Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/b57366f2-ba5d-3b86-8153-6c0e6d7d4058.roa
File:                     b57366f2-ba5d-3b86-8153-6c0e6d7d4058.roa (raw, json)
Hash identifier:          jCl8tYhkovX3O6jlyjp1KpBNu82b55LA77knOuyYNGg=
Subject key identifier:   4F:31:07:00:32:BB:3C:C7:B3:13:A5:9A:5B:62:E1:80:EF:D1:23:A1
Certificate issuer:       /CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
Certificate serial:       010D0C9F43285848EF61659BF8C314399F272A40
Authority key identifier: 2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/b57366f2-ba5d-3b86-8153-6c0e6d7d4058.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     63290
IP address blocks:        66.245.179.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:65:9b:f8:c3:14:39:9f:27:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=e71aa758-13f1-44c9-a22a-f34c2f24c2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:3b:82:79:ca:fc:7c:5d:48:cb:1f:be:ea:
                    16:22:0b:5d:03:1b:b8:43:dd:14:93:5d:a8:95:8a:
                    78:4a:49:ed:93:91:d2:59:4e:c2:67:b4:cf:3e:6a:
                    df:dd:da:51:04:af:66:80:b8:65:ad:44:ca:6d:f4:
                    07:df:dc:85:06:cb:3c:c2:42:9d:ea:76:8e:fb:19:
                    b7:78:b5:41:18:ec:72:64:7d:2d:06:be:a3:21:1c:
                    d6:ac:2c:fe:fd:0e:7f:06:50:f8:0c:87:aa:1d:ae:
                    c7:83:cf:a5:90:bb:29:cb:79:85:8c:18:ab:64:f0:
                    49:5b:6d:ca:89:50:0b:b1:ab:70:e0:07:a3:a0:2b:
                    ed:5d:fa:24:9e:1c:4e:d5:d5:9c:e0:92:f1:71:75:
                    5f:11:c7:0a:45:61:65:a0:df:be:cd:bc:85:86:47:
                    ac:ce:0f:74:38:da:22:3b:a4:90:1f:e9:96:4a:00:
                    da:0c:35:0b:67:4a:3a:8b:c8:95:78:03:84:bc:d7:
                    8b:97:22:58:b7:82:d8:af:1e:db:aa:23:3a:f1:9f:
                    e5:48:21:46:f3:c1:a1:c0:51:ba:9b:8a:2b:e8:cd:
                    87:ef:e7:65:4f:ff:2b:81:dc:3e:ef:4b:d8:cc:87:
                    76:5a:3a:c2:7e:a0:2e:13:e8:ad:0c:2e:77:92:95:
                    a9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:31:07:00:32:BB:3C:C7:B3:13:A5:9A:5B:62:E1:80:EF:D1:23:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/b57366f2-ba5d-3b86-8153-6c0e6d7d4058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl

            X509v3 Authority Key Identifier:
                keyid:2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:98:33:8c:3f:ae:f6:be:dc:72:f1:44:a7:76:c3:b3:62:5a:
         63:e1:9a:24:1f:7f:af:0f:88:8f:30:cb:9d:69:d1:f4:e2:9c:
         7d:d4:74:a9:ad:4b:74:29:c0:75:e0:fe:03:b1:54:14:59:a2:
         df:f7:a1:6e:bf:09:c9:29:10:92:e4:44:7e:93:19:5a:dc:67:
         f3:f8:9f:cf:61:39:7e:25:8f:d9:0b:3e:9c:20:e5:d2:d8:ea:
         2a:53:a4:5a:9a:99:b5:b6:f4:b0:23:8a:93:f8:3e:ab:73:3a:
         4f:0a:71:3f:e5:44:8b:84:5a:8b:3d:c9:9c:7c:dd:fc:36:d2:
         df:5b:88:30:6e:7c:82:40:9c:0e:a6:f6:a1:f6:0c:6e:a3:3a:
         43:2b:4d:57:d9:93:2d:91:8f:e6:ca:d7:81:84:e9:a6:4b:9d:
         3e:cb:6a:48:2c:f8:5b:1c:2c:8c:91:df:88:64:48:ff:3a:82:
         ac:6f:34:3c:fa:fe:66:e3:e0:c0:7a:dc:e3:e0:d3:2f:12:bd:
         39:42:3e:2a:4f:10:f2:b1:6b:e2:1f:27:19:56:8a:88:f7:af:
         f9:47:f4:d7:e7:2b:5e:91:5a:c2:a0:da:ad:83:23:95:b3:6a:
         a5:35:af:8a:59:42:99:a8:b6:c8:0e:64:13:e6:f5:be:9d:df:
         a4:14:6e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:44 2025 by rpki-client