Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d5141c2-5e05-3d5e-b35d-2ec77fb779cc.roa
File:                     3d5141c2-5e05-3d5e-b35d-2ec77fb779cc.roa (raw, json)
Hash identifier:          WF+Dm7PcMhUFjFgD6iyqgfvrILZzN1mTFOE+lWBZGD4=
Subject key identifier:   8B:20:95:EC:3A:B8:9C:65:D5:7C:92:4D:EC:67:90:6B:99:F0:04:01
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068F7A41EB842A36BEC600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d5141c2-5e05-3d5e-b35d-2ec77fb779cc.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        50.88.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:8f:7a:41:eb:84:2a:36:be:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=6b870e0d-4bab-477d-8c49-6611386caa8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:51:d3:03:2e:3c:12:55:ca:2c:33:ad:9f:77:
                    e6:53:cf:b2:52:be:75:a7:06:6b:fe:94:fb:3c:62:
                    e6:ee:74:c3:a0:c6:65:f5:95:7f:8d:65:23:49:f5:
                    d6:f3:3f:53:15:73:2d:11:19:d8:fd:03:42:7e:31:
                    5a:a4:4e:91:5c:01:3d:10:1a:13:2a:46:18:62:57:
                    4a:c6:a6:fa:17:9d:1e:e6:64:6f:d8:95:d9:cc:71:
                    7e:ae:03:bb:7b:66:9b:89:bb:19:c4:00:ee:84:64:
                    13:18:7d:cd:d2:9d:31:13:94:24:d6:4e:6e:80:9b:
                    37:bc:0f:f3:43:19:f5:e9:33:d4:51:78:78:a3:fd:
                    c7:64:d5:07:6f:89:e5:31:4c:1c:5e:33:f7:d1:d5:
                    a2:88:10:7d:d5:17:89:0c:95:62:02:b7:ce:20:b8:
                    e2:44:23:e2:d0:97:57:1d:f8:0e:e6:86:b1:da:85:
                    79:23:08:fb:17:19:b9:d8:8c:28:c1:6e:40:bc:fa:
                    77:8d:1b:e0:56:30:7b:e3:4f:29:c5:c9:01:2e:62:
                    c9:cd:ef:64:0f:4e:a6:c9:2a:f4:bc:6f:bf:9c:b7:
                    c0:ee:8d:af:22:7d:70:a2:0c:3e:74:38:f2:4b:f7:
                    4b:2f:88:97:ff:42:14:fb:c7:03:63:28:2f:cd:e4:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:20:95:EC:3A:B8:9C:65:D5:7C:92:4D:EC:67:90:6B:99:F0:04:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d5141c2-5e05-3d5e-b35d-2ec77fb779cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.88.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:8b:fe:bd:4a:8b:c3:5b:4c:46:0d:e4:45:c1:07:b9:ea:51:
         68:88:b1:f9:be:73:8f:65:bc:63:bb:2d:16:3d:92:ab:30:ac:
         96:ff:7b:26:db:0b:99:45:66:47:42:d8:ac:9d:f3:6b:80:c1:
         6a:65:c5:28:c7:7e:d9:f0:0e:b3:fa:0e:92:32:fa:86:0c:28:
         e6:c6:b8:c2:d8:d3:5a:25:1b:a8:15:8b:e0:8f:c7:d7:1e:47:
         0b:7d:af:44:51:09:ff:00:ad:0d:bb:5b:3b:63:0b:1f:e0:22:
         9f:61:9f:16:c3:05:ac:12:f7:e4:63:d0:4d:ce:c8:83:46:d9:
         d4:7a:6a:5d:31:f6:da:e5:f6:6a:ab:49:5c:32:a6:9b:c5:cc:
         62:ce:49:30:c1:80:fe:de:db:75:b7:c7:24:ad:26:81:0c:35:
         84:ca:0f:3d:76:1a:a1:06:fc:fb:15:25:a6:71:2a:46:0e:a1:
         bc:77:0c:c2:57:9c:37:1b:f7:92:56:ab:d1:ce:8d:db:dd:f0:
         2e:77:fd:b5:c5:b7:8b:65:7a:7b:f1:f5:e5:e9:2a:8d:9b:1f:
         88:c8:97:3d:80:91:ed:55:fb:c5:6e:ea:6b:fe:22:bd:ad:61:
         43:8b:99:78:bc:1e:6b:20:ac:2e:1c:95:e3:7a:aa:17:f6:42:
         c3:e0:be:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:43:18 2025 by rpki-client