Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45bc7a35-6da8-35b5-beae-3d247e5a64d0.roa
File:                     45bc7a35-6da8-35b5-beae-3d247e5a64d0.roa (raw, json)
Hash identifier:          6IYsJiaMeUADVH3NyEQW0jR0lAhmEAAK2lmbG/qniRM=
Subject key identifier:   1C:D8:15:32:AC:52:81:ED:81:12:B6:21:CC:49:57:EE:F1:AF:14:58
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143ABA05152D50859B14A740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45bc7a35-6da8-35b5-beae-3d247e5a64d0.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33490
IP address blocks:        76.138.172.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:ba:05:15:2d:50:85:9b:14:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=1516f4a4-936b-4f4b-b397-7f113fc755b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:03:cc:79:97:3a:17:e5:83:d4:be:05:f1:d0:
                    d1:fb:a8:fc:4e:55:0d:ea:49:a2:12:e6:0c:cb:0a:
                    1e:d1:af:0f:b8:7e:8c:95:84:99:99:29:a5:be:34:
                    08:2b:82:10:ea:4b:e8:b9:e4:ee:d9:d5:a9:ac:2d:
                    7a:c4:81:0d:09:0f:36:65:ca:d6:90:73:1c:05:2a:
                    6a:33:58:4c:f0:24:5e:fb:52:f2:95:94:4d:f4:01:
                    b9:ac:33:4d:52:b2:0b:e0:e4:d3:d2:89:99:90:5b:
                    96:c3:ee:a5:2f:fa:8a:34:cb:b8:f8:6f:75:8c:c7:
                    5c:67:22:1e:61:9e:45:b5:c5:01:b3:8c:95:d1:77:
                    77:56:40:5f:b2:cf:0c:b1:1c:02:27:1a:84:12:27:
                    52:4e:1e:57:29:e7:c1:18:d6:cc:f7:8d:51:a3:18:
                    e9:38:e4:e9:26:9e:d3:c6:8f:33:9c:42:40:34:5c:
                    6a:91:0a:97:85:2e:07:12:f5:ac:f4:b6:4e:58:50:
                    8d:7e:98:00:00:01:2d:15:f6:7f:a3:05:96:31:d2:
                    77:88:da:ee:d1:2d:dc:8a:6a:81:9a:66:6d:ab:85:
                    36:d7:8f:32:e9:a9:f2:7d:ae:ff:bd:9e:82:ad:ea:
                    50:67:c1:14:72:b0:85:66:ab:1a:08:07:d2:c1:18:
                    1c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D8:15:32:AC:52:81:ED:81:12:B6:21:CC:49:57:EE:F1:AF:14:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45bc7a35-6da8-35b5-beae-3d247e5a64d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.138.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f5:b2:95:47:e8:04:bb:bc:60:bf:14:26:aa:a8:13:8c:49:
         7d:f3:20:12:1a:16:b9:6f:95:10:96:d1:e4:2a:1c:dc:25:19:
         80:0e:ad:24:a8:2a:a7:cc:e3:d6:db:15:25:9f:c8:3b:49:00:
         d6:75:8c:f9:0c:f8:fe:5f:65:84:f0:9e:8a:a8:54:89:77:f0:
         43:6b:b8:7f:8f:de:6e:90:61:61:bc:81:1c:91:9a:2e:a8:41:
         e3:c4:58:4f:aa:02:e1:66:a6:6f:52:0e:9e:13:b6:80:79:c2:
         7d:c1:a0:7e:75:08:f5:a2:8d:a6:7c:7b:13:c2:de:97:f2:51:
         17:b6:72:99:b7:85:2d:a9:28:a7:36:ee:29:01:ad:76:ee:9c:
         fe:d8:7d:ae:bf:c2:e4:1f:36:5e:7b:06:25:2f:60:db:5e:1b:
         b0:75:42:95:d1:9b:f6:8c:33:c6:26:e2:89:a8:49:48:4b:03:
         bd:b0:cf:8d:65:1f:f3:31:43:f0:ca:eb:73:ba:5e:0e:a4:b5:
         7e:c1:3b:2b:f9:84:27:5e:2e:84:4a:ba:47:f7:94:92:32:fb:
         40:e1:fc:95:40:26:03:61:c2:1a:03:9f:41:0e:70:99:6b:31:
         32:b8:f9:8e:e6:57:00:bb:e2:11:36:71:f7:83:84:2d:6d:72:
         dc:44:da:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:14:27 2025 by rpki-client