Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a8e9112-7657-33da-8a79-de21a58a45a8.roa
File:                     3a8e9112-7657-33da-8a79-de21a58a45a8.roa (raw, json)
Hash identifier:          lV3C4YhCkRaSVvb4en800ezCdEPFwigFo+fdY/xbN40=
Subject key identifier:   D4:E6:CD:19:41:4F:16:D0:02:9E:74:99:DC:01:A1:0D:C5:3F:01:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B3C7C77B134383583D6A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a8e9112-7657-33da-8a79-de21a58a45a8.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33668
IP address blocks:        107.5.180.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:3c:7c:77:b1:34:38:35:83:d6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=59cb7095-83a0-4c55-8da0-68ca13570ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:89:25:55:e7:44:33:08:37:05:ff:ea:17:e0:
                    0b:f0:94:5c:53:e7:6e:5f:ba:be:65:52:16:95:74:
                    23:77:fc:79:5d:d4:c4:bb:84:e1:69:3b:ad:63:4f:
                    44:dc:f0:1e:45:94:c6:92:02:d0:ba:01:b3:a5:8d:
                    43:23:6d:95:f3:33:3e:e3:a6:c3:f3:f3:cf:d1:93:
                    80:22:cd:43:35:c4:f4:30:3b:00:27:8a:23:f0:4e:
                    da:04:eb:b4:7b:ab:4e:81:ec:5f:e9:7f:81:24:5e:
                    ab:61:d7:96:b4:29:c5:52:7b:d0:5b:00:33:be:b0:
                    af:af:d9:48:d2:22:ed:93:d1:8e:c0:45:9f:55:e0:
                    28:35:3e:fd:9d:c0:38:79:75:e1:c9:8b:1e:80:e1:
                    62:fe:e1:33:d5:f6:6f:71:21:0e:6e:0c:28:21:4c:
                    c5:75:3a:8e:df:54:e9:4a:3c:5a:90:ef:2f:bb:4e:
                    76:f1:b7:4a:87:3a:f5:ee:8b:ac:e7:3f:59:6f:07:
                    39:d8:0f:5e:cb:68:3a:7e:14:fe:94:ad:aa:7f:77:
                    08:d3:61:ab:37:37:7b:6a:e0:3b:b8:f8:d3:25:a9:
                    63:90:e4:4f:99:37:5b:fc:da:4e:21:0b:d8:e3:79:
                    68:80:20:5f:77:8a:20:c2:16:77:d1:a3:d4:87:16:
                    41:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E6:CD:19:41:4F:16:D0:02:9E:74:99:DC:01:A1:0D:C5:3F:01:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a8e9112-7657-33da-8a79-de21a58a45a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.5.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:08:6d:d7:93:ea:b1:98:7f:99:19:8a:57:5e:10:76:4a:a7:
         c3:6d:07:0a:90:fa:fa:a4:e6:e4:f0:67:e5:18:1c:df:a1:ff:
         4d:6e:ae:19:0c:44:5f:e1:05:7d:37:7a:28:44:bd:4d:55:c6:
         88:3a:ee:b6:6e:92:ff:37:5f:ae:0d:74:f3:c1:89:ec:21:89:
         29:7f:8f:95:62:56:e5:ac:e3:ff:9d:b0:88:fb:96:64:1a:45:
         f5:fd:08:b9:b5:d8:79:d1:bc:c8:14:7d:2f:80:4f:86:92:db:
         c1:27:32:a9:fc:32:83:26:83:1d:09:09:c4:74:7b:1b:96:45:
         b0:86:f0:db:d9:a4:a3:59:6f:01:fe:0e:b0:f4:68:17:47:b5:
         38:01:fa:f2:c5:ca:97:af:f8:63:a7:f9:29:80:ab:12:21:41:
         db:0a:4f:bc:7e:cf:4b:1f:22:ec:bd:02:76:98:1d:b5:ab:a8:
         89:7f:19:79:94:d5:cd:bd:ca:1d:7f:d5:32:ed:c0:7d:7a:90:
         ab:75:d4:00:f6:4b:2f:8c:48:46:32:d3:dd:94:1d:77:40:5b:
         8b:6e:05:04:f7:70:6b:4a:a1:f9:76:26:0e:35:bc:6a:32:55:
         a6:3c:0d:a1:35:26:63:ee:96:07:ef:a1:3b:16:c4:df:5c:b3:
         be:de:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:33:02 2025 by rpki-client