Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f656bd6-9863-3e5b-839a-dce0f1afe576.roa
File:                     0f656bd6-9863-3e5b-839a-dce0f1afe576.roa (raw, json)
Hash identifier:          dHY18eFoZVFf2J5KvSFUqf0WIRHVY02zOX3PgN0xB+o=
Subject key identifier:   0A:84:11:D4:89:1C:E7:2C:59:16:98:46:54:1F:F8:D4:D3:7B:C9:AB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143A9AF7BECE61DF87525080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f656bd6-9863-3e5b-839a-dce0f1afe576.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33490
IP address blocks:        71.237.164.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:9a:f7:be:ce:61:df:87:52:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=2aca9a84-7511-43ac-8203-a8ef65e33600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:09:d3:33:16:0f:bd:0a:9a:71:ad:17:37:
                    8e:43:ae:34:be:85:f0:c1:b8:db:bc:83:38:39:e6:
                    6a:89:ca:d8:db:99:bb:bc:d6:6c:2f:8b:ed:f9:27:
                    af:de:79:a7:b6:20:12:cd:04:c0:68:8c:a5:9a:5e:
                    23:71:19:0e:07:a4:9c:03:8f:67:46:ab:d5:22:ce:
                    ce:ef:26:04:db:a8:29:5c:73:21:6c:b8:fa:64:49:
                    30:7e:18:ac:b5:f6:8f:21:0b:99:c5:88:94:b5:7d:
                    61:96:25:6e:3c:e3:ce:09:d7:96:fc:86:03:28:c9:
                    a4:e8:04:66:25:d6:48:fb:4c:73:89:c5:76:1f:a3:
                    1b:94:9c:04:03:14:5b:14:07:19:51:1c:e2:9c:20:
                    f8:1e:7c:75:c8:fd:14:3a:85:81:09:1a:57:b2:82:
                    d8:24:24:65:8b:db:5c:d1:c3:bb:21:f1:47:71:9c:
                    66:6c:39:4c:31:e0:bb:f9:bb:ab:00:4d:30:cc:47:
                    df:12:d6:70:cd:be:de:1d:b1:c5:24:b5:c5:cb:be:
                    41:6b:6a:49:ff:7b:0f:40:b2:da:e5:df:fc:82:77:
                    94:6e:8f:37:c1:01:d3:bd:0d:28:cf:19:0c:3f:89:
                    0e:04:f0:2f:fd:71:ec:fb:95:43:94:d7:f7:95:20:
                    27:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:84:11:D4:89:1C:E7:2C:59:16:98:46:54:1F:F8:D4:D3:7B:C9:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f656bd6-9863-3e5b-839a-dce0f1afe576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.237.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:2f:d0:1a:10:39:49:01:1f:0c:8f:ef:ec:7f:7a:4d:9b:bb:
         2f:b1:f0:26:fd:28:9c:f8:a5:ee:34:37:02:e1:83:45:b2:c6:
         44:38:3b:69:8d:fe:39:a3:ea:83:dd:a9:8f:2a:30:58:8c:e1:
         2e:4c:df:d4:a1:c9:24:44:03:5e:33:d2:28:6c:d6:1e:a5:d8:
         c4:59:98:06:f7:85:2a:69:d3:5e:81:df:02:83:46:38:6b:8d:
         e6:74:37:ed:37:97:47:a2:11:fd:21:38:c1:0d:56:14:4a:fc:
         4d:db:0d:0c:bc:49:59:87:c5:e1:b0:e6:56:d3:72:91:0c:12:
         40:67:31:41:24:2f:ae:62:57:ca:ba:c8:6d:a1:2d:cb:6f:69:
         a3:a0:b0:54:e5:c8:18:e2:db:23:a5:66:af:02:59:60:90:bd:
         5f:79:12:05:ec:22:b3:f5:ce:5a:a1:86:0e:71:27:35:3f:d4:
         d8:a0:6b:3e:a3:69:a9:bf:fd:b7:80:c7:9d:16:f4:eb:40:1b:
         58:a2:46:c2:d6:4a:b7:00:cb:99:66:04:c2:9f:9c:3c:54:e5:
         5f:d4:92:b1:4f:6e:48:58:30:35:fa:3c:8c:35:77:87:2c:8b:
         2f:f2:5f:2c:3f:de:92:b4:7e:31:32:a6:d9:49:ce:c0:87:57:
         52:ba:cd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:44:11 2025 by rpki-client