tliklL2D28QnjyZ/Ku8KKKrqV8y7Swyo=
Subject key identifier:   36:C9:B5:09:C2:8F:E1:E6:B7:9C:AF:2A:DF:D1:B0:AC:73:48:3F:CF
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285846434A52F76D944A24B1C69180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10aad3e4-4596-3b98-bcdd-3945b3e6289e.roa
Signing time:             Wed 19 Jun 2024 13:00:34 +0000
ROA not before:           Wed 19 Jun 2024 13:00:34 +0000
ROA not after:            Tue 17 Sep 2024 13:00:34 +0000
asID:                     7029
IP address blocks:        75.88.80.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:43:4a:52:f7:6d:94:4a:24:b1:c6:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 19 13:00:34 2024 GMT
            Not After : Sep 17 13:00:34 2024 GMT
        Subject: CN=a173f636-7313-4bd6-a8c5-8cf4a7e37bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:c3:20:92:52:ce:ac:09:02:c1:c6:a6:09:
                    26:25:b8:eb:ed:22:3f:da:e1:9c:46:a4:26:12:9f:
                    f0:87:72:73:d3:19:08:a4:81:a4:2f:eb:c7:b9:66:
                    06:cc:5a:a5:fe:98:34:a1:72:08:f3:c5:bc:0b:a8:
                    03:e9:bc:96:2c:7c:bf:22:06:e6:c5:61:8b:6d:d8:
                    73:82:73:0b:1f:6c:47:a2:e6:f0:04:67:f1:9f:7f:
                    ff:e4:b5:0d:0c:91:b1:7b:ee:6f:59:76:88:32:39:
                    51:93:75:43:7f:a9:97:60:8e:a5:85:7b:16:51:19:
                    82:d3:3f:ad:ab:df:29:db:a2:7d:e3:b1:8f:5a:c0:
                    f8:e8:c2:08:db:78:c9:24:db:2a:42:c1:71:c8:4b:
                    0a:a9:c7:d5:81:ad:09:28:f6:47:49:b0:e4:59:48:
                    bb:57:dc:05:38:4a:90:cf:1e:8d:39:e3:4b:54:15:
                    70:d3:77:57:54:45:fb:52:b2:7c:81:b5:20:f7:96:
                    85:41:99:26:57:38:33:64:61:e2:a9:b8:ae:5a:3b:
                    70:91:76:2f:2d:92:1e:43:53:32:6b:2f:ac:9b:7b:
                    f4:95:62:6a:bb:47:58:72:4a:83:d5:5b:05:90:42:
                    26:71:a6:ef:f9:b7:7a:a3:e9:4d:3e:34:e5:f3:d3:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C9:B5:09:C2:8F:E1:E6:B7:9C:AF:2A:DF:D1:B0:AC:73:48:3F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10aad3e4-4596-3b98-bcdd-3945b3e6289e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.88.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d4:c4:87:83:98:04:6d:8c:6e:30:94:73:fc:31:40:87:3d:
         a4:f4:a4:14:54:9f:9b:9b:4a:c9:40:ab:89:14:20:e3:7e:9a:
         2d:8c:4c:92:52:bf:9d:1f:47:ad:27:79:53:16:28:93:1c:cd:
         13:d7:30:c3:c0:78:d2:44:fc:bb:7f:65:96:71:1c:86:4a:31:
         55:d4:07:5d:cc:fe:88:96:d6:88:51:a3:7f:a4:5a:bf:5a:81:
         56:80:8e:a2:bc:c2:a9:53:96:45:19:89:68:52:5b:2f:21:33:
         4a:0a:03:9f:92:44:ed:3d:56:69:3c:d2:09:9c:2a:51:ce:9f:
         eb:bc:91:7a:01:81:0f:83:9a:87:49:a5:e4:6c:5f:8a:a6:fc:
         4c:fb:3d:a3:92:b4:3b:6d:56:6e:53:a3:ca:d3:cb:20:4b:97:
         01:4d:05:31:1a:c7:6d:f6:45:55:e1:73:5e:6f:70:2b:22:83:
         80:0b:6d:43:5a:f4:90:ec:60:3a:11:e0:dc:f6:c9:b1:0d:9f:
         91:d6:e4:75:d7:68:a2:c0:e5:13:38:9e:ce:89:48:2b:d0:8e:
         81:fd:4e:2b:77:24:0a:d3:d5:78:44:23:60:8f:41:ba:1a:48:
         9a:78:b4:c4:b4:bc:85:90:bc:32:6a:37:5c:c0:89:d2:a7:ab:
         10:c5:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:41 2025 by rpki-client