Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eb3ea2f-1cbe-3afb-9488-35e4df6d57b2.roa
File:                     3eb3ea2f-1cbe-3afb-9488-35e4df6d57b2.roa (raw, json)
Hash identifier:          sPlncanmf0jul3TNP/wwMRNx4gTOMhOKDo14+hc5K+0=
Subject key identifier:   84:3B:CC:E8:B3:FD:75:38:6D:C6:C5:0B:2E:6A:E6:3F:67:70:A1:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143E381965F6FFB7982E7B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eb3ea2f-1cbe-3afb-9488-35e4df6d57b2.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.186.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3e:38:19:65:f6:ff:b7:98:2e:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=46183385-8f65-48b8-869d-f9d6e8da541b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:6f:35:e6:b1:e4:56:62:af:75:aa:c5:83:
                    14:18:2a:ff:40:52:79:78:11:fa:f1:af:51:9c:04:
                    41:92:70:72:88:12:f5:4d:00:43:3a:28:57:c8:db:
                    a4:69:b5:c8:42:f5:41:bf:68:b3:c6:96:7e:70:5a:
                    3a:13:79:cf:9e:1b:55:e1:1f:a2:1f:9f:94:f5:63:
                    ed:2d:c0:cd:44:a4:15:55:06:d2:67:f7:39:88:0b:
                    9a:c0:ff:5b:ec:54:2d:5b:04:21:a6:b6:a0:6f:43:
                    75:16:12:c6:6d:86:e3:7f:9b:de:17:fc:fc:9a:04:
                    f7:fe:44:24:0d:12:6c:86:0d:35:4c:78:72:11:5c:
                    b0:49:45:7e:f6:ff:44:4f:41:65:e7:07:6f:cc:3f:
                    72:88:29:e5:78:54:e9:f6:a6:2d:5c:17:34:80:b2:
                    df:3f:08:b2:08:88:0a:72:6a:99:01:dd:dc:9d:73:
                    79:63:2d:ec:8c:a4:8d:d5:ee:2a:1a:d7:c0:63:ce:
                    ba:ec:e6:86:a8:97:89:de:7a:24:b6:a6:20:49:72:
                    04:58:e6:20:53:e3:a3:51:d7:67:06:c2:6d:8b:21:
                    4e:4a:cf:07:21:07:3a:4b:a7:33:a7:0b:35:8a:be:
                    20:86:6f:3b:a4:29:39:f5:d5:45:dc:90:5b:ac:83:
                    97:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3B:CC:E8:B3:FD:75:38:6D:C6:C5:0B:2E:6A:E6:3F:67:70:A1:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eb3ea2f-1cbe-3afb-9488-35e4df6d57b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.186.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:3b:36:59:5e:f3:8a:b4:62:a4:60:42:12:cf:92:d5:19:3d:
         53:ba:ec:8b:63:ff:ff:49:82:14:d6:3e:16:98:31:41:54:c5:
         8c:87:e8:e9:26:fd:9f:66:1f:c3:97:02:47:20:00:e4:64:23:
         9d:51:08:1f:b2:e8:c6:92:a9:d0:29:93:c3:47:8a:b0:e8:e0:
         03:d5:a4:22:8e:6d:92:7b:97:1e:97:7f:67:46:34:cc:a9:ef:
         4a:b3:76:96:a1:d4:23:5e:83:9e:20:51:73:67:c0:86:26:c2:
         d9:66:2e:3c:2d:41:cb:18:85:8d:7e:ad:18:b9:ca:09:fa:20:
         42:3d:87:bf:ad:d9:2f:f5:fc:c0:4e:c5:59:0c:27:10:6e:08:
         35:04:8a:47:fb:bf:18:b0:31:b1:ea:8e:f7:15:20:29:50:f6:
         c4:42:52:e1:ea:0f:dc:3f:bb:67:37:b1:2b:e3:dc:31:45:42:
         88:51:4a:3e:1f:a4:ac:21:f3:70:e2:f1:15:31:f2:1d:b4:f7:
         d5:46:9d:a7:e9:4a:9a:0a:00:f5:38:b6:c6:7a:c1:ef:c6:49:
         3c:e8:95:8b:ef:aa:57:a6:22:56:9f:cf:f3:3c:0b:f8:37:17:
         f7:d6:d8:e5:ff:b9:b4:ac:0c:8b:32:a5:2d:af:eb:64:35:73:
         bd:47:87:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:48 2025 by rpki-client