Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/5dc3d4a4-6f68-324c-8e10-1ddbbc64fb5c.roa
File:                     5dc3d4a4-6f68-324c-8e10-1ddbbc64fb5c.roa (raw, json)
Hash identifier:          MS381p/LaqW1cp5ffVm7d45ad6cLEYFALYXv4gDLlHU=
Subject key identifier:   46:8B:58:E1:2B:34:B0:FE:2D:B8:66:84:EF:96:D0:A1:F5:05:38:D3
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285848265FFC8D450EAE0C64FE1280
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/5dc3d4a4-6f68-324c-8e10-1ddbbc64fb5c.roa
Signing time:             Mon 09 Dec 2024 14:00:51 +0000
ROA not before:           Mon 09 Dec 2024 14:00:51 +0000
ROA not after:            Sun 09 Mar 2025 13:00:51 +0000
asID:                     2734
IP address blocks:        66.35.82.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:5f:fc:8d:45:0e:ae:0c:64:fe:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Dec  9 14:00:51 2024 GMT
            Not After : Mar  9 13:00:51 2025 GMT
        Subject: CN=334e9134-397f-460a-87c1-2e1b58f96bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:b7:cc:10:be:5f:7e:cb:21:50:53:b9:78:
                    f6:8f:a9:cc:2f:65:3e:53:45:78:70:1b:18:2b:56:
                    2d:41:78:76:29:cd:97:02:87:c0:31:ac:04:19:bd:
                    84:a0:72:ed:25:bf:fc:81:97:f0:5c:24:96:ed:87:
                    fb:3b:78:92:d9:73:49:41:58:85:70:de:07:aa:59:
                    83:00:55:90:05:16:96:07:4a:d5:22:53:09:9c:bf:
                    78:18:cc:af:ba:67:43:99:f9:e0:93:b3:c5:c2:93:
                    6a:8a:4d:92:02:5b:a6:1b:bc:94:9f:ce:9b:0f:71:
                    97:13:c5:17:4f:f3:5f:72:79:9c:b1:b2:c9:9b:98:
                    4e:cd:e0:95:93:9a:78:04:59:cf:32:6b:40:c3:0e:
                    88:bd:e0:d7:f1:fd:bd:09:88:81:ba:b1:59:f5:cf:
                    e6:4a:d8:f9:63:eb:d4:75:0a:de:54:c6:b5:74:88:
                    8b:06:e1:62:92:2e:dc:15:05:77:92:92:6b:db:35:
                    02:40:08:03:31:32:fd:26:4b:e8:a2:b0:d4:2a:7a:
                    c1:65:41:73:ee:97:db:03:49:fc:aa:34:2c:42:ce:
                    a5:3a:6a:05:77:c5:29:bc:59:fd:b5:e3:ba:cf:17:
                    e1:5c:bd:cf:a1:e4:5c:77:ab:f1:f7:06:86:e3:de:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8B:58:E1:2B:34:B0:FE:2D:B8:66:84:EF:96:D0:A1:F5:05:38:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/5dc3d4a4-6f68-324c-8e10-1ddbbc64fb5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:27:13:d5:20:6c:93:bb:b7:e1:b1:3f:70:ec:b4:a0:8e:8e:
         8f:16:8b:2f:bb:18:77:e7:a8:fe:fe:e4:bc:14:2a:c7:b3:51:
         bf:f9:e1:93:dc:39:92:bc:f3:c2:cf:a8:c2:4a:bf:dd:74:d9:
         0d:77:9d:50:96:11:78:9d:13:63:3c:f0:64:bc:03:aa:93:e7:
         be:5e:44:87:0b:16:cb:de:42:99:27:b6:6b:d8:de:e7:27:af:
         5d:20:56:e8:b6:93:a8:50:9c:72:6f:0d:0c:59:ab:b8:e3:8d:
         57:52:ec:88:53:3f:14:ab:69:ac:54:50:54:b3:db:18:ea:b0:
         07:b7:b8:1a:31:f3:e0:c2:e9:d6:e8:69:37:5f:e0:db:ab:fd:
         de:98:1a:86:7e:96:72:99:72:56:3c:c9:d0:dd:b5:bc:ae:4f:
         9e:0f:9e:fe:e7:d9:a6:b0:2f:71:29:41:e3:c0:e2:c0:64:44:
         ec:bb:94:c5:9b:ce:f3:5d:08:06:b5:47:a8:dc:d4:17:23:e9:
         71:13:c3:03:12:f0:74:32:dd:fe:dd:8e:a7:ca:19:5f:da:f8:
         95:fc:bb:3d:f3:52:71:da:0b:11:dc:02:9d:a4:27:d9:e6:ad:
         de:cb:80:ed:2d:99:94:67:69:da:3e:2e:aa:db:ec:47:b3:cd:
         e4:f1:a3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:23 2025 by rpki-client