Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1535331a-3c79-3717-851e-665c5c49dedb.roa
File:                     1535331a-3c79-3717-851e-665c5c49dedb.roa (raw, json)
Hash identifier:          yJKwVnd8zve/b6/hRXeA2J/8YeGb0jYjVTBzc6wnZE8=
Subject key identifier:   F7:8F:44:56:00:38:A5:92:02:84:EF:85:5B:4E:8F:D5:14:0C:E7:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AE36A9AF178961E3525B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1535331a-3c79-3717-851e-665c5c49dedb.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        71.234.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:e3:6a:9a:f1:78:96:1e:35:25:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=ff985e3a-e52c-432b-8744-77916127c77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:99:db:3f:8b:8e:35:65:a6:72:fc:f2:33:
                    e3:a1:d1:44:87:77:cd:8d:bb:21:18:f8:73:22:98:
                    6e:7a:70:bb:df:bf:70:fc:8d:28:df:5f:5c:ac:78:
                    9d:98:d1:fd:82:78:95:79:08:ae:a4:eb:ff:f6:e0:
                    a8:33:56:5e:bc:14:86:14:4a:95:09:d8:53:aa:97:
                    37:82:de:1c:dd:93:d9:f9:ab:37:e3:6b:a6:1e:86:
                    bb:b0:a7:ee:17:83:c2:dc:38:6a:f6:54:a9:a4:34:
                    bd:d3:24:38:55:f3:9f:13:9f:71:5a:ce:39:a9:ff:
                    dd:f0:72:81:91:42:e4:9a:94:44:61:33:d1:65:92:
                    bc:eb:33:34:e1:cd:c1:07:9e:23:8c:b7:c4:65:30:
                    a1:f5:8d:31:29:fd:1c:44:a0:1c:c0:2c:c0:86:97:
                    8b:2b:b1:3f:16:a7:6b:10:8f:12:e1:25:bf:16:af:
                    94:69:75:17:2f:b7:d6:5b:e4:bb:8d:32:c1:51:f6:
                    fe:9d:dc:41:af:60:15:78:b7:7c:fe:8f:f6:6a:af:
                    60:59:9a:07:b3:b6:fb:02:17:4c:7e:e3:44:f3:58:
                    50:a7:e9:25:48:f2:06:ca:80:37:c5:26:9e:f3:c0:
                    1e:f2:15:41:8c:bc:14:9a:87:9a:06:7f:ef:ae:1d:
                    e1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8F:44:56:00:38:A5:92:02:84:EF:85:5B:4E:8F:D5:14:0C:E7:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1535331a-3c79-3717-851e-665c5c49dedb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.234.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:eb:95:1e:42:bb:d6:42:c0:64:6a:be:83:e1:17:00:9f:70:
         ab:90:e4:54:a1:ad:43:2e:1d:00:3a:d9:bc:36:02:4b:c3:2e:
         8e:9a:c2:27:46:ea:4e:78:1f:5b:de:77:37:a4:cc:1d:fb:e2:
         f7:fb:6a:32:b3:11:7b:fb:3a:f6:83:0c:e8:56:1b:b0:db:ec:
         ad:02:f8:6a:70:0b:ea:53:85:f1:46:9c:ee:12:60:9d:8c:2b:
         db:72:b8:02:af:3d:c1:01:c8:df:18:f4:10:71:f7:f6:32:d5:
         81:01:c7:09:14:b7:03:07:15:89:46:eb:ed:b5:03:92:98:b0:
         f1:98:7b:6b:ad:6c:8a:b1:6f:c0:2a:8e:10:8f:91:d0:01:2f:
         59:de:2e:69:cd:db:d3:62:ef:11:ef:cb:38:06:a5:78:86:b3:
         c6:ad:2d:97:73:8c:b0:07:f2:46:9b:d2:78:41:34:be:70:62:
         fc:27:12:ba:bb:e0:43:86:50:25:90:24:0e:b0:f5:92:5e:ac:
         15:95:7f:ca:a9:63:7d:2c:3d:79:04:57:b4:35:c2:41:8a:67:
         b5:8b:85:85:15:a9:fb:60:8c:95:64:62:d3:dc:e7:c7:99:50:
         97:d5:c5:85:13:9d:50:ca:34:5e:1f:5f:7c:b7:91:97:8d:61:
         45:36:ab:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOuNqmvF4lh41JbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZmY5ODVlM2EtZTUyYy00MzJiLTg3NDQtNzc5MTYxMjdjNzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvuZ2z+LjjVlpnL88jPjodFEh3fNjbshGPhz
IphuenC7379w/I0o319crHidmNH9gniVeQiupOv/9uCoM1ZevBSGFEqVCdhTqpc3
gt4c3ZPZ+as342umHoa7sKfuF4PC3Dhq9lSppDS90yQ4VfOfE59xWs45qf/d8HKB
kULkmpREYTPRZZK86zM04c3BB54jjLfEZTCh9Y0xKf0cRKAcwCzAhpeLK7E/Fqdr
EI8S4SW/Fq+UaXUXL7fWW+S7jTLBUfb+ndxBr2AVeLd8/o/2aq9gWZoHs7b7AhdM
fuNE81hQp+klSPIGyoA3xSae88Ae8hVBjLwUmoeaBn/vrh3hQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPePRFYAOKWSAoTvhVtOj9UUDOe1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTUzNTMzMWEtM2M3OS0z
NzE3LTg1MWUtNjY1YzVjNDlkZWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+pMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLrlR5Cu9ZCwGRqvoPhFwCfcKuQ5FShrUMuHQA62bw2AkvDLo6awidG
6k54H1vedzekzB374vf7ajKzEXv7OvaDDOhWG7Db7K0C+GpwC+pThfFGnO4SYJ2M
K9tyuAKvPcEByN8Y9BBx9/Yy1YEBxwkUtwMHFYlG6+21A5KYsPGYe2utbIqxb8Aq
jhCPkdABL1neLmnN29Ni7xHvyzgGpXiGs8atLZdzjLAH8kab0nhBNL5wYvwnErq7
4EOGUCWQJA6w9ZJerBWVf8qpY30sPXkEV7Q1wkGKZ7WLhYUVqftgjJVkYtPc58eZ
UJfVxYUTnVDKNF4fX3y3kZeNYUU2qyI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:28 2025 by rpki-client