Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/3f920350-5b1c-3b42-8ab9-7751f4f415d1.roa
File:                     3f920350-5b1c-3b42-8ab9-7751f4f415d1.roa (raw, json)
Hash identifier:          1tFydI5hIcRNSRsPM9IOwwAJIKNjM2daBVFyLoyNZR0=
Subject key identifier:   C1:93:6A:A9:0F:52:78:77:F3:40:BC:A1:6C:F3:DD:68:FD:8C:5C:69
Certificate issuer:       /CN=e0647553-32ca-48b6-be58-d6c7f475e654
Certificate serial:       010D0C9F432858487A208B1E164AA1AC548ECA80
Authority key identifier: 3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/3f920350-5b1c-3b42-8ab9-7751f4f415d1.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     7784
IP address blocks:        65.79.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:8b:1e:16:4a:a1:ac:54:8e:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0647553-32ca-48b6-be58-d6c7f475e654
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=ea551f26-126d-4767-b43c-94d90e23438b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:59:82:d1:17:1e:14:da:7c:c7:09:00:60:79:
                    88:c5:47:a9:a4:c9:27:32:b5:47:89:71:a1:29:7c:
                    22:3d:ca:35:97:29:a6:ad:c0:58:0c:df:f3:db:28:
                    a5:10:c5:e7:98:c5:23:ad:fb:28:b2:c5:3d:ec:37:
                    a3:c8:90:a3:4f:a1:0e:b0:c3:df:c3:19:51:d8:ce:
                    d4:65:7e:66:7b:11:62:00:3f:ea:d4:c3:1d:e7:f6:
                    e0:d2:db:e5:99:da:15:9b:c9:37:fd:bb:31:1c:b7:
                    21:86:5c:67:e4:60:a0:a4:e8:db:61:80:e2:c2:01:
                    3f:8a:c9:78:fd:68:d6:e8:03:c4:42:f8:01:05:0c:
                    e4:1a:08:49:0a:c1:49:46:f5:4f:24:59:de:47:ee:
                    24:1b:45:77:18:b7:2f:72:93:00:97:34:ee:9d:64:
                    b8:c0:45:c2:d2:f2:04:f9:e4:c0:d0:21:d9:bf:1b:
                    6e:0d:01:cd:44:6f:80:0e:e5:e3:dd:46:e9:b0:d0:
                    d3:3d:58:53:19:92:e3:79:71:f5:be:4a:1b:4e:a0:
                    37:b2:5d:eb:b5:eb:ee:93:25:fc:39:50:65:ba:5a:
                    97:a3:db:d2:c7:7a:eb:8d:0a:c6:a0:57:f2:3c:d9:
                    9e:62:97:81:d6:56:7c:1d:6c:b7:87:b8:2b:03:c1:
                    34:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:93:6A:A9:0F:52:78:77:F3:40:BC:A1:6C:F3:DD:68:FD:8C:5C:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/3f920350-5b1c-3b42-8ab9-7751f4f415d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.79.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7d:a6:a7:7e:ea:20:ac:fd:26:f1:73:69:7c:42:62:1b:43:
         5e:27:88:b8:5d:ad:65:9f:1a:f3:6b:8e:cb:5f:e5:e1:9f:5d:
         e3:93:f9:67:c3:8a:a6:2c:b4:d9:ff:74:05:aa:bb:0a:0d:6a:
         4e:7e:52:e9:39:90:cb:89:20:24:ac:3f:84:8b:aa:17:86:6d:
         9e:99:03:3e:4d:52:18:4b:92:de:6f:32:e9:1c:8e:43:14:3f:
         bb:15:c8:5f:5f:cc:0c:11:76:0a:ca:ef:dc:86:de:f9:61:86:
         f6:b4:8d:cb:04:0b:14:fc:82:1d:cd:74:f6:e1:97:6e:7e:e6:
         bb:4e:e0:45:66:2f:e4:ec:61:00:a3:ec:28:af:9a:9e:9f:9b:
         da:b0:85:b8:4f:04:10:7d:3e:09:e5:aa:c0:24:da:b5:1d:fb:
         a2:67:f1:f9:7d:9e:7b:e3:3e:c4:6a:2d:54:98:b9:3b:83:16:
         f3:71:fe:eb:0e:d9:92:36:29:72:b5:b3:41:69:d0:a1:92:8a:
         a9:f6:42:a4:52:78:e6:09:4a:c9:9f:9a:0c:8c:5c:1c:e3:f9:
         b0:2d:cf:e5:3b:41:c6:80:d4:49:a8:c2:60:3c:29:72:20:cd:
         20:b0:52:4f:01:6b:6e:31:cd:ea:f3:8e:bc:4a:21:cc:2f:89:
         fd:b0:ae:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:22:51 2025 by rpki-client