Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0c0b38c2-f10b-3b4c-8ae0-c5c46c1ab576.roa
File:                     0c0b38c2-f10b-3b4c-8ae0-c5c46c1ab576.roa (raw, json)
Hash identifier:          Qxg+AmxPBdr365xZUlpJxrS+IfeL7/6QTsAHsVrOtKc=
Subject key identifier:   D9:06:58:2A:34:2C:14:70:1C:91:B4:39:8F:95:5F:74:A3:58:1A:9A
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584902EBFD0C5A3940AA7C065380
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0c0b38c2-f10b-3b4c-8ae0-c5c46c1ab576.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     3462
IP address blocks:        23.91.111.0/24 maxlen: 24
                          107.155.30.0/24 maxlen: 24
                          107.155.57.0/24 maxlen: 24
                          128.1.37.0/24 maxlen: 24
                          128.1.45.0/24 maxlen: 24
                          128.1.50.0/24 maxlen: 24
                          128.1.63.0/24 maxlen: 24
                          128.1.101.0/24 maxlen: 24
                          128.1.102.0/23 maxlen: 24
                          128.14.238.0/24 maxlen: 24
                          192.254.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:eb:fd:0c:5a:39:40:aa:7c:06:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=c2b129f5-9f98-441f-ade2-02c99784d7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:23:6d:35:60:71:c3:a8:52:49:93:7d:85:25:
                    1a:c2:32:55:89:1d:d6:57:98:d3:83:95:5e:0c:64:
                    50:86:a8:18:f2:c5:0a:b0:76:e8:48:10:93:6e:eb:
                    74:38:8e:df:59:c6:a3:dc:fd:87:00:76:6f:fb:9f:
                    f1:85:bb:c4:30:b3:50:57:06:c8:13:9a:be:95:6c:
                    32:7e:74:60:43:e8:47:64:5e:f3:c1:18:0b:b9:2f:
                    88:a6:23:b0:37:a5:58:e8:2c:c4:39:2a:3d:1d:55:
                    96:82:3d:77:7e:d0:52:07:79:01:b2:14:87:b8:37:
                    1e:dc:86:b0:28:73:87:32:9e:b1:de:a3:46:41:aa:
                    9d:30:c9:df:2f:44:76:e4:2e:23:54:c6:99:83:cb:
                    83:0d:dd:66:1e:23:f9:75:04:3d:94:e7:9f:51:fc:
                    1e:8a:97:8b:1d:da:97:ab:25:d0:c6:52:c2:9f:d7:
                    7f:49:a2:b9:27:c1:f1:df:26:6f:03:de:21:40:5b:
                    25:ce:57:4f:45:a2:27:6b:ce:83:3d:4e:b4:80:a0:
                    1d:e2:4c:32:68:b7:f0:73:ee:32:00:37:d8:3c:20:
                    58:ea:70:66:09:14:fc:1d:de:67:c4:e8:be:d3:46:
                    cb:b2:8c:ed:4f:2a:33:23:86:4a:93:8f:b1:63:9e:
                    ec:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:06:58:2A:34:2C:14:70:1C:91:B4:39:8F:95:5F:74:A3:58:1A:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0c0b38c2-f10b-3b4c-8ae0-c5c46c1ab576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.111.0/24
                  107.155.30.0/24
                  107.155.57.0/24
                  128.1.37.0/24
                  128.1.45.0/24
                  128.1.50.0/24
                  128.1.63.0/24
                  128.1.101.0-128.1.103.255
                  128.14.238.0/24
                  192.254.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:10:bd:b4:95:1a:07:95:98:d5:34:99:01:b2:11:76:d7:06:
         8a:58:b9:f1:2b:01:cb:96:52:2b:2c:12:e8:f5:9b:66:fd:a6:
         49:c8:16:78:13:93:10:57:51:8f:3a:0f:11:c6:1c:9a:ff:40:
         5e:32:1b:ab:5a:41:d3:9f:18:c6:32:ab:ad:66:d7:d2:81:3e:
         fe:6b:58:67:e6:a9:da:e2:f6:8a:02:7d:b7:fd:a8:c2:a9:4b:
         d1:f2:33:3c:29:10:00:38:e8:fe:5e:91:e4:2d:52:57:14:42:
         6c:51:ca:c4:48:06:a8:ad:12:b6:5a:ce:11:45:e8:cf:5d:e8:
         30:83:46:35:86:34:54:c5:3e:b9:4b:ef:27:5a:8a:55:10:d1:
         0f:b7:1d:23:ef:d6:fd:c7:c7:82:48:bf:a6:04:42:94:1f:a2:
         7f:f1:bd:c3:34:58:24:38:c2:fa:c5:5a:dc:da:0e:aa:73:b5:
         71:f7:5e:d8:5a:2c:c4:60:5c:b0:7c:c6:fc:d6:9e:f2:0e:57:
         a0:33:68:e1:90:f8:42:78:40:8e:c9:fb:39:a0:f8:16:40:8b:
         00:fa:f2:ef:d1:2f:c8:8f:14:5e:e4:66:02:df:27:d9:48:f7:
         37:4b:c2:5a:b5:ac:a1:8e:b8:21:4d:c6:a5:f3:52:71:f4:4b:
         3e:dc:ef:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:36 2025 by rpki-client