Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/65b83426-ac91-3f34-b308-4fce4d1b3e96.roa
File:                     65b83426-ac91-3f34-b308-4fce4d1b3e96.roa (raw, json)
Hash identifier:          vqg82rPWpWeMaVCB2Xn+xmDstCgO7kR06xIXcvlAf3k=
Subject key identifier:   3F:DC:F4:8F:F3:49:DA:BD:C8:DF:D2:B4:3F:E3:5B:4D:8D:D4:FB:DB
Certificate issuer:       /CN=719038d9-6923-4e29-8b36-f45b06ce12f8
Certificate serial:       010D0C9F4328584919EE7A9322EC8E343C503EC0
Authority key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/65b83426-ac91-3f34-b308-4fce4d1b3e96.roa
Signing time:             Thu 06 Mar 2025 19:49:32 +0000
ROA not before:           Thu 06 Mar 2025 19:49:32 +0000
ROA not after:            Wed 04 Jun 2025 18:49:32 +0000
asID:                     393238
IP address blocks:        142.204.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:ee:7a:93:22:ec:8e:34:3c:50:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719038d9-6923-4e29-8b36-f45b06ce12f8
        Validity
            Not Before: Mar  6 19:49:32 2025 GMT
            Not After : Jun  4 18:49:32 2025 GMT
        Subject: CN=80c14d43-4287-4875-a037-2817bc0d9bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e9:65:ac:31:de:b8:69:08:35:09:94:a4:b1:
                    5b:be:f3:d3:7b:4d:2f:2a:01:b8:37:77:d9:4a:9a:
                    66:1f:18:c8:d4:32:dd:fe:1b:a7:85:be:37:16:7a:
                    40:31:ef:0f:4d:12:92:9d:5c:d8:f2:db:ee:63:57:
                    c0:94:16:fc:e7:85:ed:71:a3:0d:5f:b6:06:5c:f9:
                    99:b9:c2:87:43:83:75:ef:9c:1e:6b:c5:5f:47:30:
                    da:b2:25:93:f6:69:63:8e:ca:b8:85:5e:43:d6:4d:
                    08:61:09:c8:15:91:fa:2e:da:09:37:43:7d:20:75:
                    70:97:32:4c:a1:49:df:25:75:01:fd:b5:4e:a9:d2:
                    33:e2:c5:46:f7:6c:60:43:61:d1:12:35:94:52:6a:
                    0f:de:19:3d:de:23:bc:9c:e9:44:ea:8d:29:cb:9c:
                    eb:71:87:d5:42:e9:fb:cf:87:44:b6:5a:ef:6d:dd:
                    b4:d3:3d:de:80:c4:e5:12:53:d1:64:a7:cb:87:3e:
                    e7:56:e2:ef:b2:5b:92:49:70:75:68:b7:52:84:60:
                    8b:90:9b:43:44:6d:e5:97:32:b6:d1:53:a1:73:76:
                    08:80:06:70:bd:65:27:2e:c2:2c:b7:9e:c1:ae:ff:
                    b2:17:f2:16:43:1d:d6:cb:df:b5:93:73:8c:75:63:
                    8d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DC:F4:8F:F3:49:DA:BD:C8:DF:D2:B4:3F:E3:5B:4D:8D:D4:FB:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/65b83426-ac91-3f34-b308-4fce4d1b3e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl

            X509v3 Authority Key Identifier:
                keyid:77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.204.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:cb:f1:52:16:57:ad:54:5e:af:f7:6e:13:76:ba:73:4a:
         8d:83:49:78:77:51:bd:f1:84:46:76:36:a3:5d:d5:18:bb:aa:
         6f:0c:0c:a8:7e:65:8f:c8:b2:70:99:d5:ee:91:d6:2e:30:d5:
         16:b1:cf:b1:bc:32:6c:50:2e:f3:70:5d:82:c5:fe:72:f3:6f:
         5c:95:ed:97:c7:10:fa:1a:41:b7:07:4a:b6:42:4d:e1:d7:65:
         f2:84:23:4c:d9:55:53:07:09:3d:eb:29:fe:71:73:a4:55:31:
         b9:d9:6e:ec:d6:1f:ba:8b:1c:08:da:d6:16:a3:fe:d0:01:db:
         9e:2c:6d:55:82:64:ad:b0:fb:00:27:a7:74:13:a6:68:89:5e:
         14:f5:79:c3:88:3e:23:83:dd:56:eb:bc:a4:39:33:84:f6:ab:
         e9:6c:e8:d9:c0:a0:42:f2:27:5a:b5:15:a4:90:ba:5a:ed:b1:
         75:83:3c:76:24:e8:b3:3c:ff:10:ab:c4:1e:be:8a:09:4a:a0:
         3e:59:33:4d:8b:49:e7:c4:32:77:6b:c5:3b:e9:fb:cb:45:9f:
         d7:9f:b8:97:5e:5d:d4:6c:dc:96:f8:be:ff:e1:5e:a8:05:da:
         a9:72:76:ba:46:3e:1c:8d:f4:52:32:45:9e:f8:66:08:e2:71:
         a4:00:52:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:26:22 2025 by rpki-client