Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/c3d15846-5ae9-3662-a6a8-331fa785561d.roa
File:                     c3d15846-5ae9-3662-a6a8-331fa785561d.roa (raw, json)
Hash identifier:          8a6MCjpguXow5qmmX5ODwGbd2Lp0CgtnHxf14jMdUBQ=
Subject key identifier:   7F:3A:A3:02:1B:70:21:68:30:9D:C6:79:09:C5:23:8F:FF:6F:17:9A
Certificate issuer:       /CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Certificate serial:       010D0C9F4328584968B41CBE2EF61565D5E903A0
Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/c3d15846-5ae9-3662-a6a8-331fa785561d.roa
Signing time:             Fri 04 Apr 2025 01:00:47 +0000
ROA not before:           Fri 04 Apr 2025 01:00:47 +0000
ROA not after:            Thu 03 Jul 2025 01:00:47 +0000
asID:                     7018
IP address blocks:        72.1.176.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:b4:1c:be:2e:f6:15:65:d5:e9:03:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95
        Validity
            Not Before: Apr  4 01:00:47 2025 GMT
            Not After : Jul  3 01:00:47 2025 GMT
        Subject: CN=490a3805-de29-4c89-b48b-768d0925b9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:95:ef:89:1c:6e:85:b7:84:cf:fe:46:42:ba:
                    be:8a:44:04:88:2f:ba:03:a8:3b:4d:60:5a:82:67:
                    b2:13:03:f1:92:47:0a:c9:f0:6e:e3:1d:18:24:99:
                    e3:fe:ff:86:bd:49:0b:c9:14:3d:25:0e:2f:0b:3d:
                    41:3b:78:50:55:3b:81:83:82:6f:51:03:2f:47:ae:
                    5f:91:12:0c:91:61:5e:b9:01:29:69:bf:bf:ca:b9:
                    41:30:f6:8c:67:d3:32:04:02:c6:88:ec:4a:b4:ab:
                    47:ff:e0:3e:5e:ac:b0:2d:d1:25:39:20:3f:85:da:
                    dd:e6:e9:e7:7f:61:68:01:e4:a9:a7:a5:82:bb:5e:
                    3b:af:a4:0c:99:63:19:fe:11:e9:56:c9:90:1d:8a:
                    9f:43:1e:a2:17:99:85:d2:76:d1:bf:64:53:96:f3:
                    da:cd:39:a6:e2:39:b5:cc:94:41:a0:5b:72:5a:dc:
                    2f:64:61:5a:04:55:ed:df:8c:0b:dc:8d:36:58:eb:
                    88:cc:5a:84:ae:06:ec:11:85:7d:f4:87:8a:78:55:
                    c3:1b:03:13:4c:be:10:65:6c:60:92:f4:b0:44:8f:
                    84:d2:4e:e5:4d:ec:ae:e1:3f:49:80:6b:b3:0d:b4:
                    43:3e:a9:f5:ac:aa:2e:12:2a:a0:36:cc:ff:55:b0:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3A:A3:02:1B:70:21:68:30:9D:C6:79:09:C5:23:8F:FF:6F:17:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/c3d15846-5ae9-3662-a6a8-331fa785561d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl

            X509v3 Authority Key Identifier:
                keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:60:30:32:3c:d1:74:50:c8:8a:11:71:1e:aa:e2:74:cf:c1:
         ca:3e:f4:76:56:c5:0e:d2:69:66:ce:be:ee:be:1e:d2:78:49:
         5c:14:0d:1e:a3:eb:7b:bc:40:fd:c2:ca:c8:45:23:be:06:61:
         ae:a9:d4:dc:41:80:ff:b9:9b:80:c8:56:e7:ca:8f:20:0d:28:
         3b:aa:a3:1b:8b:6b:a4:e7:b0:0e:b3:16:86:54:d0:85:1d:06:
         04:05:0b:a2:01:73:4c:06:4b:21:bf:ec:bf:4d:f4:0b:0e:61:
         73:be:4d:fa:80:4a:9a:0d:b0:4f:f3:4c:ce:b9:b9:01:3b:59:
         a5:4f:8b:42:bf:0a:dd:ca:35:03:c0:cd:bc:fb:de:83:37:75:
         e0:cd:45:d6:40:a4:09:6c:cc:d2:fc:ca:7b:b2:62:c0:36:a7:
         39:35:74:5a:fb:0d:eb:89:02:f2:9d:c9:a2:7f:fc:6d:0c:66:
         b2:5b:a8:1e:c7:d4:5d:5c:02:3e:8a:2e:2a:ae:f1:fd:e9:8d:
         9d:83:09:c4:7d:65:91:48:81:a2:fd:a1:85:4c:9d:0a:ea:ea:
         2d:65:68:94:d2:0e:fb:31:ee:91:e5:98:0d:c0:2d:ee:1e:7c:
         4a:2b:13:3d:70:59:66:fe:f5:2b:20:05:67:47:36:f6:b3:50:
         4d:55:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:41 2025 by rpki-client