Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/fd796fb4-3090-309b-9a88-013995c2e742.roa
File:                     fd796fb4-3090-309b-9a88-013995c2e742.roa (raw, json)
Hash identifier:          fCvdNrJP/1aqkx4QbIUi+d8HcRmPOFYOgzC+HQBNuCk=
Subject key identifier:   0A:CE:FE:4A:9B:D7:E0:97:EE:28:25:98:9C:8C:AA:1B:BD:C7:0E:1B
Certificate issuer:       /CN=85cb1f45-c822-4e3f-9234-71ff680b968d
Certificate serial:       010D0C9F432858429ED91673DB908574186D7100
Authority key identifier: 6B:0A:61:3E:EA:E0:C0:72:7A:74:54:48:34:07:44:82:56:DA:04:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/fd796fb4-3090-309b-9a88-013995c2e742.roa
Signing time:             Fri 21 Jul 2023 13:00:19 +0000
ROA not before:           Fri 21 Jul 2023 13:00:19 +0000
ROA not after:            Thu 19 Oct 2023 13:00:19 +0000
asID:                     18439
IP address blocks:        172.82.122.0/23 maxlen: 23
                          208.78.156.0/24 maxlen: 24
                          216.115.188.0/24 maxlen: 24
                          207.174.108.0/23 maxlen: 23
                          139.64.249.0/24 maxlen: 24
                          158.51.8.0/24 maxlen: 24
                          2604:69c0:1::/48 maxlen: 48
                          2604:69c0::/32 maxlen: 32
                          2604:69c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:9e:d9:16:73:db:90:85:74:18:6d:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85cb1f45-c822-4e3f-9234-71ff680b968d
        Validity
            Not Before: Jul 21 13:00:19 2023 GMT
            Not After : Oct 19 13:00:19 2023 GMT
        Subject: CN=3dd00d2a-5591-4fc6-9c61-5c8c64b7a270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:70:62:6f:1c:2a:70:83:27:60:c0:ea:9e:
                    40:1a:0b:85:a7:e9:fe:05:21:2f:02:4f:23:bb:7c:
                    e0:f6:69:24:92:f3:35:9b:77:6e:70:5d:0d:68:65:
                    fb:38:64:f7:98:5c:bb:eb:91:5f:71:c0:71:58:bf:
                    cf:bd:f6:a6:e2:ed:08:17:52:a8:70:d4:25:e7:e8:
                    75:07:92:fc:db:bb:6f:87:54:1f:2d:dc:bc:36:68:
                    79:6e:ec:ac:c7:6e:99:fe:41:fa:21:b1:1d:f6:ea:
                    3b:a4:b3:da:02:dc:37:5f:ea:ad:a5:7f:66:a8:14:
                    d4:3a:50:ef:5a:31:75:08:f9:b9:b6:dd:b9:56:95:
                    0a:7c:ab:38:e6:85:28:7f:da:7e:ad:e4:2c:ed:e6:
                    06:8b:f0:5f:cd:bd:38:75:f0:18:11:87:0b:5a:97:
                    0f:ff:ae:1b:55:17:9d:d6:c1:24:0d:44:af:38:1f:
                    79:a7:5a:e3:5b:24:44:86:bc:f2:5f:af:23:15:fe:
                    2d:bb:df:52:73:3c:56:c2:e6:77:32:5a:9e:31:e2:
                    50:37:8a:dc:82:96:21:da:d1:06:17:59:b2:ba:9e:
                    4d:06:fc:ae:7b:bc:af:1f:d5:56:a9:61:d5:64:92:
                    64:fb:37:df:3f:74:51:c1:23:7d:9c:40:d7:bd:09:
                    4a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CE:FE:4A:9B:D7:E0:97:EE:28:25:98:9C:8C:AA:1B:BD:C7:0E:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/fd796fb4-3090-309b-9a88-013995c2e742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/85cb1f45-c822-4e3f-9234-71ff680b968d.crl

            X509v3 Authority Key Identifier:
                keyid:6B:0A:61:3E:EA:E0:C0:72:7A:74:54:48:34:07:44:82:56:DA:04:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.249.0/24
                  158.51.8.0/24
                  172.82.122.0/23
                  207.174.108.0/23
                  208.78.156.0/24
                  216.115.188.0/24
                IPv6:
                  2604:69c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:62:cf:c2:9e:d1:a1:a1:b0:d8:d0:71:ab:95:f1:6d:78:9a:
         43:1f:15:e7:c0:9c:18:49:da:de:42:fb:1b:bf:c5:d2:ef:9c:
         bd:16:d6:f1:c0:ef:df:9f:9e:6d:dc:15:87:0f:ee:03:15:f6:
         ba:44:96:65:5e:98:a5:10:0a:bb:94:09:73:39:68:96:d8:78:
         62:75:86:37:21:a1:67:9b:cf:fc:e7:e0:a4:4e:96:49:9e:db:
         39:bd:b1:69:d3:5e:81:34:4c:08:92:81:90:23:7f:ac:9f:89:
         a3:f2:c4:7b:1d:70:32:a7:cf:9b:7d:f8:00:7f:7d:09:9c:dd:
         1b:31:3b:b3:5b:fd:f1:8d:59:01:f4:09:e5:68:5a:43:0c:a2:
         bf:78:78:0b:a1:f6:cc:61:d4:4f:9d:cf:6c:ef:88:89:06:e5:
         df:71:6e:9b:e0:54:55:29:13:6b:3d:8f:00:77:4b:c3:d1:85:
         de:d2:e4:68:11:86:90:e1:65:3c:03:53:ec:36:f7:33:d6:fa:
         e6:5f:a0:54:b5:51:3c:15:89:46:69:b5:2f:a6:6c:d1:66:21:
         b5:1e:c5:2f:ae:37:76:df:f1:6e:74:2c:21:14:6d:9c:da:ea:
         5e:b0:ac:e3:e7:6c:40:5e:5d:80:4f:34:90:d5:47:7b:34:b4:
         1a:55:00:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:44:27 2025 by rpki-client