Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e35b472-1907-3622-8b9c-30289abd298f.roa
File:                     0e35b472-1907-3622-8b9c-30289abd298f.roa (raw, json)
Hash identifier:          LrMUw4T++UnkrENWzgAEmMJAUvSMXI7ZgN7Yy+1EGO8=
Subject key identifier:   74:78:5C:FA:F3:0F:C2:DB:BF:E6:0C:CE:4A:DE:24:10:95:20:99:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C13F01E8086C8FAD60BAD20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e35b472-1907-3622-8b9c-30289abd298f.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        73.189.108.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:13:f0:1e:80:86:c8:fa:d6:0b:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=c43f8744-4fe4-4e70-a07e-a1aeb62936ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:21:50:f7:13:9f:32:65:7e:10:46:18:4d:79:
                    fa:5a:ad:0f:2f:14:71:fc:c6:ab:d7:93:60:e2:b9:
                    7e:91:87:8f:34:c5:cc:6e:02:ce:62:64:39:97:c3:
                    c0:f4:64:f7:0f:0d:8f:c8:8e:cb:43:a1:0d:59:d7:
                    7e:5d:a1:9a:98:e4:d7:37:51:a3:80:3a:a4:b1:8f:
                    66:2a:f5:c3:ec:0c:6b:3f:17:e6:48:49:40:ae:98:
                    23:18:e8:38:de:b6:b2:70:e9:69:ce:cf:44:bd:43:
                    49:c8:9a:e5:18:cb:0e:84:dd:55:dc:68:8d:e1:88:
                    f7:b0:25:07:2e:3a:1a:97:eb:0f:6a:d3:09:39:07:
                    4d:0a:0b:61:33:da:af:67:a0:4d:52:1c:4e:29:06:
                    bf:d0:0f:96:27:56:31:12:26:ff:84:de:3a:63:5d:
                    84:7d:f1:75:de:09:48:e2:d1:9c:63:93:23:ca:06:
                    1f:d8:03:cd:73:ec:da:cc:b6:b2:48:12:58:7b:c8:
                    7f:ee:97:06:18:c5:f3:37:18:f6:b9:83:30:e7:ec:
                    d9:e5:54:5a:72:7b:d3:d0:78:f8:71:dc:e5:36:6e:
                    64:a5:97:28:5e:58:f3:d4:bb:83:05:3c:c2:1f:1b:
                    09:2b:d7:0d:b4:de:9a:23:1a:b6:c1:b0:77:07:f5:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:78:5C:FA:F3:0F:C2:DB:BF:E6:0C:CE:4A:DE:24:10:95:20:99:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e35b472-1907-3622-8b9c-30289abd298f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.189.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:5b:96:cf:e0:29:1f:71:d6:5e:2f:ad:91:8e:50:2c:c1:05:
         97:a2:7e:47:57:52:a8:73:98:e3:a6:a1:67:54:7d:7d:fd:e6:
         3f:23:d8:a4:58:17:d7:76:c4:da:70:f7:c6:f0:2c:31:ef:b9:
         8a:b4:c5:8a:b3:bf:56:0a:7d:d7:10:6e:21:0f:88:26:be:9a:
         12:98:71:0e:12:84:25:e8:b8:db:cf:ea:66:c1:71:b3:4c:d7:
         a5:eb:42:9d:85:6f:e6:60:44:13:7d:51:fa:cc:ea:1e:c4:56:
         ed:83:19:85:36:1d:fb:aa:58:fc:ad:df:b5:dc:23:07:f0:54:
         01:46:b8:05:ef:87:9c:17:d3:99:55:8a:e6:89:94:b6:aa:74:
         9a:3d:7f:94:b8:fa:49:04:b5:01:5a:37:2c:6f:29:27:c0:ea:
         bb:f7:b4:47:c8:4a:4b:00:ea:34:2b:6c:1b:c8:de:79:90:df:
         44:1f:6c:dd:b9:e7:c9:a8:cb:5b:35:69:51:f2:5e:29:61:a8:
         66:08:00:58:f7:c7:84:70:28:03:02:1c:b9:ef:58:d6:47:46:
         c0:88:f1:06:07:8f:60:bb:92:af:19:53:68:e7:43:6f:23:8c:
         8d:41:b9:f8:b1:04:f7:12:80:82:bf:21:20:a2:66:9a:97:78:
         ee:de:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:49:27 2025 by rpki-client