Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/94342b39-9e33-3622-8185-5399e6904649.roa
File:                     94342b39-9e33-3622-8185-5399e6904649.roa (raw, json)
Hash identifier:          visHxMTgJuOktG+AnrJiN8Rqn1qA2Xa4M0bGkEhvG68=
Subject key identifier:   31:E3:B6:CE:5F:AF:10:F9:AA:42:A2:F3:5D:64:56:8E:4C:85:8E:7E
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F432858486D904F790AD3836D2D070F00
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/94342b39-9e33-3622-8185-5399e6904649.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     54702
IP address blocks:        74.81.64.0/22 maxlen: 24
                          74.81.78.0/24 maxlen: 24
                          74.81.81.0/24 maxlen: 24
                          74.81.82.0/24 maxlen: 24
                          74.81.85.0/24 maxlen: 24
                          74.81.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:4f:79:0a:d3:83:6d:2d:07:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=2761ee3d-553a-4bc8-94d1-3eeb55a4be6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:03:0e:1a:59:a9:95:2a:ec:66:9f:b0:06:fd:
                    16:fb:25:b9:18:72:39:80:00:98:80:a3:8f:10:7c:
                    ac:57:46:46:c9:24:3e:01:23:cc:1a:77:e5:df:13:
                    50:f5:c9:31:60:0c:17:88:d6:bc:32:6d:56:de:60:
                    71:81:96:90:e2:00:50:2a:a8:91:cb:89:b7:7e:4c:
                    d2:7d:7b:ec:4d:e0:ee:8f:35:61:0c:d5:ea:00:19:
                    c7:ff:1f:59:80:57:c5:5d:64:39:8b:87:f4:d0:7e:
                    64:b5:0a:8e:45:66:b8:93:cf:da:ee:6f:11:21:36:
                    b4:09:98:8e:0f:56:54:75:5c:46:31:ee:1b:ad:fe:
                    41:bb:12:7c:11:8b:b3:68:c6:59:2b:bf:d7:d2:92:
                    c6:34:90:f7:8c:05:26:5a:b6:13:34:d6:19:a8:6c:
                    84:9f:04:52:50:6c:d3:0e:31:c0:3f:6f:5e:3d:6b:
                    59:2a:8f:78:9b:a5:95:5d:bd:e1:de:4d:95:b5:5d:
                    f3:2b:73:1f:96:77:9d:90:7a:18:0b:2c:4d:15:e2:
                    89:89:b5:41:a2:b2:24:53:7b:92:96:07:c7:1e:85:
                    0c:6e:91:79:b0:c5:71:d6:a0:0e:7f:1f:29:48:08:
                    8a:3e:88:39:54:a1:38:04:e0:a2:ad:b1:0d:72:c1:
                    58:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E3:B6:CE:5F:AF:10:F9:AA:42:A2:F3:5D:64:56:8E:4C:85:8E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/94342b39-9e33-3622-8185-5399e6904649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.81.64.0/22
                  74.81.78.0/24
                  74.81.81.0-74.81.82.255
                  74.81.85.0/24
                  74.81.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:67:d9:c4:a4:06:e4:10:7b:2e:35:a9:3e:f2:dd:b5:6a:02:
         e9:df:62:e2:19:54:b7:bb:5f:92:92:05:08:d7:24:b6:39:7d:
         46:35:30:9e:80:2f:13:5c:7b:62:11:45:aa:bd:49:a2:a5:42:
         5e:4e:98:3d:b2:fb:1d:f4:c1:c2:bf:1e:d4:44:1c:ec:b0:df:
         4e:99:70:06:64:5a:13:f6:19:2c:56:d2:7e:d4:26:e0:ce:ab:
         7f:0f:ac:0b:1b:78:ce:dc:5b:10:6a:90:bf:ba:30:9f:35:7b:
         ea:35:3c:78:5d:3b:f9:9f:d5:54:95:9c:2f:71:1c:5d:96:f5:
         b9:50:e4:0a:01:90:c7:00:ff:86:e7:67:e6:3e:16:f4:c8:c7:
         20:df:58:e0:5d:3d:eb:ca:74:2b:83:09:6d:77:e6:48:1d:fe:
         31:81:1c:ea:03:85:0d:fe:cc:16:94:fd:bd:5c:6e:06:b6:22:
         ff:d4:4b:85:f9:27:76:18:f5:f6:36:1f:e9:dc:e2:31:5a:9b:
         a1:f4:16:4c:14:99:16:23:5f:d9:c9:0a:ea:69:aa:2f:32:21:
         af:85:45:cc:3a:17:77:29:e5:3f:8b:a7:b3:d4:b5:17:03:4f:
         a2:2c:84:3f:54:42:cc:79:37:19:27:57:f1:70:c4:98:b8:b2:
         80:6e:48:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:36:09 2025 by rpki-client on console.sobornost.net