Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/386208eb-3986-3358-8dc9-d4734254711b.roa
File:                     386208eb-3986-3358-8dc9-d4734254711b.roa (raw, json)
Hash identifier:          1N00yKoAO+CkVpQwhnnp8zWNt3JBtGVUWrsfdROXPPM=
Subject key identifier:   0E:33:FF:4D:0C:8B:95:85:61:29:E6:CC:2F:0D:AA:BA:A9:4A:4C:77
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285848C8633BE0DC2075F300AAF1C0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/386208eb-3986-3358-8dc9-d4734254711b.roa
Signing time:             Wed 05 Feb 2025 14:48:30 +0000
ROA not before:           Wed 05 Feb 2025 14:48:30 +0000
ROA not after:            Tue 06 May 2025 13:48:30 +0000
asID:                     834
IP address blocks:        75.127.88.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:63:3b:e0:dc:20:75:f3:00:aa:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Feb  5 14:48:30 2025 GMT
            Not After : May  6 13:48:30 2025 GMT
        Subject: CN=a208e82b-33f6-456c-91d4-9d3f043e4dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ff:35:db:6f:73:1e:c2:2b:c0:93:30:f2:9c:
                    93:24:b8:f7:75:e0:c7:06:42:86:d9:6c:29:5a:fc:
                    f8:26:01:36:70:aa:b2:f4:b1:34:9b:c1:77:f6:d2:
                    fe:a9:c9:b6:e3:0b:70:12:de:0a:e7:60:3f:ad:51:
                    c6:10:de:e0:38:23:8d:b6:f7:d9:46:40:cf:5b:47:
                    10:9f:8f:75:7c:96:27:24:57:0f:93:4d:91:46:3d:
                    16:d3:91:9f:e0:c8:87:a0:9c:01:36:54:81:4f:7d:
                    14:06:a5:93:40:a4:9f:c7:a1:8a:ad:81:a3:8e:9f:
                    63:5e:36:2a:88:83:d7:0b:f8:ef:bf:09:09:e6:fb:
                    03:bb:62:db:13:c4:4e:47:e6:00:5c:04:38:47:c3:
                    e4:f6:82:90:29:87:95:de:aa:46:d9:1d:8a:60:29:
                    80:ef:c6:2f:1f:3e:28:43:5e:c2:03:40:f4:a4:58:
                    8d:91:8c:47:96:17:d8:d2:e1:8c:c2:1e:e5:40:60:
                    73:14:e1:f5:b5:5e:86:6f:2e:19:a2:01:57:fd:3f:
                    76:be:df:82:8f:fe:0b:db:02:5b:86:78:54:35:b3:
                    e7:4e:68:32:b6:78:e7:2c:10:f5:d5:6d:ac:7f:98:
                    23:71:b5:e2:03:81:69:8c:69:c6:af:b5:59:be:b8:
                    ab:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:33:FF:4D:0C:8B:95:85:61:29:E6:CC:2F:0D:AA:BA:A9:4A:4C:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/386208eb-3986-3358-8dc9-d4734254711b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.127.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:dc:a1:e5:1a:48:47:b0:a6:8d:c8:d3:f9:cc:e9:a5:f5:e9:
         21:8c:a6:39:ab:77:7f:15:4e:4c:45:93:02:59:2a:b8:d5:ef:
         32:e1:af:43:be:24:65:b3:6d:7a:be:bb:f2:ee:4e:ac:0f:20:
         fc:27:53:2f:aa:41:fe:87:43:1b:47:a2:46:c7:77:6b:8d:af:
         52:e9:54:12:de:32:8d:6a:80:7d:d6:1a:3b:f8:da:2e:f5:05:
         7e:6c:27:91:e0:2c:f7:ba:ed:75:a4:80:fa:78:32:e1:73:99:
         bf:e6:ba:62:da:93:b0:6e:9d:a4:a6:ce:72:05:b1:42:a2:39:
         6e:95:ca:7e:11:4a:9e:82:8e:d0:09:87:02:02:12:b7:e5:c1:
         0a:62:c6:15:37:64:40:cf:47:8c:b1:da:d7:16:74:20:6d:04:
         5b:66:2d:8e:dc:98:b6:67:35:66:c9:d3:13:0e:30:4b:b9:89:
         4d:5e:ec:32:7e:ac:1a:58:e2:fd:d0:56:4c:15:40:45:88:8f:
         26:17:cd:b6:3c:4a:ec:d5:20:51:de:6c:59:d0:54:e1:36:95:
         f4:d1:19:8e:25:8c:60:b9:df:4f:c3:95:98:78:ed:92:dd:e9:
         85:4d:c7:5e:8e:eb:77:70:4c:e1:ee:ed:f0:8e:d0:75:35:cc:
         44:93:4e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:12 2025 by rpki-client