Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa
File:                     b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa (raw, json)
Hash identifier:          kquth6fTZg0HIfwB9fkaiTf79VOpjt1tCl/hgV9MuEI=
Subject key identifier:   3B:8D:81:D8:11:F1:49:4D:75:15:39:5F:06:39:3B:0E:37:BC:FC:BD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00690F7DE1CC80DD89760C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        71.44.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:90:f7:de:1c:c8:0d:d8:97:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=df0d8b07-1d73-49c7-94e2-fcb7196fd2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f6:43:11:a2:63:31:bd:92:66:dc:4c:92:e1:
                    1a:f8:91:2c:20:52:1c:dc:9b:d7:e0:71:5a:bb:05:
                    d4:f2:d6:f7:99:4e:50:69:d8:42:f0:9f:c7:e3:a9:
                    34:8c:b9:45:2d:e0:96:85:0b:4f:85:9f:7c:97:02:
                    3d:5f:b6:6e:4e:c8:21:9b:be:ea:5b:bb:b6:54:18:
                    20:b1:a9:49:b9:b5:03:39:38:48:87:f4:69:5f:01:
                    ce:3b:90:b9:ef:22:c7:67:d2:b2:3c:4d:31:eb:83:
                    07:39:f6:e1:a5:c9:b2:3f:40:75:dc:08:f3:fe:a6:
                    9b:0d:a3:08:33:7c:7b:e4:47:15:3d:26:2f:af:9e:
                    ed:81:b8:c2:c4:5c:f3:42:d0:01:c0:9b:f4:02:f3:
                    ac:2d:6c:05:59:d1:8e:28:c4:39:6f:66:63:41:0f:
                    4c:2b:98:69:87:64:75:8c:79:c5:2f:70:75:d4:14:
                    25:42:b9:a9:7d:80:3d:cd:ac:b7:77:d0:5c:fa:e3:
                    68:91:2d:aa:d1:2b:4d:4a:f1:ae:08:fe:28:36:7f:
                    93:ba:ce:b7:d5:33:65:db:3f:c1:8c:76:02:41:65:
                    56:09:e6:a5:bd:41:66:17:73:77:d8:99:d7:7b:61:
                    69:02:cf:47:61:79:e5:a2:40:21:24:f4:80:94:01:
                    4c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8D:81:D8:11:F1:49:4D:75:15:39:5F:06:39:3B:0E:37:BC:FC:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:35:8c:9d:22:8d:ef:d9:8d:fd:b0:77:dc:d0:b9:fd:b1:03:
         3e:83:40:34:74:60:86:f9:7c:40:71:d0:c4:5d:a1:b4:43:ca:
         04:e3:2e:d6:8a:2b:ea:a7:8c:8b:e2:ca:52:e8:9b:d5:65:d6:
         c3:d3:44:2b:79:15:01:76:e6:a4:35:03:e0:ae:55:1f:8a:eb:
         a1:b8:83:7c:f9:87:73:e4:af:ad:8b:4c:67:5b:7f:93:34:5d:
         2a:e4:c9:94:c9:e3:03:48:e3:29:43:3a:50:f2:97:b7:fb:69:
         3b:51:5d:7b:81:44:bb:78:85:c6:93:30:8e:02:6b:b5:ec:33:
         cc:9c:e5:75:b6:73:54:5b:23:fa:43:4d:5d:3f:ce:43:ca:c0:
         1a:a7:40:53:3d:f8:21:82:07:a8:58:df:8f:79:a3:67:43:08:
         a0:e6:cf:e0:c9:ad:3e:5e:39:2a:78:94:a0:17:f4:5b:2a:39:
         20:13:58:b8:3c:11:b0:1d:9c:ae:9f:db:73:0d:7c:e1:1d:9d:
         41:01:22:b3:d8:75:35:f4:89:f6:79:8c:96:d4:40:8d:e5:42:
         bb:c6:aa:5c:a9:e4:e0:1e:5a:0d:1b:58:d1:c4:e3:34:01:b0:
         ca:9d:33:42:0b:a3:de:34:45:d7:1b:de:25:d2:0b:f2:a2:49:
         1c:31:0d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:43:20 2025 by rpki-client