Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/9a28cad1-2381-30cc-8c70-9a0f5f97856b.roa
File:                     9a28cad1-2381-30cc-8c70-9a0f5f97856b.roa (raw, json)
Hash identifier:          aGKdYdpI3Z9IuqMVwUYn+vX0o6jZZdeXKHSt3l/LKBE=
Subject key identifier:   C8:E1:3E:5F:0F:C7:DB:48:4B:8A:10:FA:3A:6C:DD:E7:E9:90:AF:44
Certificate issuer:       /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial:       010D0C9F43285849C54955473153A2B00571B680
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/9a28cad1-2381-30cc-8c70-9a0f5f97856b.roa
Signing time:             Wed 07 May 2025 04:55:50 +0000
ROA not before:           Wed 07 May 2025 04:55:50 +0000
ROA not after:            Tue 05 Aug 2025 04:55:50 +0000
asID:                     399073
IP address blocks:        216.132.121.0/24 maxlen: 24
                          216.132.130.0/24 maxlen: 24
                          216.231.35.0/24 maxlen: 24
                          216.231.36.0/24 maxlen: 24
                          216.231.46.0/24 maxlen: 24
                          216.231.47.0/24 maxlen: 24
                          216.231.48.0/24 maxlen: 24
                          216.231.49.0/24 maxlen: 24
                          216.231.51.0/24 maxlen: 24
                          216.231.55.0/24 maxlen: 24
                          216.231.58.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c5:49:55:47:31:53:a2:b0:05:71:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
        Validity
            Not Before: May  7 04:55:50 2025 GMT
            Not After : Aug  5 04:55:50 2025 GMT
        Subject: CN=8b415bf2-de68-4156-bf21-92ca1051043a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:90:83:83:40:df:44:bf:74:45:fb:c3:cb:
                    93:a4:01:0a:fe:be:40:cb:d7:b7:fc:99:a0:70:ea:
                    c7:ac:57:65:f4:9b:c2:e8:15:bb:c3:ac:17:9c:25:
                    40:4a:f2:42:e4:89:40:a6:26:22:c2:db:98:45:18:
                    45:60:03:78:3e:31:5a:16:3c:ce:36:73:f8:f3:95:
                    d8:ea:59:ee:b6:d9:20:bb:09:3b:45:d1:9e:ab:a0:
                    01:df:9c:41:50:1a:0c:29:0f:81:8b:33:4b:bf:ea:
                    72:68:02:6f:3b:61:80:c0:df:77:04:0a:a3:17:2b:
                    02:e4:9f:c7:2f:b7:ff:d9:66:40:18:c4:73:c1:02:
                    18:3a:ab:34:87:0e:a6:0e:a5:37:01:b8:90:b3:6d:
                    21:eb:79:34:24:91:ec:12:08:9a:94:04:90:c0:a0:
                    c4:35:70:9e:00:b8:96:28:3b:a9:a2:2b:7d:df:78:
                    91:e0:7d:43:e3:03:4a:77:3e:5d:50:82:29:4e:1e:
                    78:90:01:2d:55:28:2d:db:f2:3f:c8:a9:dc:c9:20:
                    7a:df:ef:c7:bb:d4:15:7e:cd:46:45:00:f3:d1:1a:
                    a6:c9:50:e9:74:e4:bb:ba:32:ea:16:ef:ca:be:52:
                    1d:d1:04:48:9b:b3:af:90:b2:e0:84:85:17:b9:fe:
                    a6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E1:3E:5F:0F:C7:DB:48:4B:8A:10:FA:3A:6C:DD:E7:E9:90:AF:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/9a28cad1-2381-30cc-8c70-9a0f5f97856b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl

            X509v3 Authority Key Identifier:
                keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.121.0/24
                  216.132.130.0/24
                  216.231.35.0-216.231.36.255
                  216.231.46.0-216.231.49.255
                  216.231.51.0/24
                  216.231.55.0/24
                  216.231.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:4e:11:f3:74:c0:cb:98:c7:e7:1f:ee:72:80:36:10:e0:f9:
         70:65:c2:66:69:d1:9c:83:dd:7d:4b:74:6e:84:35:5b:d1:b0:
         e9:34:b0:1d:12:a0:7a:da:81:8a:4b:20:7f:90:73:02:53:0f:
         53:19:aa:6f:32:9d:eb:58:65:d5:bb:b1:0c:16:51:db:0c:4d:
         74:bf:97:91:dd:11:e7:25:cf:08:57:f4:3f:35:46:95:5e:6e:
         9a:60:f1:40:b1:c4:0a:95:19:0b:bd:fc:92:f6:50:f2:01:a6:
         6f:b0:48:24:71:b7:44:62:ca:d8:a9:fe:74:b4:7b:15:d6:41:
         03:24:74:39:a9:7a:d0:1d:c7:77:b5:38:87:34:c8:d1:bc:12:
         c3:33:58:8d:46:86:63:0f:4d:55:03:c6:f2:b7:39:8c:f7:36:
         6a:ed:8c:cc:76:0e:74:fd:2c:88:e5:bd:f5:38:c3:f1:16:3a:
         16:43:95:41:b3:44:2a:ee:f6:3c:42:ba:80:c8:60:b9:d3:c9:
         f6:99:33:4d:a5:43:e5:95:81:9f:cb:7b:b0:36:6f:1a:c0:b7:
         43:f8:11:4f:7d:25:ba:a9:7f:9e:68:72:8b:89:df:49:16:36:
         dc:c4:ea:eb:01:14:8e:6f:8c:b1:86:02:e9:90:f2:d4:fe:d2:
         0d:0a:db:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:18:48 2025 by rpki-client