Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/decc79d0-7a73-3fc2-a68f-cb88551c6c64.roa
File:                     decc79d0-7a73-3fc2-a68f-cb88551c6c64.roa (raw, json)
Hash identifier:          5ZUIYiDekxhTPDw9/BZNcasimHxygSojnhBi5N+UKpw=
Subject key identifier:   07:FA:4F:79:AC:74:50:D5:DD:B4:98:44:DF:67:38:A4:A3:56:B7:9E
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F43285848A2122962F2CFFE6004BCD080
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/decc79d0-7a73-3fc2-a68f-cb88551c6c64.roa
Signing time:             Wed 22 Jan 2025 21:24:26 +0000
ROA not before:           Wed 22 Jan 2025 21:24:26 +0000
ROA not after:            Tue 22 Apr 2025 20:24:26 +0000
asID:                     15164
IP address blocks:        74.51.216.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:12:29:62:f2:cf:fe:60:04:bc:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jan 22 21:24:26 2025 GMT
            Not After : Apr 22 20:24:26 2025 GMT
        Subject: CN=38bd7d3c-19e9-4a4d-8359-d32b51559546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ba:04:1f:df:f9:8a:21:0b:b9:15:dd:97:ed:
                    1f:28:cb:c2:db:2d:28:46:dd:bc:56:b6:09:41:b0:
                    34:62:b0:bb:87:98:7d:90:7a:a5:6c:b9:6a:0a:1b:
                    a0:ca:b1:b0:b3:b8:48:91:f2:7e:ab:48:9e:5a:6d:
                    ce:1b:ce:75:9d:26:2b:82:ef:21:78:73:2b:91:f4:
                    ca:9c:4f:fb:13:53:dd:29:55:44:de:dc:c2:a7:f3:
                    df:7b:64:c5:53:dc:0e:ca:43:6f:ff:ea:34:ca:d1:
                    c4:7e:c2:d7:bd:c5:82:35:0f:41:ed:e0:44:57:60:
                    26:d5:51:fb:d2:e8:a1:52:b5:6c:f8:4e:c0:a9:b3:
                    7c:41:2b:54:07:94:cd:7e:f9:1b:c1:49:c7:c6:8a:
                    82:ea:ee:ce:1d:75:c1:cf:84:2f:a3:af:ac:09:0b:
                    0b:03:3a:5b:2d:19:8f:32:61:32:af:b9:9d:67:a3:
                    4b:67:f9:35:ff:51:47:b9:fd:65:8f:1d:94:51:f5:
                    14:0c:dc:85:e5:c1:5f:5b:01:3b:e9:5d:6d:8a:69:
                    79:df:2c:ba:2b:fb:f5:e7:d0:4f:5c:f9:b1:ea:89:
                    f6:f4:28:a9:8f:28:b4:7b:d9:b0:5b:80:8b:b9:f0:
                    6a:d4:de:2e:7d:1d:ef:41:9e:16:08:b3:fe:83:9d:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FA:4F:79:AC:74:50:D5:DD:B4:98:44:DF:67:38:A4:A3:56:B7:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/decc79d0-7a73-3fc2-a68f-cb88551c6c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:4c:f4:2f:58:75:95:34:d8:07:36:65:02:17:3d:2a:dd:83:
         a8:5d:6b:ec:f0:c3:58:53:83:88:1e:c5:38:7e:e9:be:06:53:
         02:bb:68:58:43:2f:91:00:d7:5e:a2:18:4c:1e:f5:38:8f:84:
         79:b0:49:d5:61:de:4d:09:84:41:df:df:ba:95:c5:4b:13:57:
         35:b1:a8:20:a3:8e:66:c4:cd:77:66:15:2e:7e:03:0a:a8:6c:
         07:2b:83:47:79:2e:f7:03:20:53:e6:36:95:2a:ca:45:e0:f5:
         77:50:47:1c:5e:a4:55:49:77:00:5a:d0:b5:d1:67:f8:34:74:
         a4:e8:11:4b:21:f7:34:3a:4c:c2:ff:e8:b8:9b:e5:f3:72:7a:
         ed:9f:4e:ef:e2:3c:96:df:b2:39:f0:42:12:00:81:db:86:46:
         29:fe:27:61:b7:3f:4a:6d:9a:63:ee:00:a2:14:f8:fc:0a:c8:
         28:8b:e0:16:8a:62:91:0e:17:bb:43:da:e8:8a:c2:cd:37:49:
         4d:06:84:a2:a2:b6:b4:99:96:c4:4b:f8:78:9d:e9:f1:fd:62:
         4f:ce:6b:7c:82:a2:90:f8:de:32:c7:ec:cc:c0:ad:51:eb:af:
         9a:e9:33:f1:8e:46:32:df:71:42:1c:d0:00:fa:c3:b1:b2:34:
         f6:40:a7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:49 2025 by rpki-client