Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/e34e8d74-4589-328e-a1ea-c4a4b49bd5ad.roa
File:                     e34e8d74-4589-328e-a1ea-c4a4b49bd5ad.roa (raw, json)
Hash identifier:          shVvsfuPF8qG0Wp29qR5warDog0qbg6z4FILFLXUW34=
Subject key identifier:   AC:8B:94:15:41:DC:DE:EF:B4:7D:17:73:23:3B:37:BE:25:35:83:7B
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584937D933B25D68D9A3BA2BFF80
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/e34e8d74-4589-328e-a1ea-c4a4b49bd5ad.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     10835
IP address blocks:        68.170.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:33:b2:5d:68:d9:a3:ba:2b:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=b09d0575-ea5e-454a-819b-7e5160ea44d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:8d:04:a7:23:8a:06:a0:74:34:99:3c:58:
                    13:eb:29:7d:6f:69:03:cc:1d:37:7d:2a:7a:29:23:
                    16:ae:52:01:83:1d:83:22:10:a1:df:ba:6a:44:16:
                    a9:75:86:e9:f4:da:37:50:08:35:a2:f7:47:70:6d:
                    d7:90:09:48:50:1d:8d:34:6b:35:3f:2f:0f:e4:8e:
                    42:71:d9:39:f0:59:fc:c3:4f:b0:d7:8e:87:cf:34:
                    31:15:09:b7:6b:e6:64:c2:39:a1:c6:c2:a2:c3:63:
                    ce:04:d0:af:75:99:a7:80:64:47:35:34:06:cd:37:
                    4c:57:68:12:d6:17:56:3b:83:66:6d:a8:ac:4b:61:
                    66:c2:05:6a:c5:6a:c6:31:32:52:07:d5:d3:f2:36:
                    29:56:8d:01:12:3c:45:54:cf:5b:73:ac:85:a1:db:
                    73:ac:14:2f:f5:2a:b1:72:d2:5f:4a:d5:70:8e:30:
                    88:15:97:da:35:4e:8a:f7:6c:80:aa:26:9e:6b:ec:
                    e3:23:8c:85:56:a4:4e:43:76:12:af:1f:96:31:af:
                    2f:2f:b7:4d:bd:c5:59:dd:d1:5f:6d:e7:ff:08:32:
                    e9:29:fc:bb:1b:6f:b4:e1:be:ec:ab:f7:a4:ef:6f:
                    1c:9d:24:cd:d4:0c:34:b5:c0:e6:d8:6b:16:30:9c:
                    2f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8B:94:15:41:DC:DE:EF:B4:7D:17:73:23:3B:37:BE:25:35:83:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/e34e8d74-4589-328e-a1ea-c4a4b49bd5ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:df:95:5e:81:1f:5b:94:4b:fa:56:7d:a0:13:ed:11:89:fc:
         5f:21:41:00:79:cc:62:5e:4c:86:d0:63:4e:f0:d9:6a:f5:dd:
         e9:c0:d4:30:f1:f7:b8:97:88:dd:62:3f:c9:02:f9:dc:3e:f5:
         f4:ec:64:34:94:a7:f0:ea:84:45:54:30:00:5c:f5:29:ab:4f:
         95:65:7b:5e:b1:eb:95:7d:0d:5f:be:cc:e0:73:0d:f0:ba:22:
         e9:5c:c7:12:7a:77:e9:92:86:3d:69:52:47:de:2e:b8:5c:28:
         7b:32:84:eb:e5:dc:da:7e:85:3c:d1:89:39:c4:60:db:04:5f:
         3a:3d:89:da:17:3f:a2:1d:c2:69:d6:4d:d4:f0:c3:06:09:14:
         cc:b2:5e:1e:6d:7b:0e:43:52:fa:61:e0:8c:e7:a1:d4:a5:c8:
         20:0d:6b:53:60:be:de:74:29:ed:1d:82:10:11:9b:26:6e:56:
         b0:84:62:d8:6b:47:b5:16:fe:64:6b:e8:8e:8a:d0:09:44:af:
         fd:e7:5c:47:4c:93:1a:09:02:01:e2:cd:c3:3b:5d:57:83:ad:
         f2:d8:f8:41:3a:5c:68:fa:db:48:c6:35:69:f1:4b:49:d3:24:
         bd:5d:e4:5e:40:dd:34:e6:cb:fa:89:63:17:aa:67:f5:65:62:
         0f:13:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:32:08 2025 by rpki-client