Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/f5cf5850-907d-3cfc-9897-ffdc99d6434b.roa
File:                     f5cf5850-907d-3cfc-9897-ffdc99d6434b.roa (raw, json)
Hash identifier:          3QgaP6eohmej12FlQZz7ZXY0DcW66gggJnclZS7D86c=
Subject key identifier:   4A:F0:9C:E3:27:8C:73:06:44:2B:EA:B2:43:2A:5A:6D:AE:9D:EB:F4
Certificate issuer:       /CN=7fb67441-9735-44cc-ae5f-20a79cca0b47
Certificate serial:       010D0C9F43285848F3911E8BB2E79BBFD1935380
Authority key identifier: AF:47:55:BD:2B:E8:4E:88:5F:48:1A:E3:E9:E9:32:6D:C9:AC:4E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/f5cf5850-907d-3cfc-9897-ffdc99d6434b.roa
Signing time:             Fri 21 Feb 2025 02:00:39 +0000
ROA not before:           Fri 21 Feb 2025 02:00:39 +0000
ROA not after:            Thu 22 May 2025 01:00:39 +0000
asID:                     29894
IP address blocks:        64.130.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f3:91:1e:8b:b2:e7:9b:bf:d1:93:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fb67441-9735-44cc-ae5f-20a79cca0b47
        Validity
            Not Before: Feb 21 02:00:39 2025 GMT
            Not After : May 22 01:00:39 2025 GMT
        Subject: CN=45e3fb67-3c90-408c-909f-e5472be53a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1b:e0:e1:f8:7b:74:55:1e:b6:b7:85:0f:5b:
                    5f:37:3f:03:fe:da:9d:8b:54:16:40:02:02:9f:80:
                    68:66:1c:65:73:45:e1:d4:98:41:6e:36:cc:e3:19:
                    b8:0d:77:7a:22:60:e2:00:2e:e0:11:28:f9:e7:df:
                    bc:59:80:7f:1a:ce:29:2f:02:ea:db:27:41:44:2c:
                    a7:cc:89:d2:92:9c:05:62:7c:99:23:b9:a3:f2:93:
                    f1:6c:a9:bf:f4:b1:cf:76:bc:d5:aa:92:3a:99:46:
                    99:2b:17:a1:10:8f:57:2b:96:51:8a:f2:2a:e0:20:
                    6c:74:49:23:7b:36:25:15:1f:cf:a3:6c:c4:bf:64:
                    82:3f:9c:a5:f7:3f:dc:07:8e:4d:d4:43:90:a4:17:
                    81:ae:43:65:6d:d6:0c:87:47:ed:80:a3:72:89:35:
                    8b:95:b6:ab:94:c9:d8:fe:fc:b1:1b:30:6f:6a:1e:
                    d6:a2:b6:60:00:0e:fd:80:3f:c6:d2:b4:e3:f5:12:
                    c2:12:95:d0:14:b0:d0:cc:ca:55:37:9b:f4:60:d8:
                    f9:80:62:fb:ba:5b:61:f5:af:d5:47:53:cc:56:3b:
                    b1:24:5e:0f:73:0c:96:b0:50:15:17:49:2e:9c:03:
                    97:63:16:ef:29:ce:36:9b:46:71:1f:64:9f:ce:96:
                    e3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F0:9C:E3:27:8C:73:06:44:2B:EA:B2:43:2A:5A:6D:AE:9D:EB:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/f5cf5850-907d-3cfc-9897-ffdc99d6434b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.crl

            X509v3 Authority Key Identifier:
                keyid:AF:47:55:BD:2B:E8:4E:88:5F:48:1A:E3:E9:E9:32:6D:C9:AC:4E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.130.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:82:ec:44:f8:d7:c5:0e:82:bd:ac:49:00:19:02:c0:78:55:
         c5:a0:1e:1a:77:5e:dd:d9:30:1d:39:39:dc:4a:de:7f:4d:81:
         78:62:ee:fb:02:91:c6:ef:e3:bb:44:78:50:44:0a:f2:e2:f8:
         e8:31:6b:51:26:aa:88:8b:f7:33:9d:d0:3e:f8:4d:84:92:84:
         91:1a:a7:71:a9:91:fa:95:aa:6f:e4:c5:3a:bb:1e:ec:25:c2:
         3b:0a:82:68:03:e9:c5:a7:73:15:58:b1:7a:83:ea:ea:bb:31:
         d1:14:4b:0d:b2:76:46:dd:25:7f:3d:72:a6:01:e8:fe:4a:46:
         4e:7b:e0:e9:ce:44:42:cd:64:cb:f2:e1:e5:b0:45:21:4e:68:
         d4:16:9d:80:80:56:0f:70:ad:e0:42:ac:ac:f5:73:39:0d:69:
         3a:6b:8b:82:11:a0:7f:da:27:85:e5:cf:d3:10:bb:97:18:a9:
         74:f9:4c:d2:46:dd:cc:6d:5f:98:7e:88:ee:65:c4:66:8e:ce:
         cc:87:ce:ad:9d:0d:65:23:ee:3f:8e:32:26:05:7e:44:f3:e3:
         5f:09:71:88:00:39:9c:3e:c1:c5:41:6a:0b:9e:32:1a:67:bb:
         f2:78:d9:59:20:d0:3b:4a:35:2b:d3:63:60:23:77:22:d8:d1:
         91:a1:6b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:34 2025 by rpki-client