Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4064f4a-37a1-33bd-9b6f-c8bcd3563cad.roa
File:                     c4064f4a-37a1-33bd-9b6f-c8bcd3563cad.roa (raw, json)
Hash identifier:          oSglwC7oQSmddim9whja4rDsui1BjOtWKooBxUQXyXY=
Subject key identifier:   3A:BB:2C:17:B7:48:B0:C1:EB:5A:AD:FE:68:A5:81:9F:23:CA:07:08
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BAF0F5E8FF8C6D8F8BA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4064f4a-37a1-33bd-9b6f-c8bcd3563cad.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     19527
IP address blocks:        35.216.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:af:0f:5e:8f:f8:c6:d8:f8:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=a3ffb374-d366-4b76-ab29-ae58097c993b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:40:7d:72:da:c9:7f:f4:03:c0:1e:70:98:
                    50:87:0c:61:06:49:07:17:c1:ce:e1:3d:9f:0e:04:
                    36:09:99:a1:fa:00:a5:a8:ea:33:20:78:a4:51:81:
                    ec:49:2c:d6:24:b3:e3:c4:d5:9b:50:2e:fe:02:ea:
                    f6:eb:79:5d:2b:00:01:e5:a0:05:26:69:85:99:47:
                    44:b2:64:75:03:a3:aa:b6:87:f6:ee:dc:b3:8e:58:
                    1b:0b:de:81:69:dc:c0:b9:e5:71:8f:2d:bd:35:b6:
                    60:e6:08:68:91:a6:75:f9:ce:fb:de:0c:4c:ec:24:
                    da:8a:e1:55:a8:49:ef:59:33:c0:e3:b7:49:0f:6c:
                    7c:42:db:53:d8:4b:02:18:ed:bf:24:4f:c6:d9:29:
                    e2:2f:f3:ef:b4:06:9f:5b:11:bf:93:6c:1a:bf:f8:
                    a4:2c:83:8a:31:66:5a:50:4e:c8:f1:22:7d:d0:4d:
                    8b:e3:67:0c:82:34:df:d6:50:e0:de:78:6c:6c:47:
                    1d:cc:b7:b2:b4:54:a3:f0:ed:2a:7c:d9:46:d2:61:
                    fe:65:ac:66:f0:7d:a9:87:17:26:7f:c4:af:76:b8:
                    f6:4e:73:88:e9:1d:2e:be:01:79:53:7d:53:ab:99:
                    c3:ac:ae:2a:d4:1a:eb:d0:3e:4e:36:47:b2:4a:ec:
                    00:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BB:2C:17:B7:48:B0:C1:EB:5A:AD:FE:68:A5:81:9F:23:CA:07:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4064f4a-37a1-33bd-9b6f-c8bcd3563cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.216.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:88:e2:33:64:3d:9a:d9:a2:34:0c:74:bb:7a:27:28:a5:96:
         6a:8b:03:0c:3d:fe:bd:7a:fc:8c:a0:cf:80:11:aa:f2:49:2e:
         ac:ea:43:25:cd:c5:f0:0a:fe:a2:c4:a5:32:f5:d4:34:7a:df:
         2d:05:06:92:08:cb:8d:b0:62:67:84:6a:1a:4e:e7:43:21:b5:
         99:a3:57:f3:3d:61:70:c7:17:49:df:ed:de:42:78:46:9a:4a:
         76:ca:68:f7:79:47:12:f9:91:4a:af:7a:89:03:5f:42:55:a5:
         b6:4b:fa:d6:c5:cf:36:b7:c0:35:d4:bd:20:f5:ff:71:1e:47:
         fa:ce:94:22:a9:2f:e5:2c:cb:2c:65:73:9a:b8:40:ad:34:78:
         f8:6c:b5:51:fb:0d:62:07:1f:66:99:38:6c:88:35:97:44:0b:
         bb:c0:6b:88:c8:6d:f8:d8:1f:49:b6:1e:cd:27:27:ce:7d:a7:
         9f:b6:b5:9b:28:a4:70:f1:18:b6:9e:00:04:31:1c:7e:3d:88:
         0e:34:3b:5b:82:19:23:61:25:23:f3:10:df:79:21:71:3b:3c:
         5b:62:c3:43:30:e5:21:1c:3b:cd:74:71:12:00:f4:67:45:a7:
         b1:8e:87:4d:58:54:a7:9b:b7:c8:73:d0:e5:78:ac:c1:65:07:
         52:e7:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:42:12 2025 by rpki-client