Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/00d64141-df84-34ac-aead-5918812a6774.roa
File:                     00d64141-df84-34ac-aead-5918812a6774.roa (raw, json)
Hash identifier:          UXLCjyXKwa9LgKidOUqLMUx45v+p69yz+rOOMF2F6TU=
Subject key identifier:   C5:D4:C9:2D:9B:0F:F9:62:40:1B:A9:59:BD:03:D8:37:A3:C5:3F:C4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068B30739CBC055E2C48B0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/00d64141-df84-34ac-aead-5918812a6774.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        104.137.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:8b:30:73:9c:bc:05:5e:2c:48:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=61e70316-d8bc-42f2-814c-962eddc4de03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:8b:69:83:55:bf:7f:0e:45:64:cc:74:60:
                    da:78:25:35:fc:6e:15:ec:3a:31:a1:f4:17:10:ce:
                    12:6f:d4:1e:be:34:e5:ea:99:0b:cc:70:44:36:03:
                    70:36:51:2f:d9:ac:06:37:79:6e:f2:a4:0e:22:d4:
                    75:c6:d8:7d:ce:2f:15:84:7a:24:a9:4e:bc:80:f7:
                    f7:e9:7c:83:0f:43:fd:68:28:bb:5b:2e:d5:93:66:
                    42:e1:c5:e9:79:36:d0:1a:09:8f:db:f0:12:c7:92:
                    52:6d:35:84:f8:ec:90:49:d2:c3:5d:19:85:f2:ae:
                    e7:70:f2:93:ee:35:2c:3d:b9:27:f1:70:98:f3:c9:
                    9a:b8:4c:39:9c:ad:cc:e7:25:33:8b:56:21:d2:77:
                    fa:7e:32:df:78:cb:44:52:54:15:77:fe:e6:c0:99:
                    66:ca:8a:82:f9:44:21:79:c3:20:7a:3c:2d:5b:0c:
                    98:45:8f:bf:f8:37:a6:33:ae:3b:d1:92:a0:96:40:
                    2a:c3:ed:67:8a:6f:f3:e8:2c:8a:fa:d2:7e:36:81:
                    11:7b:48:a2:13:b6:a3:6f:22:d1:79:91:18:98:f0:
                    f0:d1:b0:c2:71:d7:c7:fe:f1:5b:5b:94:5a:14:02:
                    cd:ee:f1:1e:df:49:c3:49:ae:7e:2c:37:83:ff:e4:
                    7a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D4:C9:2D:9B:0F:F9:62:40:1B:A9:59:BD:03:D8:37:A3:C5:3F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/00d64141-df84-34ac-aead-5918812a6774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.137.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ed:ca:69:7e:99:a7:bc:5f:76:a5:ef:e9:33:58:22:56:47:
         b4:17:7b:a4:c3:58:24:79:bb:1f:fb:8b:46:4b:0e:0d:06:5d:
         94:36:52:f5:01:1e:11:0c:55:99:ad:ae:72:e2:49:7b:06:b2:
         6b:9e:83:3a:05:d7:41:2d:13:1d:de:f7:90:f2:18:db:1d:0f:
         5e:fa:60:39:27:43:fb:82:f0:2d:ab:a1:ef:4e:6d:89:86:23:
         7f:a5:af:db:ac:7a:bb:29:81:b4:4d:e1:aa:b9:51:18:d7:e0:
         48:c5:8f:b3:4d:a3:e8:81:78:5d:ef:32:c7:ae:9d:2e:a9:d3:
         27:25:7e:0c:08:f1:de:c8:4a:cd:8d:4c:ea:80:34:85:55:7a:
         db:73:d6:97:ad:72:20:b1:e8:2e:93:48:50:a7:a6:ff:04:dd:
         27:6e:92:5b:b3:4f:5b:e2:07:65:20:e3:93:71:c7:5b:c0:f4:
         0f:7e:e5:b9:8a:37:2a:3f:5d:b6:56:fa:38:d1:9f:ed:e4:93:
         ab:42:e6:20:2e:65:2c:6c:80:bc:b9:85:45:0a:6b:e6:e2:43:
         55:35:0a:3e:bd:f1:8a:b6:30:46:a7:3d:7b:98:f5:83:ad:d3:
         a2:bc:6f:00:49:16:e4:08:25:be:cc:2f:a5:4f:46:3a:f0:47:
         c5:ec:d1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:32 2025 by rpki-client