Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/e74e6ec5-4c0b-3455-bc12-38ecc5dc9b1c.roa
File:                     e74e6ec5-4c0b-3455-bc12-38ecc5dc9b1c.roa (raw, json)
Hash identifier:          qwnhpMdnfuLXqblO5xUIF9pYmfmMIKTDJ6aVy4NRPlE=
Subject key identifier:   68:E6:6E:C4:B6:EF:E9:63:BE:A4:F0:B7:0A:4B:95:F1:CE:6A:20:7C
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F43285849088178EB50603E664E39BB00
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/e74e6ec5-4c0b-3455-bc12-38ecc5dc9b1c.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     11693
IP address blocks:        72.15.72.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:78:eb:50:60:3e:66:4e:39:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=e880f64d-ee16-4d72-9272-0ca0cc2c7179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f7:09:95:74:1a:69:71:ee:29:15:5d:51:60:
                    7e:38:e8:29:5e:2d:72:3d:3a:cf:37:7b:38:90:37:
                    47:45:14:be:ac:af:aa:08:2e:a2:d6:74:f8:22:16:
                    48:4c:2c:58:59:43:f7:a5:3e:c5:e4:62:c7:69:11:
                    15:ac:1b:7b:ff:bc:8c:82:78:7b:46:3e:b2:47:f5:
                    20:5a:6b:ac:4c:4a:30:eb:0b:c1:95:b5:c1:cb:14:
                    20:3a:70:63:76:90:22:5e:0d:b2:10:4d:d5:ce:eb:
                    89:20:f1:3f:35:0b:87:b7:7b:f1:ec:b5:d8:9a:0b:
                    42:4a:49:55:64:30:21:d5:d8:19:6b:12:04:eb:ad:
                    3f:63:37:78:75:a2:9f:2f:ba:2c:55:bd:ef:3a:66:
                    3d:21:ae:2d:5d:d0:c7:5b:c7:b0:de:72:b6:6f:8e:
                    47:2d:68:50:14:e0:24:02:76:2f:34:30:f1:f0:6c:
                    68:e7:01:d2:90:b4:c8:9c:de:34:57:6c:da:2c:ee:
                    9c:5e:11:fe:99:59:14:b5:15:ad:c3:c3:44:bb:c4:
                    f6:86:8f:51:87:a4:03:7e:cd:b8:0b:d7:9f:ec:2f:
                    9d:13:9d:f3:43:96:7c:c8:ca:3c:ad:a2:bb:43:10:
                    cf:39:f6:b7:59:e8:e5:02:9f:63:60:26:c5:70:03:
                    12:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E6:6E:C4:B6:EF:E9:63:BE:A4:F0:B7:0A:4B:95:F1:CE:6A:20:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/e74e6ec5-4c0b-3455-bc12-38ecc5dc9b1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.15.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:87:93:fa:3b:01:79:c7:7f:dd:bc:64:c1:60:17:12:f4:16:
         4b:fc:59:d3:39:64:7c:6b:4b:c1:70:91:85:41:3d:d9:04:5d:
         e2:ea:99:e4:c2:9d:62:fe:c6:b9:99:07:0a:69:c1:15:f0:9f:
         1a:04:16:1e:f6:52:b6:8c:b1:60:17:4d:47:c5:bb:d1:23:0c:
         d6:66:48:b7:71:9e:f1:42:8d:b5:70:72:eb:66:a5:b1:1c:ca:
         36:29:39:ce:67:81:aa:d4:d8:0e:47:82:46:8a:9a:d1:24:4e:
         5c:40:31:0f:f9:a8:34:da:7d:28:cd:f3:6a:a1:95:1a:eb:d1:
         b3:f3:42:74:2d:12:de:da:2c:f0:ba:5f:ab:47:59:46:d1:41:
         3b:09:30:ae:9d:a5:04:fd:e6:83:fb:9f:2e:50:db:5b:c5:f0:
         2a:3c:92:e2:bb:a1:88:24:76:3a:1a:29:da:b2:e1:f0:dd:5e:
         ce:88:af:13:4f:dd:c0:9f:70:39:13:f5:af:54:b2:40:e4:f4:
         a1:79:0e:e9:94:1a:f1:6d:4d:1c:fe:7a:af:80:28:d7:93:d9:
         05:e3:55:35:8a:5d:dc:4c:3b:68:16:d6:4f:c1:31:c1:17:e6:
         e0:ba:c4:9b:46:3f:0e:37:d6:7b:cd:76:0f:9e:c9:ac:73:42:
         e9:e5:e9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:29:09 2025 by rpki-client