Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/4d03a55b-bb08-30db-a7fa-ada71172dc66.roa
File:                     4d03a55b-bb08-30db-a7fa-ada71172dc66.roa (raw, json)
Hash identifier:          LRWWAQ8XWxBIeX+8yDTCfy/ub4kS3ypNOUHh5oYI+g0=
Subject key identifier:   B9:34:23:75:1E:AC:98:4D:DE:4D:3B:44:C8:72:3C:BD:FD:52:C6:E4
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285848F65BD61D1422C58C9ED11080
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/4d03a55b-bb08-30db-a7fa-ada71172dc66.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     14618
IP address blocks:        52.129.98.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:d6:1d:14:22:c5:8c:9e:d1:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=68edb6f6-9ff6-425b-9124-3c2126cdd03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ec:50:bc:a3:04:31:74:a1:49:ce:8b:b3:3d:
                    55:31:6a:68:c7:01:68:f5:e8:99:39:23:b8:1d:98:
                    5b:d9:e0:75:01:a1:ae:6c:a3:ac:56:b0:b3:56:c1:
                    a7:08:30:12:bb:43:10:a7:e8:84:a2:52:2c:7f:27:
                    32:cd:65:a8:2d:49:60:d0:1e:10:4d:8c:eb:9b:49:
                    e4:9d:6b:d7:04:dd:24:5d:84:41:e6:c1:51:29:0c:
                    ce:4a:f4:83:5b:d6:11:8f:fb:d3:c0:28:b5:99:bf:
                    41:b7:b7:22:9e:8f:b7:7b:e9:de:26:42:26:d1:18:
                    05:e7:5b:72:86:ba:85:05:de:b1:94:04:67:0b:dd:
                    14:31:78:2a:fd:f0:0c:ea:97:d4:ec:b6:0f:7d:9a:
                    c7:62:b7:eb:89:85:54:41:a7:3b:25:1f:7b:c5:6d:
                    75:5c:22:c7:87:e4:e7:da:1c:73:15:82:f9:a2:34:
                    41:15:8a:d3:e7:48:ac:a5:dc:29:d2:85:09:5c:79:
                    f3:3c:b0:00:93:67:12:d0:e0:dd:fa:4a:57:54:84:
                    29:17:b5:10:df:39:77:64:13:90:13:39:b4:b1:e0:
                    13:29:50:0f:ae:b7:e4:6b:16:77:33:78:60:fb:65:
                    d2:84:1a:81:21:85:41:4f:55:7f:99:ea:a6:59:be:
                    ca:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:34:23:75:1E:AC:98:4D:DE:4D:3B:44:C8:72:3C:BD:FD:52:C6:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/4d03a55b-bb08-30db-a7fa-ada71172dc66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e6:78:d0:d0:e9:98:91:bd:39:58:a8:40:45:e8:ce:b0:0d:
         cd:dd:2c:09:de:2a:9e:6e:6d:7d:fc:93:8d:a1:c7:64:e8:34:
         41:b5:64:5c:37:96:5f:0d:c3:95:31:3c:3d:f9:80:3a:4d:0b:
         f7:98:5a:96:75:0b:bf:b3:7e:6f:4a:d8:3e:fa:c5:7a:4f:2e:
         36:c7:07:1d:2e:da:76:bf:4e:e6:36:54:16:43:70:d6:70:41:
         78:2e:2e:21:b2:05:43:82:59:d4:fb:7b:21:83:56:54:20:57:
         59:7e:56:4f:fa:d2:1a:13:1f:d9:1f:8b:4f:1d:b5:25:7a:8b:
         17:d3:ae:b0:ec:1a:a1:a4:b2:80:39:61:bb:c3:d9:c0:ec:c0:
         7c:34:2d:51:90:71:19:f4:81:b6:49:69:26:30:c9:70:f4:51:
         ad:e8:c5:d5:e3:89:16:0d:fb:b8:3f:69:b2:aa:c4:64:10:25:
         38:16:95:23:50:5e:17:c8:b1:a4:a7:22:e8:f9:6e:5a:79:98:
         df:23:63:a2:12:0e:b3:fe:e2:21:28:52:d6:47:7d:71:23:25:
         fe:f2:d9:2f:ee:3f:2e:4b:da:1d:40:d6:c9:af:d4:69:9a:6a:
         f7:a8:7b:d8:34:c6:73:65:13:f1:4e:39:14:28:39:2c:0b:59:
         5e:25:4f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:25 2025 by rpki-client