Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/29efb40e-228a-3391-a091-a1b4b914ffcc.roa
File:                     29efb40e-228a-3391-a091-a1b4b914ffcc.roa (raw, json)
Hash identifier:          /LzvhlnpFMvCK7C/QYMowCSEn9fopJiRm52rh5ZHKJg=
Subject key identifier:   34:FB:10:32:48:F3:6F:E8:72:BA:16:83:F4:14:28:DB:A7:CF:44:67
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F43285849350E97A2E0954FBBF2654900
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/29efb40e-228a-3391-a091-a1b4b914ffcc.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     36511
IP address blocks:        74.116.93.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:97:a2:e0:95:4f:bb:f2:65:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=f6e9ff8a-58c1-40f3-beac-027c5fc15236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:93:9a:2f:ee:4e:b7:16:c3:22:22:f2:51:
                    6d:07:9c:da:b0:44:64:6c:6f:75:96:f1:0d:0a:cd:
                    4d:e1:51:54:56:11:cf:87:e0:c7:a9:1a:22:b9:57:
                    c7:d6:6a:a5:87:81:3b:37:34:be:35:91:16:d9:ff:
                    03:a1:4d:8a:35:bb:af:f7:8e:6c:7a:3a:e8:23:a3:
                    71:ac:74:9b:ae:57:36:91:17:91:9c:f4:e0:00:fa:
                    e6:fd:d1:12:ed:2f:cf:56:b4:fe:b0:30:df:3e:f8:
                    ee:a1:b4:3c:1f:d1:c4:d9:c3:d5:8d:ae:0a:d5:7d:
                    76:06:5e:87:b4:67:ec:36:0e:7b:4e:6d:51:f2:e4:
                    09:d6:c6:0c:0b:a8:99:72:7f:47:7f:f3:fb:ad:ad:
                    40:f5:a3:cb:7a:3f:86:01:87:df:0b:22:6c:94:03:
                    c6:dc:96:17:07:47:7b:90:a2:9a:7e:55:58:09:b5:
                    ae:55:ee:f4:50:91:ff:63:4b:ad:0e:52:9d:3a:a9:
                    37:72:dd:d4:82:51:55:56:e3:df:ff:9d:05:92:b8:
                    c2:20:c7:4d:5d:e5:77:49:3e:8f:65:ef:32:9c:00:
                    1d:37:fa:f9:79:fa:04:21:8b:92:1c:5d:66:11:88:
                    bf:ae:36:fa:aa:5d:9b:e0:51:53:44:76:a8:28:f0:
                    80:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FB:10:32:48:F3:6F:E8:72:BA:16:83:F4:14:28:DB:A7:CF:44:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/29efb40e-228a-3391-a091-a1b4b914ffcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f2:d1:5a:98:df:04:c4:8d:bb:81:c9:83:3b:d4:10:eb:5b:
         de:ff:82:b5:6a:80:4f:98:91:a9:d8:57:8a:ad:11:f4:71:e3:
         85:f1:32:8a:4a:16:dc:e3:e7:bd:d8:9c:23:ed:60:62:e2:33:
         79:55:d3:ee:df:c0:ce:43:70:40:ba:b7:13:5b:28:ff:2d:99:
         4c:70:9c:2b:70:b8:07:de:a8:45:eb:62:0c:8e:a9:ed:fb:0f:
         85:2f:10:f5:e5:28:82:32:41:3c:53:96:04:61:7c:bd:7d:ce:
         02:9f:c8:94:40:98:09:b3:7e:34:5d:f0:97:ad:aa:19:de:47:
         3d:f5:bb:26:17:92:78:8f:af:3b:ab:7f:ad:fa:bd:9b:b1:fb:
         18:54:fd:46:0b:81:32:69:b4:76:fc:c8:a7:b4:f9:8e:d3:17:
         61:97:c0:2b:86:9c:2e:4f:40:d2:da:f9:ca:12:ae:98:32:d7:
         de:7e:e0:b8:ef:b6:06:a3:e6:d6:4d:73:6c:cf:f8:a8:bf:77:
         91:a4:2f:80:97:d1:5c:c6:b9:52:48:00:63:6e:18:d6:3f:1c:
         fb:01:a7:ac:3d:48:94:cc:1b:66:22:d3:48:62:88:6e:fe:98:
         6d:61:96:6b:96:57:41:0c:be:5d:4d:40:6f:dc:e0:1d:89:5c:
         c5:bc:e8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:26 2025 by rpki-client