Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/75865c4b-0212-31fd-a9a2-2bca78f99826.roa
File:                     75865c4b-0212-31fd-a9a2-2bca78f99826.roa (raw, json)
Hash identifier:          6KnlKD0Eq54ZQt5bYbdyr5HBbvpCqjop8hNJzjzyz5Y=
Subject key identifier:   71:0E:1A:41:A8:6A:9A:BF:E0:23:18:0A:88:E4:8F:9C:A5:11:82:7E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1B34D6EDB48FCCC04D180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/75865c4b-0212-31fd-a9a2-2bca78f99826.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        72.129.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:b3:4d:6e:db:48:fc:cc:04:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=2adc1c80-3583-46f4-b5b6-aa923aed9a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:a2:a9:62:ec:58:51:e4:17:b5:21:f4:08:
                    62:69:20:76:52:1b:82:3d:fb:93:12:e8:26:7d:35:
                    91:79:ee:56:86:82:2b:09:4e:14:ea:e4:cc:21:1d:
                    c6:3e:44:01:3b:e0:90:46:06:03:dd:9d:36:88:2c:
                    67:aa:57:3c:ac:4b:1f:0f:4b:0c:9c:14:b2:f9:03:
                    2a:68:2e:04:5c:44:47:da:62:39:27:93:12:bd:b1:
                    69:e2:ce:35:c2:15:7d:1b:6a:2d:6c:7e:a6:ae:a4:
                    01:a3:bc:e7:08:69:a8:0e:c1:f5:4f:47:9b:99:86:
                    1e:c5:6a:1e:0b:9c:30:61:fd:0d:73:ce:f6:1c:e3:
                    33:9b:2e:17:6d:9d:ee:6d:62:33:a3:e0:e1:a3:08:
                    6d:13:4b:af:68:ef:b8:32:07:18:a3:0e:ac:4e:45:
                    c5:34:10:c3:ca:22:9e:f8:c1:f4:fd:bf:a7:69:51:
                    50:62:a8:36:25:24:4b:b6:90:52:d2:7d:ad:27:b6:
                    98:a7:e0:38:c1:e6:0f:03:c0:a1:fc:0f:fb:29:bd:
                    b4:77:6d:58:71:28:fd:b1:6a:05:b4:09:3a:42:95:
                    8f:78:fe:53:16:c8:f8:9a:09:53:32:98:1c:91:28:
                    7e:b7:b4:17:ca:ad:71:8c:bb:16:47:08:06:cd:83:
                    6b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0E:1A:41:A8:6A:9A:BF:E0:23:18:0A:88:E4:8F:9C:A5:11:82:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/75865c4b-0212-31fd-a9a2-2bca78f99826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.129.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:8a:ff:25:7a:6b:06:22:9b:28:46:b5:d8:87:8e:df:3a:3b:
         ee:70:fd:5c:d3:2f:2e:0d:54:d0:ad:e4:c2:c0:10:af:28:be:
         4f:9d:30:48:61:8d:3f:30:8e:07:b4:e8:6d:bc:63:57:da:87:
         1e:28:2e:5f:3b:6b:86:24:b6:5e:c7:6c:c8:ae:91:13:1a:9c:
         81:a2:98:0b:01:6d:2a:8b:53:eb:92:6e:d9:45:b0:bf:9e:41:
         b8:85:51:06:7a:6a:94:83:d5:35:e0:ee:91:d8:20:fd:43:be:
         fc:5e:46:b1:fc:4f:86:17:ba:cf:cb:fb:db:b1:25:84:13:88:
         40:6a:f6:04:c7:e8:bf:25:3d:98:78:03:69:41:ac:0b:43:37:
         79:89:57:9a:10:26:9d:be:2a:ba:f2:a8:23:05:51:cf:89:8e:
         40:d9:6b:0f:73:0f:6e:a6:02:c5:0b:ad:a5:19:55:87:02:9e:
         71:c9:20:3c:cb:73:46:1a:87:ff:23:71:d5:d8:20:3a:eb:81:
         c0:6e:e0:c8:18:48:21:26:72:be:66:44:c3:d7:9c:a3:c9:65:
         04:cd:f1:2f:8e:17:f9:f8:65:0d:2d:4f:4c:e9:d7:0a:30:99:
         d0:7e:a7:91:81:e5:94:00:10:57:cd:86:21:28:b9:39:fc:86:
         31:10:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:51 2025 by rpki-client