Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d0d1d989-5494-396c-9f5d-aa0c4103d1d4.roa
File:                     d0d1d989-5494-396c-9f5d-aa0c4103d1d4.roa (raw, json)
Hash identifier:          7SvOPm/REIhxKFlGyTDg55urfZ1cFVusPcaHZJfZ3+g=
Subject key identifier:   8B:14:D0:FB:C9:7E:D8:7F:95:60:6E:9E:54:C0:39:59:48:28:67:55
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285848DEA11795FA702FCC891B4000
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d0d1d989-5494-396c-9f5d-aa0c4103d1d4.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     61317
IP address blocks:        94.72.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:17:95:fa:70:2f:cc:89:1b:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=c6b61af1-bb00-4552-b875-bef08b76eec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:85:e8:13:7c:c7:cd:f6:c2:d1:08:fb:c1:28:
                    fb:b2:40:43:c8:bf:00:64:1d:26:04:62:46:31:2f:
                    63:8b:86:ef:33:1b:f0:f2:b6:86:7b:58:0b:44:4a:
                    85:5a:a3:7f:c8:dd:c5:8d:b4:65:99:17:79:ee:81:
                    c3:75:6b:56:11:5b:24:0d:90:a6:15:cf:96:6d:e2:
                    c8:4e:e3:08:cd:78:84:86:e5:12:c5:0d:55:34:ce:
                    18:c5:19:09:55:86:94:6a:c7:e1:69:e3:8b:95:03:
                    c5:d7:04:78:5d:91:6b:ac:d2:41:c1:2f:b0:0f:75:
                    73:45:7a:f6:ba:6b:e0:ff:74:4f:34:dd:e0:3c:c4:
                    a5:29:39:bf:5f:ad:4c:79:f2:25:5a:7c:6b:bf:e7:
                    aa:d0:53:5d:42:f4:8b:e7:4a:2e:86:88:42:3d:f7:
                    cf:0c:45:3c:5a:22:55:a1:71:bb:fb:02:0b:3a:b6:
                    44:86:1e:e9:c1:cd:da:4c:42:a9:66:3e:ac:93:d3:
                    f6:45:86:70:81:c8:c8:de:7f:06:38:7b:ae:20:5d:
                    12:b1:b2:bc:11:ab:0e:0d:69:d3:4e:12:51:33:40:
                    49:e9:44:fa:39:eb:83:2b:da:8a:58:52:a2:40:8f:
                    9f:38:06:f0:9e:f5:93:fe:73:2f:9d:39:9e:ad:69:
                    4a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:14:D0:FB:C9:7E:D8:7F:95:60:6E:9E:54:C0:39:59:48:28:67:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d0d1d989-5494-396c-9f5d-aa0c4103d1d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.72.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d6:c8:16:08:1f:61:a6:97:cf:7d:8d:54:c4:de:63:72:ab:
         c7:39:93:a3:24:ea:bc:f5:9a:74:d8:89:a8:cd:c9:d1:02:f5:
         d9:32:23:35:a6:82:2b:e3:34:b1:cc:28:52:79:14:98:90:55:
         3b:d2:af:25:8f:b9:74:6f:91:19:22:10:f4:72:39:aa:a0:f9:
         16:44:66:05:2c:34:19:47:a3:21:cd:74:52:42:b2:64:16:d8:
         83:08:63:e6:70:5c:33:ba:56:66:e6:26:45:0e:71:00:e5:dd:
         77:02:7f:3f:13:bd:57:8d:aa:1f:a4:b5:63:91:85:1b:9d:a9:
         cd:17:ce:3f:af:a4:8a:4f:93:24:30:6f:71:8d:8c:2d:18:7e:
         01:aa:bb:d8:e2:0c:36:75:a7:05:6d:09:a2:e0:a9:6c:6b:b5:
         1a:a7:eb:b3:54:18:77:23:06:68:29:56:fe:15:57:7f:f1:9e:
         8b:58:13:50:a4:88:bf:9e:20:b7:ac:8a:83:5f:db:bb:41:9e:
         08:d1:78:0b:a1:8d:61:37:5b:33:58:72:03:40:2e:63:1b:fd:
         7e:2a:7e:41:33:14:4a:c0:ad:4c:dc:99:ff:b3:d2:7c:6b:de:
         6b:3e:e5:b8:51:00:41:62:32:c8:a2:fa:6b:1b:f9:4c:b4:f1:
         e1:bb:2d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:39 2025 by rpki-client