Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ea9936b9-42b4-3435-bead-fb27ca303a8b.roa
File:                     ea9936b9-42b4-3435-bead-fb27ca303a8b.roa (raw, json)
Hash identifier:          VlX8Jw3et8/10Dm1+OphWW/1shZaja9ngGKO69UANwc=
Subject key identifier:   F2:72:A6:E7:C3:D6:5C:52:41:B8:A6:B0:70:F3:CB:13:7F:BB:E5:2F
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285848F4F6A070D6B3AE575DB85900
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ea9936b9-42b4-3435-bead-fb27ca303a8b.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     8560
IP address blocks:        66.179.136.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:a0:70:d6:b3:ae:57:5d:b8:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=7e7ee5f5-3215-462e-a121-d478e2c11b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ae:b0:e6:c2:9d:84:bc:f4:1b:a2:51:ab:4c:
                    a5:48:1b:15:e1:f2:c7:b1:68:61:88:a9:d1:7d:d3:
                    d7:29:16:6b:9a:fb:a3:11:98:d5:69:13:88:3e:44:
                    6a:cd:75:3b:f7:d4:9f:09:39:45:df:b2:18:12:e9:
                    85:03:ef:9c:4f:11:6a:64:34:35:cc:06:1a:0e:89:
                    72:06:f4:b7:a4:31:bd:9d:e4:82:de:62:a4:36:ea:
                    7c:db:c1:e6:64:1c:ac:d3:49:b2:4a:58:f2:81:31:
                    ba:ae:46:5c:91:e3:74:a4:09:6b:a9:9b:4b:e0:bc:
                    e6:0a:fe:2d:ba:c6:2c:25:50:d2:96:b5:03:ec:e3:
                    b8:63:fb:30:81:62:2a:dc:6a:82:63:3b:eb:bb:3a:
                    3a:3d:91:b0:c1:92:13:b4:bf:c5:37:fe:7c:03:b8:
                    fd:65:c3:98:90:be:b7:b5:3c:8b:d1:6d:3b:50:79:
                    b8:25:ee:c3:27:46:25:ac:5a:5b:07:d5:a5:ad:1f:
                    14:19:3a:8c:9c:ef:f3:1c:3c:62:3e:d1:1a:1a:6e:
                    a1:24:b4:b7:5d:5f:54:c3:8f:4d:28:68:d0:10:ba:
                    6e:13:37:f5:cf:2c:8b:c3:b6:34:4c:bb:19:79:68:
                    3c:da:40:8b:41:ec:a4:7b:81:10:6d:d5:6b:e6:e3:
                    20:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:72:A6:E7:C3:D6:5C:52:41:B8:A6:B0:70:F3:CB:13:7F:BB:E5:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ea9936b9-42b4-3435-bead-fb27ca303a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:fb:dc:93:34:77:3c:4c:f2:df:bc:a2:e6:55:75:4f:da:23:
         d7:0a:1e:36:67:2f:72:67:1f:a1:10:b1:1a:7f:6d:85:d7:72:
         d8:06:05:13:53:76:7e:59:dc:91:0f:9d:c6:3e:78:4e:1e:af:
         89:94:d8:5c:05:23:fb:12:e0:66:c2:82:74:4c:98:7a:5c:4c:
         ff:ff:d9:06:58:6d:1e:41:c9:15:c6:66:bd:f4:4b:9d:48:e4:
         26:91:15:7b:f9:85:75:57:72:d0:3b:04:e6:cd:eb:a9:73:65:
         55:d6:2e:8f:5e:66:e3:96:a4:37:e0:21:fd:87:5a:3d:08:fa:
         89:c8:6b:2b:e6:9a:96:27:62:4b:5f:7b:b5:b6:02:d4:26:8d:
         8c:f5:d4:aa:61:63:61:8e:68:ac:ee:86:e3:a2:9a:f6:fe:0e:
         ee:2b:ee:78:f9:bb:38:6c:84:a1:bd:cb:46:cb:59:9d:62:67:
         94:c2:43:3c:36:19:2c:85:3a:0d:68:b5:71:a7:e9:29:9c:44:
         85:cc:a7:77:eb:2b:0d:41:3e:97:5e:44:40:2f:c7:8c:fa:78:
         99:e5:33:18:4a:54:a2:25:d1:c2:85:98:15:e5:c3:3e:5f:d9:
         0a:91:85:84:fa:62:c7:ac:65:fb:51:7d:90:69:9d:f1:7d:29:
         c6:e3:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:44:51 2025 by rpki-client