Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa
File:                     3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa (raw, json)
Hash identifier:          fb7MsKXPH443jrWR3EPvwzsDVOnbFaDOxS8SS7M6izA=
Subject key identifier:   EC:9A:05:19:D4:7C:0A:A3:03:69:5B:71:67:5D:9F:57:A9:5E:BE:58
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584979743D9E135F97A48745D640
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     237
IP address blocks:        35.33.0.0/18 maxlen: 18
                          35.33.5.0/24 maxlen: 24
                          35.33.6.0/24 maxlen: 24
                          35.33.64.0/19 maxlen: 19
                          35.34.0.0/18 maxlen: 18
                          35.34.64.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:3d:9e:13:5f:97:a4:87:45:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=2bef433e-c76e-4762-8cac-6f833060279f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:78:fb:ba:b4:78:8b:37:91:e8:3c:59:ca:
                    e2:a0:25:a7:bb:43:22:e0:b5:70:87:a7:1b:44:5b:
                    70:4e:8d:9f:b9:ef:cb:a6:55:83:18:33:6f:41:0f:
                    d9:65:42:03:8e:a5:02:73:aa:d1:4a:16:38:e8:5a:
                    56:48:75:ab:bf:e7:4b:09:85:ce:bd:7b:cd:25:7a:
                    6a:a0:62:63:74:f6:0e:0f:2a:d8:a3:13:5d:4e:09:
                    fb:08:6d:03:e3:a1:3d:e3:21:2c:05:a8:13:f9:eb:
                    21:cf:44:d9:55:9d:02:fe:17:78:20:a8:ed:54:db:
                    8a:a4:3a:57:60:ea:5f:12:19:84:80:fd:5b:e2:7e:
                    52:cb:f6:db:aa:2f:6f:a8:90:c4:d1:5a:70:38:7c:
                    66:9b:92:b2:14:34:b9:97:34:62:5d:44:d6:d8:67:
                    7e:3a:10:74:fe:93:cd:87:f4:6b:54:ad:7b:e1:54:
                    67:f2:08:08:6b:5c:f1:ca:a7:8c:5c:98:2f:3d:45:
                    a5:e1:91:cb:e9:92:5b:18:b1:14:7f:f4:2c:86:e6:
                    3e:9e:1e:71:f9:68:a3:1a:66:ae:05:16:d3:b4:9f:
                    8f:db:15:9f:f3:89:dd:f8:47:44:89:19:a0:29:f5:
                    17:e5:17:b5:bb:fd:b9:4d:75:59:91:0b:1a:4a:ba:
                    fc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9A:05:19:D4:7C:0A:A3:03:69:5B:71:67:5D:9F:57:A9:5E:BE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.33.0.0-35.33.95.255
                  35.34.0.0-35.34.79.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f5:29:38:d3:1c:0c:7f:26:86:c7:3d:cc:3a:71:f2:09:27:
         00:5e:ac:83:fe:a1:b3:96:43:8a:c6:05:ae:aa:64:12:23:d2:
         de:dd:06:c9:70:a9:ef:8d:35:a2:0f:4d:21:39:d7:73:43:d8:
         4f:b0:90:41:22:2f:56:d5:92:36:46:2c:95:66:96:07:6c:fd:
         6c:ce:b4:c4:f4:c8:19:15:54:df:7b:0a:2b:72:c2:b7:c4:9b:
         5e:1d:78:fd:91:51:9e:a6:84:dd:7a:d4:18:12:5b:f2:26:5a:
         b6:a1:87:c8:56:f4:bb:7a:23:a6:74:dd:9a:79:22:fa:05:30:
         21:ba:df:7d:8d:4b:d3:11:85:df:c1:8d:4f:40:46:3a:8d:11:
         20:40:6c:d7:68:e8:88:6d:a6:12:13:c5:3a:22:99:67:e1:66:
         a3:82:e4:74:ee:0f:a5:98:73:89:d2:bd:5f:1e:81:b7:58:a5:
         4e:17:33:3f:a1:45:e8:0c:f0:59:fb:92:c7:21:d9:b5:3b:dc:
         8a:1d:5c:dc:80:90:c5:f3:be:8b:d6:0e:76:07:a5:d8:67:ab:
         75:68:8e:fe:f7:5e:d0:5a:31:d8:8c:9f:76:c2:7a:17:04:eb:
         eb:18:59:f9:a8:48:fb:6e:04:ca:15:38:c0:16:6c:6e:ba:a8:
         63:d6:98:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:58 2025 by rpki-client on console.sobornost.net