Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0546a9ed-f07a-39e5-b5b0-2929ea33dbff.roa
File:                     0546a9ed-f07a-39e5-b5b0-2929ea33dbff.roa (raw, json)
Hash identifier:          aOzxO7zlxeKUysRyCT2MB9CpZYtVUTJsmY4zC7O96JA=
Subject key identifier:   07:AF:C3:AF:B1:50:F7:43:60:B3:E2:B8:9C:5F:42:C6:63:EE:76:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AFBDE479E6AB7B089F300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0546a9ed-f07a-39e5-b5b0-2929ea33dbff.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.167.228.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:fb:de:47:9e:6a:b7:b0:89:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=b1f7367f-d975-4a7d-8d34-cde5342b21bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b0:24:c9:27:bd:5c:21:cc:04:0b:a0:1a:74:
                    42:9d:95:70:55:1d:36:60:c3:09:19:d6:0b:63:0e:
                    a2:b9:59:17:df:67:63:2a:b7:d5:c4:8c:de:0a:d3:
                    4b:f7:9a:c7:c2:2d:77:cb:14:4c:f8:05:e3:0c:26:
                    89:29:9c:47:09:e7:42:2c:76:2a:60:11:e3:83:bd:
                    fe:f3:d0:a4:98:f5:ec:8b:7e:cb:00:82:78:2d:c1:
                    b7:58:d6:ef:a5:ac:0f:40:d5:51:64:c1:46:12:16:
                    6e:53:01:3e:34:23:be:c2:5a:4f:fc:10:1a:0f:09:
                    42:b8:2c:6d:97:0c:f9:e3:63:07:b3:bf:b2:84:cd:
                    c1:b1:b9:26:aa:a3:92:0a:1a:63:5a:28:0f:92:6b:
                    49:6e:f3:bc:0a:9c:e8:df:8b:83:1d:b0:42:60:6a:
                    11:cc:98:5e:67:fc:07:ca:ad:05:95:9c:b6:c5:bd:
                    e0:c4:55:04:0e:07:11:47:8e:00:2b:f2:3a:88:7d:
                    6f:32:f0:f4:87:5e:3c:72:58:f9:10:2c:ea:ac:bc:
                    38:3d:72:a8:d3:d9:f0:5c:64:78:28:af:37:50:e8:
                    0f:f1:c8:e6:df:ea:28:e5:fd:73:5d:46:58:ee:b1:
                    df:c2:9e:7d:d3:2f:d6:66:87:20:47:d4:7f:6a:b9:
                    0f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AF:C3:AF:B1:50:F7:43:60:B3:E2:B8:9C:5F:42:C6:63:EE:76:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0546a9ed-f07a-39e5-b5b0-2929ea33dbff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.167.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:c0:90:ce:30:1d:f1:cd:c9:c8:7c:4a:4d:07:58:fd:3b:
         f4:7c:a2:85:e3:58:3f:bd:57:90:ba:b7:f1:3a:aa:bd:20:95:
         85:83:8f:cd:62:51:ed:04:70:d0:68:4d:f6:37:b7:08:67:37:
         8d:70:c5:1f:2a:6b:ac:57:8d:aa:69:23:e5:9c:dc:25:65:35:
         47:a5:5a:d4:d9:c1:c6:ec:71:28:b4:8c:7d:23:f4:e4:7f:44:
         7c:7c:23:6a:0d:f0:d0:0f:db:0d:34:b9:54:0b:f1:26:4a:a4:
         36:30:02:c4:47:a3:d5:72:36:fb:b6:75:f5:1a:47:c9:81:f4:
         97:2a:03:67:fb:fb:af:42:60:7f:6c:fc:33:ee:d0:d5:40:f7:
         c8:c8:43:34:01:24:b2:8e:fc:e1:06:83:51:d1:0a:ab:28:18:
         56:a7:95:a8:56:51:5d:63:eb:fa:7b:7c:c4:79:da:1a:d0:bf:
         79:3f:53:b7:62:ec:81:26:17:e0:35:bf:94:1c:73:5c:70:75:
         7b:bc:43:54:9f:7a:41:77:42:be:68:35:6c:3e:5b:87:c8:69:
         6f:b1:d5:86:a5:99:71:ea:1b:de:5e:5a:9b:3c:99:ff:86:48:
         10:ee:c1:0a:67:4e:11:24:4a:ae:58:c5:b8:74:cf:bf:ee:4d:
         37:de:d1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:46:11 2025 by rpki-client