Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/f12ff0ce-20e8-32e8-a59f-12d8dc608c89.roa
File:                     f12ff0ce-20e8-32e8-a59f-12d8dc608c89.roa (raw, json)
Hash identifier:          trK1sHA2NQcSEfUhTwmPPzJZxWANVAp9u/OD1clwKQs=
Subject key identifier:   4D:56:5A:19:3B:3C:6A:E8:37:9C:0A:74:82:3C:B4:A3:A6:B1:37:E6
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F4328584908816680A0AD8C47C77E7A90
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/f12ff0ce-20e8-32e8-a59f-12d8dc608c89.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     399817
IP address blocks:        64.29.130.0/24 maxlen: 24
                          2607:f3a0:a002::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:66:80:a0:ad:8c:47:c7:7e:7a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=50fad929-3248-4725-9394-3b213afc3b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b6:91:e9:46:10:b1:75:30:1a:4c:31:80:c1:
                    e6:99:c8:67:02:40:14:6e:59:f1:c0:c9:c8:20:c7:
                    ed:81:8e:9a:6c:c4:75:a8:37:5d:f5:a0:7e:6a:f3:
                    a4:cc:e2:e2:1e:48:65:0d:b2:ec:d0:5a:42:1e:0c:
                    d4:da:20:c6:ae:25:aa:66:d6:71:33:bb:93:a3:0b:
                    af:41:8e:1d:1b:53:0d:d0:53:6d:7d:1c:94:8c:cd:
                    89:d3:d4:3c:d7:88:16:d3:ac:2e:10:d1:6b:19:1a:
                    be:db:6e:61:f7:ac:41:68:23:a1:7f:be:31:23:e1:
                    06:a2:3e:4c:ee:d3:ae:79:82:5d:5b:94:4e:34:ee:
                    9d:58:91:d5:a3:34:98:ce:4e:d8:d6:11:af:52:d4:
                    34:a2:a5:ac:ff:84:3b:e2:67:4b:1a:d1:58:b7:79:
                    0a:1b:8c:7b:0f:ff:a3:75:2e:9a:62:8b:6f:c2:68:
                    43:12:44:31:86:05:bb:81:14:87:46:c6:bc:d8:45:
                    23:3f:a2:b1:f9:fe:cd:cf:1a:09:5c:6b:7b:70:f4:
                    80:a9:68:44:79:07:10:33:92:06:6e:ae:0e:bf:20:
                    18:10:ef:01:7d:20:67:c2:d9:27:fd:1c:db:75:a7:
                    d6:77:d1:f7:ec:a9:60:17:27:4a:05:8c:4b:a8:21:
                    26:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:56:5A:19:3B:3C:6A:E8:37:9C:0A:74:82:3C:B4:A3:A6:B1:37:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/f12ff0ce-20e8-32e8-a59f-12d8dc608c89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.130.0/24
                IPv6:
                  2607:f3a0:a002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:89:21:2e:a3:6c:d0:d6:fe:97:db:b9:58:c9:fd:30:a8:35:
         3b:23:4f:40:99:7b:3c:7e:dd:38:bd:2b:48:71:96:91:26:84:
         76:22:36:c2:3e:77:44:23:13:4d:f4:3f:66:49:30:8f:9f:3f:
         a1:7a:89:92:c9:31:de:f1:32:d4:17:b5:09:11:11:b3:4d:20:
         5e:be:fb:4d:82:a3:a8:c9:35:26:72:87:18:d4:f4:e6:9e:94:
         0e:eb:fc:e9:04:23:4d:25:3a:31:3d:c8:77:9f:6f:38:eb:8e:
         e1:78:a8:a2:a6:76:c0:95:0e:61:19:2a:5b:a4:0f:db:fa:c7:
         66:39:54:11:99:4b:cf:95:eb:2c:14:f8:16:be:19:5d:ba:b2:
         55:dc:ab:bb:f8:ad:89:6a:09:ee:83:b6:05:f0:b5:ca:d0:c4:
         07:8d:37:3b:4b:cb:31:4b:f4:9a:c0:42:23:57:7a:0f:45:53:
         0a:79:b0:e2:9c:8d:52:7b:91:5c:ed:a9:66:14:77:50:1d:8c:
         4c:0e:b6:60:ca:60:6a:ab:0d:21:c2:36:5f:1c:96:d6:9d:75:
         c7:d0:db:c7:d5:4e:85:a8:b7:93:b0:3d:89:e2:1d:67:15:e8:
         78:21:9c:ae:15:a3:35:70:68:e2:43:14:52:b0:b4:1c:fd:8a:
         bd:02:17:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:43 2025 by rpki-client