Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa
File:                     47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa (raw, json)
Hash identifier:          xw4A/S8n0nfqdz00q1vKQRq0/BSff4KF6mN713r/Qbw=
Subject key identifier:   06:59:79:FD:FA:02:29:A9:FC:D4:D6:5C:C3:65:2F:90:48:AC:F7:D1
Certificate issuer:       /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Certificate serial:       010D0C9F4328584908817370DBC0CCD3D39E9353
Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     14397
IP address blocks:        65.49.128.0/24 maxlen: 24
                          65.49.129.0/24 maxlen: 24
                          104.251.115.0/24 maxlen: 24
                          104.251.117.0/24 maxlen: 24
                          104.251.118.0/24 maxlen: 24
                          104.251.121.0/24 maxlen: 24
                          104.251.124.0/22 maxlen: 24
                          104.251.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:73:70:db:c0:cc:d3:d3:9e:93:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=0dd999e2-36ff-4a26-bb9e-f01ef6517cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:74:b7:d2:01:5c:68:45:32:2b:98:84:5a:07:
                    20:fa:7e:31:fe:08:82:8f:d6:bf:7f:29:66:4c:a4:
                    fe:20:63:47:81:57:2e:df:b6:e7:47:9c:d8:02:15:
                    ce:4a:d7:be:81:76:c1:67:2c:08:5f:d9:ee:1f:67:
                    d2:62:59:5a:06:20:f0:29:84:d8:3b:aa:26:1d:9b:
                    c2:33:32:d6:0e:f3:a1:1f:86:af:28:d9:aa:2a:ec:
                    b7:68:e9:f0:77:57:77:67:d6:ce:ec:12:05:91:72:
                    84:29:89:54:0a:7a:dd:a5:56:55:a0:2c:10:0e:95:
                    94:b0:52:b4:a9:ee:54:4c:7d:ce:e1:5a:03:5c:cf:
                    c9:51:31:cf:c4:f3:d1:a8:ee:c4:a7:06:c5:7e:f9:
                    91:df:da:a4:04:7c:4c:d5:e6:df:94:fd:87:62:54:
                    e9:72:f5:7f:56:d6:87:6f:0d:4a:3f:49:b9:d0:a0:
                    0e:2f:27:f7:e1:58:0d:f4:6f:9b:39:86:96:d6:7d:
                    59:14:22:50:43:56:92:e1:3c:6f:a5:42:a3:82:83:
                    76:69:a4:2e:86:bb:35:17:cd:3a:8d:df:90:57:40:
                    7a:9b:19:f8:f6:53:ee:9e:19:c0:5d:fc:6e:ac:7e:
                    b2:ed:5c:ff:c9:b7:4d:38:9b:0f:fe:df:8d:d0:0f:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:59:79:FD:FA:02:29:A9:FC:D4:D6:5C:C3:65:2F:90:48:AC:F7:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.128.0/23
                  104.251.115.0/24
                  104.251.117.0-104.251.118.255
                  104.251.121.0/24
                  104.251.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:7b:4b:e8:9a:47:3f:ff:de:f7:c3:ab:3a:33:2b:32:96:29:
         38:86:19:7e:34:d6:61:5f:ab:ef:9e:20:71:b2:99:69:54:75:
         18:b5:e3:2d:f5:c6:af:01:26:4e:43:8e:d9:f9:7f:0b:8c:29:
         fa:4f:98:b1:28:c2:29:3c:9c:5e:b4:8e:ad:d9:e8:e2:b3:d9:
         3c:a6:75:0b:4c:d0:a4:9b:03:0f:a8:7f:92:55:54:cb:51:37:
         e2:82:f5:a9:b0:f6:9f:70:db:01:2b:68:1c:c9:d2:09:83:a2:
         bd:b9:e6:8c:d0:60:d5:ca:75:4a:2f:2f:40:0e:fa:f7:bf:7f:
         d2:fe:35:28:67:fe:75:98:32:d1:6a:c6:0a:f6:24:99:c8:e0:
         90:92:d2:ed:18:48:0b:2f:be:38:7c:6c:ab:2f:92:2e:b5:ab:
         f1:58:40:cd:6e:4f:26:61:74:56:19:c7:78:ad:a2:7e:a3:b5:
         f7:4e:c8:22:ac:1a:b7:a2:fb:6a:93:bb:3e:a9:02:29:ed:cc:
         69:2f:54:07:2e:88:e9:ef:05:1b:0b:46:55:c7:f0:2f:dd:1a:
         7d:15:03:05:6c:d6:a8:09:7e:80:f4:a0:50:1e:05:df:a7:72:
         c5:58:0f:8c:ad:23:bf:fb:53:2e:0e:66:a0:e0:e4:16:ae:24:
         fe:42:cc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:01 2025 by rpki-client on console.sobornost.net