Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f991d11-a303-358a-bd43-e2b97cd9ad23.roa
File:                     0f991d11-a303-358a-bd43-e2b97cd9ad23.roa (raw, json)
Hash identifier:          RMsjh2WDWaVWJFCcEJRwRG/Its4SGsAN12pP+nZtDzU=
Subject key identifier:   EB:55:EE:80:71:31:B4:CB:53:6D:36:DE:B6:9D:32:1A:C6:4F:3D:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143E37A9296D103D11CDD580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f991d11-a303-358a-bd43-e2b97cd9ad23.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.186.66.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3e:37:a9:29:6d:10:3d:11:cd:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=5525fed1-ec3a-4075-927d-90c9d5af37c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:c5:6b:56:6b:79:e4:f4:be:67:3e:44:b4:
                    2f:62:b8:15:7c:41:60:89:d7:08:41:da:ab:6a:f5:
                    65:91:03:21:d3:4c:98:76:0c:e0:06:54:03:6e:d0:
                    10:30:68:b0:93:af:e8:56:c8:36:c7:4f:a8:00:f3:
                    97:4d:3b:29:99:81:a7:22:90:73:b1:a8:2f:fa:79:
                    ab:05:c2:11:eb:fd:d0:b6:6a:7a:3e:4f:eb:d7:5f:
                    65:2a:9d:15:b7:83:b7:19:8e:54:23:c2:7a:af:e5:
                    c8:82:f7:8f:be:f9:a8:07:e7:b4:1c:09:c3:4b:3c:
                    bd:5f:bd:95:30:df:2f:fc:08:8f:3b:54:52:a8:f3:
                    90:f6:a1:42:4d:28:eb:f8:e8:6c:3d:7d:24:00:c7:
                    9b:ce:d8:2e:af:db:b5:a2:d4:02:10:e4:6b:86:b9:
                    54:c2:8f:a2:b0:65:e1:1c:20:28:64:be:e7:57:7d:
                    b1:4e:f4:bb:ce:18:bc:53:1c:6a:3d:a2:75:81:84:
                    43:d4:f1:f5:57:67:3e:e7:7b:14:95:9f:1e:f4:42:
                    4a:3f:86:ed:b3:7c:65:b9:41:99:95:3e:83:2d:46:
                    63:60:9d:3b:c3:5d:49:2e:6b:52:6e:4a:ea:9b:cf:
                    57:37:f4:a3:2d:9e:3a:a1:cc:e6:2a:13:c9:0e:8e:
                    84:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:55:EE:80:71:31:B4:CB:53:6D:36:DE:B6:9D:32:1A:C6:4F:3D:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f991d11-a303-358a-bd43-e2b97cd9ad23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.186.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:bc:1e:94:1a:d1:f6:21:d5:d9:51:17:21:d5:ad:08:bc:db:
         11:f6:62:a2:bd:09:8c:5f:0f:66:12:fe:d8:e5:41:a3:d4:86:
         77:75:df:e8:85:91:82:7b:96:75:99:e3:c2:8d:1b:e6:1d:63:
         7a:87:ca:3f:cd:b0:dc:1e:79:f8:fd:48:3f:25:63:5c:9c:68:
         dd:d3:d3:b3:94:36:2d:7d:81:a7:53:6f:7a:e0:14:21:fe:fd:
         d8:87:8d:ca:26:af:36:ef:da:cf:bf:3f:48:d7:79:3f:37:bc:
         83:00:98:90:56:03:3a:b0:f4:93:d8:a9:6f:8b:bb:2b:2f:c0:
         55:d3:ed:d8:75:70:28:d4:2b:96:1e:1b:db:50:66:af:b0:4d:
         10:d8:3c:cf:11:29:3f:9b:e0:1c:6b:1e:3e:96:38:7b:82:ca:
         46:bf:cc:c9:5c:79:d7:f1:b6:59:93:52:05:f5:5e:c3:81:dc:
         7f:65:46:63:b4:d1:5e:9b:9d:0d:ec:71:6c:e6:55:06:95:bd:
         99:4c:0b:65:bc:5d:9c:74:9e:7c:0e:60:a1:a9:6a:a7:c4:cc:
         b9:64:33:c2:19:af:b8:a8:2e:3f:2d:f1:44:1c:3e:bf:af:08:
         0a:0b:98:a3:1e:1b:52:30:fe:50:e6:3d:d1:6e:4b:06:1d:c2:
         fd:e4:51:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPjepKW0QPRHN1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NTUyNWZlZDEtZWMzYS00MDc1LTkyN2QtOTBjOWQ1YWYzN2MxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvbFa1ZreeT0vmc+RLQvYrgVfEFgidcIQdqr
avVlkQMh00yYdgzgBlQDbtAQMGiwk6/oVsg2x0+oAPOXTTspmYGnIpBzsagv+nmr
BcIR6/3Qtmp6Pk/r119lKp0Vt4O3GY5UI8J6r+XIgvePvvmoB+e0HAnDSzy9X72V
MN8v/AiPO1RSqPOQ9qFCTSjr+OhsPX0kAMebztgur9u1otQCEORrhrlUwo+isGXh
HCAoZL7nV32xTvS7zhi8UxxqPaJ1gYRD1PH1V2c+53sUlZ8e9EJKP4bts3xluUGZ
lT6DLUZjYJ07w11JLmtSbkrqm89XN/SjLZ46oczmKhPJDo6EzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOtV7oBxMbTLU2023radMhrGTz0NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGY5OTFkMTEtYTMwMy0z
NThhLWJkNDMtZTJiOTdjZDlhZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSbpCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF28HpQa0fYh1dlRFyHVrQi82xH2YqK9CYxfD2YS/tjlQaPUhnd13+iF
kYJ7lnWZ48KNG+YdY3qHyj/NsNweefj9SD8lY1ycaN3T07OUNi19gadTb3rgFCH+
/diHjcomrzbv2s+/P0jXeT83vIMAmJBWAzqw9JPYqW+LuysvwFXT7dh1cCjUK5Ye
G9tQZq+wTRDYPM8RKT+b4BxrHj6WOHuCyka/zMlcedfxtlmTUgX1XsOB3H9lRmO0
0V6bnQ3scWzmVQaVvZlMC2W8XZx0nnwOYKGpaqfEzLlkM8IZr7ioLj8t8UQcPr+v
CAoLmKMeG1Iw/lDmPdFuSwYdwv3kUQo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:01:04 2025 by rpki-client