Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/20e0e0db-e84e-37ea-9796-fc419c58de8a.roa
File:                     20e0e0db-e84e-37ea-9796-fc419c58de8a.roa (raw, json)
Hash identifier:          Wqdn3jogABPp0WokfLVqvEuIajXoh9DPIRz6feLVFBc=
Subject key identifier:   60:65:F0:33:B9:DC:9F:EF:A4:40:7C:C9:69:96:CA:0A:EB:DE:7D:4D
Certificate issuer:       /CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
Certificate serial:       010D0C9F4328584897708FB5E1B4855ED740B100
Authority key identifier: 28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/20e0e0db-e84e-37ea-9796-fc419c58de8a.roa
Signing time:             Sun 19 Jan 2025 02:00:39 +0000
ROA not before:           Sun 19 Jan 2025 02:00:39 +0000
ROA not after:            Sat 19 Apr 2025 01:00:39 +0000
asID:                     7896
IP address blocks:        64.39.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:97:70:8f:b5:e1:b4:85:5e:d7:40:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
        Validity
            Not Before: Jan 19 02:00:39 2025 GMT
            Not After : Apr 19 01:00:39 2025 GMT
        Subject: CN=2b246de5-3a54-44bf-a290-9c78fb73ff6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a1:54:ae:d8:05:8b:40:6a:7b:f5:ff:a8:79:
                    0c:ea:62:e6:49:19:e9:ba:e5:b6:d6:65:5c:c6:e0:
                    ef:c3:81:46:31:83:07:12:88:02:c2:4f:1c:ed:b0:
                    34:6c:22:72:81:02:84:fd:13:4b:b6:db:7c:d0:ff:
                    8f:fb:f4:db:86:cf:f1:80:98:1f:2b:9d:1f:20:18:
                    ad:c0:4e:91:83:d7:58:37:e5:f7:5e:ff:b8:35:41:
                    4c:35:68:a3:9f:40:a2:f6:50:50:ab:73:1c:71:f8:
                    c5:be:60:16:d3:00:95:5d:2c:db:94:39:5a:af:08:
                    35:dc:49:2b:3f:c2:d7:69:01:cc:80:e7:c0:a2:da:
                    de:0f:1e:7d:76:bf:49:9e:b8:d0:78:e5:c3:b8:2a:
                    ed:a3:61:99:29:2a:2a:5d:9c:bf:7f:c8:9a:a9:a5:
                    26:56:d5:ef:56:f0:d3:d9:ac:83:65:51:2a:7f:50:
                    7a:a5:c5:0a:50:a9:58:6f:02:01:7c:0d:e9:6a:cb:
                    4c:96:81:b1:59:93:6c:a0:ef:21:e0:28:49:d1:eb:
                    27:56:d1:26:6e:d5:71:c9:cb:b3:53:a4:21:15:43:
                    20:24:89:8e:c6:70:84:d7:e1:2e:15:a7:cf:dc:53:
                    7f:46:89:b4:1f:0b:ca:a0:bc:bf:77:eb:74:94:bb:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:65:F0:33:B9:DC:9F:EF:A4:40:7C:C9:69:96:CA:0A:EB:DE:7D:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/20e0e0db-e84e-37ea-9796-fc419c58de8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl

            X509v3 Authority Key Identifier:
                keyid:28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:48:8b:13:80:bd:63:0e:f8:3f:cb:fc:d9:f8:72:ae:24:43:
         a9:87:ee:35:8b:bc:fc:d5:52:f0:f5:48:0b:2f:1c:bb:22:46:
         3d:5a:14:8b:2b:02:03:32:df:89:57:c3:fa:7e:f4:42:22:17:
         fc:69:9c:45:b5:c5:f0:e8:76:b1:d2:7c:c5:ea:37:6e:ac:71:
         ff:57:51:2d:9e:94:a2:1e:97:03:d2:1b:8c:f7:c1:46:90:6f:
         f7:2a:8b:73:ca:26:98:48:b0:ba:9d:09:8a:1d:95:b4:b1:a8:
         74:48:45:4b:94:5b:c7:b4:6c:82:f1:94:91:4e:cc:7a:58:be:
         9c:b9:02:51:99:ef:6e:cc:af:03:d4:6f:db:fe:82:d9:37:0f:
         fb:e8:5e:3e:40:81:7f:64:70:71:ad:5d:f2:7a:04:d3:f0:a7:
         1b:9c:ab:5b:ce:04:c4:b2:98:97:f2:18:08:a6:56:31:59:37:
         65:e2:c5:18:86:2d:b4:cc:74:9e:71:f2:44:fb:d1:a9:cc:a5:
         a9:aa:df:fb:18:8b:f8:15:24:92:8f:7b:0b:f0:bb:ae:1b:4f:
         57:75:f5:12:bd:f0:92:0d:41:95:7b:55:7b:b1:10:3e:d8:77:
         e6:b4:99:91:51:6b:04:4d:10:4d:6f:24:c6:1a:4a:69:6b:35:
         04:d4:60:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:50:11 2025 by rpki-client