Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a21c7690-b588-33ea-aa1f-70e1e5d48850.roa
File:                     a21c7690-b588-33ea-aa1f-70e1e5d48850.roa (raw, json)
Hash identifier:          QKD3ek1EIsS8qkW6q9I/T30FJ+Dnsja5om9Ea0f+/AQ=
Subject key identifier:   CA:89:05:52:A0:87:B8:E5:9A:DF:1A:ED:C6:46:6D:92:47:1C:0C:32
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D13F3DF24C5B71619DFF40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a21c7690-b588-33ea-aa1f-70e1e5d48850.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11426
IP address blocks:        69.133.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:3f:3d:f2:4c:5b:71:61:9d:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=2ab346f5-f9c8-4da5-a476-4bfd8f9156ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0c:bf:b8:d4:b2:34:ea:d2:fe:c0:6f:57:75:
                    07:ba:b2:a2:77:77:f0:53:b8:ea:11:2d:af:8d:4f:
                    10:59:ed:20:8d:0d:db:1c:44:5c:ac:3d:f2:32:6a:
                    5d:11:aa:3c:5d:42:6e:9f:19:59:d9:a2:ad:71:5c:
                    b1:bf:34:07:27:4a:c9:ba:56:72:17:67:de:42:c4:
                    67:be:4c:1f:25:43:c1:2b:8a:32:fe:f6:be:8b:b8:
                    b5:b4:0b:97:11:e2:ea:df:52:46:0a:22:55:3a:ce:
                    c2:66:fe:c4:fa:db:cd:c5:b5:13:84:0a:92:5e:fe:
                    3c:a0:93:f2:27:4e:96:02:9e:66:7b:ed:d7:3c:92:
                    fe:de:c4:43:bf:ce:d2:db:6b:7f:85:ec:de:58:da:
                    40:4d:ec:61:37:83:c0:25:ca:b9:1a:39:3e:53:2e:
                    b7:97:44:1c:98:d9:50:ef:c3:8f:3b:ce:a2:2c:26:
                    f3:7c:8f:cc:c6:98:27:74:fa:b3:4f:55:ac:4a:f3:
                    b7:0a:3b:77:a5:9a:ea:e0:ce:de:8d:8a:aa:1d:e6:
                    85:ef:be:0e:78:08:b9:00:df:c6:d1:07:2b:f7:a8:
                    ab:50:cf:af:41:84:2a:7e:2e:94:1e:cc:b2:00:7b:
                    f6:49:07:f0:7d:ad:b5:fa:dc:7f:a7:fb:94:e1:2f:
                    27:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:89:05:52:A0:87:B8:E5:9A:DF:1A:ED:C6:46:6D:92:47:1C:0C:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a21c7690-b588-33ea-aa1f-70e1e5d48850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.133.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:27:b8:3e:a3:5c:c6:41:31:ec:79:ad:7a:b0:ce:09:27:
         ba:a5:70:b5:13:23:e6:f5:86:63:15:d7:86:7b:d9:21:5a:51:
         a0:f9:b4:3f:7a:45:5d:a6:c1:e8:44:d5:aa:43:aa:17:a3:9b:
         4b:b1:46:6e:88:a3:c2:69:ad:08:6f:e0:57:1f:0f:ed:aa:57:
         f5:6c:f4:7f:d1:f4:7a:98:dd:be:97:ff:cb:13:62:6a:9b:be:
         11:17:c7:dd:76:f7:8f:ff:46:3a:20:46:19:46:d9:14:15:e7:
         97:64:e7:ae:d3:9b:bc:e7:fd:52:74:fc:42:ff:c0:6b:ca:27:
         db:32:f4:44:ae:5f:e8:5f:4a:b8:b9:15:32:1e:d0:25:b3:e7:
         e8:0f:52:b3:d1:d2:a0:ac:e9:1a:70:d8:d3:1a:c8:4b:a3:f8:
         09:86:08:0b:fb:6b:3c:f2:a1:cd:19:20:79:50:a2:32:95:c2:
         42:92:ca:94:de:25:d5:b1:2d:01:bc:55:90:8b:c5:e3:d8:35:
         2c:b5:38:3b:f1:b7:64:22:c1:67:b7:58:97:c1:0d:1a:ee:9f:
         c2:8b:d2:27:51:26:fc:fc:37:f1:9f:7e:f2:96:ba:b2:f6:49:
         6f:c4:65:f6:1d:1d:30:7c:93:29:7f:c1:7d:26:ba:99:0c:0f:
         a5:64:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:25:21 2025 by rpki-client