Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2490ff95-e92d-3552-a02a-09376208c28d.roa
File:                     2490ff95-e92d-3552-a02a-09376208c28d.roa (raw, json)
Hash identifier:          CXCkzAQQbH6RLqSQuYbb8hsE0SNTWGMJYuEzKhdCWF0=
Subject key identifier:   C2:F4:91:C0:A1:2D:77:A5:B0:5F:2D:A3:BB:04:EC:A7:58:80:14:3E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584891DB30D5E50E5F48CF1F5700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2490ff95-e92d-3552-a02a-09376208c28d.roa
Signing time:             Fri 17 Jan 2025 02:00:40 +0000
ROA not before:           Fri 17 Jan 2025 02:00:40 +0000
ROA not after:            Thu 17 Apr 2025 01:00:40 +0000
asID:                     7843
IP address blocks:        150.224.68.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:91:db:30:d5:e5:0e:5f:48:cf:1f:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 17 02:00:40 2025 GMT
            Not After : Apr 17 01:00:40 2025 GMT
        Subject: CN=75619f14-ddf4-4fd2-9d7a-08a41969aae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a8:19:f8:b7:28:8a:c7:f4:8b:92:a8:24:85:
                    fc:57:fb:9c:9b:28:73:00:49:6d:c5:b9:3c:e4:fe:
                    d0:b9:cb:16:7c:8b:e9:49:89:96:2b:a0:46:d3:95:
                    93:87:fa:e3:56:2f:41:7a:13:c4:8b:26:00:01:c6:
                    f3:93:40:0d:e4:49:e6:31:12:5a:7b:ba:9f:8c:30:
                    2e:c9:a3:16:da:e4:30:20:df:ac:36:45:61:34:aa:
                    d9:96:51:99:a9:31:24:47:32:02:45:08:dc:d2:a4:
                    9b:4c:c8:49:60:0b:22:b7:fd:ed:e8:3d:92:e7:49:
                    82:e7:fd:97:3a:34:bd:57:75:cb:cb:9d:fa:4d:3c:
                    a6:70:3d:69:c7:1f:ff:8b:ce:d6:02:c5:79:55:86:
                    f6:de:5f:2b:a8:ec:30:ba:e7:c4:25:f1:e6:11:d8:
                    98:57:ca:89:41:61:83:af:84:4c:06:a8:eb:19:6d:
                    54:1b:ea:f1:ef:3b:cb:fa:ec:b3:9e:e5:83:a7:5f:
                    97:e8:a5:e9:80:0c:87:f7:4f:0f:85:ff:75:c1:a8:
                    22:33:48:4c:52:27:cc:3d:08:bf:5a:9e:cc:d2:0d:
                    aa:99:8e:67:77:eb:93:1d:42:4b:68:04:e5:4b:4f:
                    90:9c:3e:bd:09:ef:e7:f0:fc:f9:8a:ec:61:e9:ba:
                    18:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F4:91:C0:A1:2D:77:A5:B0:5F:2D:A3:BB:04:EC:A7:58:80:14:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2490ff95-e92d-3552-a02a-09376208c28d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.224.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:9f:84:f1:92:77:f7:1c:56:56:45:09:6f:76:6a:e5:a0:28:
         2a:31:10:35:a1:fb:05:a1:c9:b7:46:7a:4b:02:ba:9f:18:d7:
         cd:d0:27:8a:28:77:c3:37:75:20:87:dc:71:85:8e:e8:d5:24:
         42:29:69:54:37:9a:dd:6a:3c:a5:59:50:3e:01:21:8f:99:ba:
         35:95:e6:d8:60:a3:f1:bb:4e:49:49:a3:14:b3:18:0e:11:80:
         40:dc:4c:c5:ce:16:b5:de:00:b8:b9:2a:b3:16:af:db:28:89:
         7f:51:30:ea:e0:74:9d:68:06:ce:6f:11:8b:ac:f9:72:f8:c4:
         39:0b:2d:66:0a:4b:49:17:b7:49:2a:c2:53:d1:4a:09:ef:1e:
         e3:10:ca:05:d7:97:89:9a:fb:90:04:8b:0b:86:9f:9a:5b:75:
         78:05:4a:79:2f:a3:56:46:89:a2:98:21:d2:bc:34:aa:5f:7d:
         4d:46:e8:aa:d2:45:88:65:4a:da:e0:87:44:51:26:78:54:08:
         b4:24:73:37:a3:0d:7a:1c:fe:27:e8:54:02:53:41:a8:22:11:
         ad:4f:bf:ae:50:68:9a:da:fe:37:92:c9:5a:58:87:8b:c2:30:
         d5:65:38:78:2e:84:6e:ce:ae:09:31:44:17:ef:1b:4b:21:02:
         f9:62:e0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:16 2025 by rpki-client