Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/938e31f5-9ee3-3622-870e-b45ce33dbd9f.roa
File:                     938e31f5-9ee3-3622-870e-b45ce33dbd9f.roa (raw, json)
Hash identifier:          QItLde/fBKoKEY/fw05HsWR/D4aR51sfjzc5Z6gkwuQ=
Subject key identifier:   A2:5D:08:39:1C:65:DB:82:BC:F8:AB:3C:67:E3:2D:04:49:C8:80:82
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858493243F95071AEE04A60D7D900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/938e31f5-9ee3-3622-870e-b45ce33dbd9f.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     34164
IP address blocks:        104.73.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:f9:50:71:ae:e0:4a:60:d7:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=e261b4f5-c84a-4f39-ae8a-b9c66f404e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:21:54:f7:02:36:f1:c7:fc:01:1e:ca:22:3d:
                    1c:65:7d:21:0b:7d:0d:00:3b:f6:c7:f8:c5:58:c8:
                    f2:d8:6c:df:8e:3b:c7:5d:f7:aa:0f:fb:09:c7:ec:
                    07:aa:49:28:40:94:c7:cf:90:9c:de:8e:d7:1f:57:
                    24:06:db:6b:d1:80:64:fa:46:6a:01:09:01:e0:89:
                    f7:97:99:a4:40:0b:98:e6:b7:23:ce:4d:d8:28:70:
                    94:5a:d7:ad:3d:9f:fc:d2:33:c2:a6:f6:d9:b3:cb:
                    f9:c0:5a:53:9d:8b:09:fc:6e:77:25:39:8d:71:2f:
                    10:7a:38:34:05:a3:68:13:ae:e3:f1:5e:6c:d7:04:
                    28:ea:64:e7:7d:88:5d:bd:37:00:28:45:f8:24:fe:
                    17:73:c9:6a:80:e0:ce:6d:6b:46:f8:a5:5c:d7:31:
                    0c:0b:ab:79:9b:da:90:f4:4c:46:c2:c7:a3:36:c2:
                    75:73:57:cd:8d:f2:d9:6c:66:d2:1e:e7:01:30:6b:
                    e9:43:58:19:82:a6:00:0d:36:7f:fe:70:27:83:be:
                    fc:8b:8d:83:d1:ac:b7:25:09:2d:5c:0f:af:59:4c:
                    02:e7:61:d3:4f:63:c1:c0:44:79:bf:0d:fb:60:a7:
                    85:da:23:23:25:66:c9:2b:aa:9f:5d:b0:d8:f9:b3:
                    37:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5D:08:39:1C:65:DB:82:BC:F8:AB:3C:67:E3:2D:04:49:C8:80:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/938e31f5-9ee3-3622-870e-b45ce33dbd9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.73.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d2:dd:41:29:d0:88:d6:6f:1e:e0:4e:be:96:f8:f9:86:78:
         59:a2:bb:10:89:75:af:4b:c0:82:32:59:21:1f:10:34:31:6a:
         05:d9:c7:2b:31:0e:d4:e7:ec:bd:b7:59:2a:34:23:61:4e:47:
         1f:64:0b:a6:78:76:10:47:c2:65:bb:9e:0d:db:f4:ec:25:5a:
         2b:6c:74:83:b4:69:1b:93:af:bc:e7:37:28:64:3a:03:bc:90:
         f1:80:a8:da:25:d8:48:da:8a:3e:ef:5c:15:c1:37:2c:ea:e0:
         86:f6:84:ff:6d:32:0d:e6:ae:d3:dd:e2:40:de:80:4c:c0:f4:
         31:ea:47:17:ad:7d:42:3e:4e:c0:77:93:d4:02:82:38:42:e4:
         82:ee:f5:e8:ab:26:aa:cb:88:a3:7a:14:68:94:09:84:fd:fb:
         97:76:b7:65:6a:ce:2d:c5:62:d5:cd:f6:b1:95:5f:26:ce:b2:
         38:5f:c7:6d:e7:c4:9d:f4:78:f8:14:ab:93:5f:17:44:8b:74:
         60:e1:89:ca:01:15:89:e6:6c:52:e9:da:a4:cc:4f:44:00:57:
         5f:17:2e:4e:0b:88:0c:71:80:c6:03:9e:03:62:94:af:c8:b0:
         5b:5d:c7:13:fe:24:8a:69:6a:44:3d:32:47:0b:8c:8f:af:53:
         54:52:e7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:32 2025 by rpki-client