Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/5313ce26-5bc0-3011-8330-6204bfaa746c.roa
File:                     5313ce26-5bc0-3011-8330-6204bfaa746c.roa (raw, json)
Hash identifier:          FDp/zmSsFSYrs21SRVzmx753ze4RviGAWBdZDGpMVj0=
Subject key identifier:   64:36:B9:80:58:FB:D4:96:5E:17:52:5A:38:B5:2B:10:CD:A7:3F:30
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F4328584940394EA9A0E49A3EDEFDBE00
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/5313ce26-5bc0-3011-8330-6204bfaa746c.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     33392
IP address blocks:        74.116.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:4e:a9:a0:e4:9a:3e:de:fd:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=fdf50468-bcba-4823-a3dc-c4bf6c883087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:55:fa:0b:f0:6b:a1:92:d8:55:16:60:e1:88:
                    0b:c3:30:66:a9:3e:28:f6:cf:56:0b:b6:8e:9b:18:
                    bb:6c:71:f5:d3:88:ad:ca:b6:1d:6e:ad:9d:99:d0:
                    83:b9:ff:85:25:61:ab:20:68:3f:b6:fb:21:e0:bc:
                    2d:bf:ab:c1:62:ac:ff:f2:80:22:d5:26:39:d5:b8:
                    43:f0:87:44:ed:92:18:b2:aa:b8:30:bb:f1:1f:db:
                    81:0c:c8:57:4e:6b:29:0f:dd:5b:40:c4:67:6b:81:
                    55:b1:fa:db:54:c7:fd:9e:e2:e6:f5:69:c6:00:12:
                    98:da:23:72:4a:9f:6c:7e:4b:ad:41:bb:05:fc:21:
                    e8:2c:be:40:36:7a:12:eb:dd:35:9a:93:3c:b7:22:
                    5e:7c:87:13:3b:6f:fd:f6:2e:12:41:3a:b2:fa:de:
                    0d:b7:fa:cc:55:14:ce:d4:1a:fe:72:bf:d2:96:2c:
                    a4:78:de:78:79:66:a1:83:44:5e:0c:ac:a8:a2:7b:
                    f7:9b:b3:a5:97:be:61:20:d6:ed:a6:d7:b5:37:6b:
                    23:cc:50:a7:16:84:aa:43:c6:2d:7d:9e:44:ee:a1:
                    7e:18:39:95:5c:e0:51:c0:61:e4:1d:a5:8c:e7:7c:
                    84:3e:bd:19:0c:99:ca:f9:25:0e:cd:d9:82:85:cc:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:36:B9:80:58:FB:D4:96:5E:17:52:5A:38:B5:2B:10:CD:A7:3F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/5313ce26-5bc0-3011-8330-6204bfaa746c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:52:1c:49:43:05:0c:1c:3b:18:02:37:c1:58:df:72:5d:ab:
         1f:e9:d3:6b:bd:41:b6:c4:c2:d2:99:eb:b6:dd:b5:3d:2e:0c:
         81:6b:11:a6:f6:8f:09:de:1a:86:09:36:bf:0f:28:09:96:af:
         27:9b:76:39:b2:e4:36:fb:72:fd:68:a4:6d:1e:42:7b:98:64:
         71:2b:40:18:e8:43:cc:c2:99:5e:0b:8e:9e:33:9a:a4:7a:3d:
         b9:26:e9:f0:6b:44:b4:ae:ea:f0:09:f8:a6:4e:d3:29:ef:fd:
         49:c6:c8:b1:b3:e3:11:18:76:de:f7:2a:99:f3:f3:46:c1:09:
         da:c5:0b:3a:d3:92:ed:dd:6d:14:71:b9:d6:2b:b3:f6:24:bb:
         1a:a1:3b:7b:45:9f:bd:a7:76:5a:08:25:90:93:ab:c4:48:9c:
         67:2e:b8:df:df:ef:01:44:6e:43:8c:00:6b:a1:79:0a:42:df:
         5d:93:23:15:5c:57:8e:fb:f0:bd:d0:17:8f:67:38:63:61:b0:
         5b:cc:d3:7e:13:d1:e9:2e:df:1c:87:ba:7b:3a:de:e7:f3:a1:
         cb:a7:19:1c:db:e2:94:d4:9c:3c:a7:63:e3:41:22:74:57:dc:
         17:1d:11:ca:2b:12:75:16:79:49:b3:79:b0:fb:44:5e:54:12:
         de:16:23:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:02 2025 by rpki-client