Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46717f70-72a1-32ed-a86a-828511e57d96.roa
File:                     46717f70-72a1-32ed-a86a-828511e57d96.roa (raw, json)
Hash identifier:          +sppdyo10k5xT0oxV5c/7An8zJplmWz6z97yNQbn7Jw=
Subject key identifier:   60:85:6B:F7:8B:6E:2A:F6:33:A8:51:EE:B4:7C:0F:92:68:A6:84:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143E45D4611ABF463722B380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46717f70-72a1-32ed-a86a-828511e57d96.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.219.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3e:45:d4:61:1a:bf:46:37:22:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=69f5b764-497c-481f-93d2-46645c150be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f6:48:be:b2:37:5a:31:fc:cb:5e:c4:88:0a:
                    22:e6:eb:fa:d0:7f:1c:ef:3a:01:8a:c2:15:85:27:
                    46:c2:48:6d:76:20:52:ae:c6:c4:57:e8:bc:c4:ce:
                    04:7b:04:08:b7:d3:26:5a:1e:68:76:13:d0:1a:ce:
                    5e:88:aa:31:51:dd:44:cd:cb:a5:0c:88:cc:18:61:
                    e0:4a:71:66:2b:12:61:6b:3f:36:59:0e:76:22:da:
                    0d:a6:ab:df:72:32:c2:0d:ce:97:49:3f:b7:d3:05:
                    c2:79:01:9f:0e:d3:6e:d4:7a:db:7f:a3:84:e3:78:
                    a8:4b:45:d0:35:09:e8:a0:cf:2e:c8:44:ce:ce:75:
                    55:c6:81:e4:38:da:57:3a:cd:98:d4:9c:96:e9:fe:
                    98:43:2e:41:47:68:14:00:22:10:70:27:e3:14:df:
                    47:b6:7e:31:83:d1:77:06:41:7f:5d:c7:d5:23:0d:
                    2a:c9:09:ff:ca:7a:b9:48:26:68:cb:b6:fb:86:7f:
                    35:16:23:4c:6b:a6:88:24:07:eb:20:0c:c3:26:85:
                    9a:9c:d9:49:f4:d0:9e:9c:d7:e7:d6:95:6d:51:ea:
                    76:17:82:f4:78:ee:60:3d:ce:0a:24:84:d9:33:cb:
                    97:d6:de:ff:c2:5a:ab:59:7f:4e:c7:d5:35:46:5b:
                    69:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:85:6B:F7:8B:6E:2A:F6:33:A8:51:EE:B4:7C:0F:92:68:A6:84:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46717f70-72a1-32ed-a86a-828511e57d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.219.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:81:8d:47:df:87:3c:87:23:7d:bb:c3:51:61:1f:8e:c6:b5:
         78:64:4a:33:95:c2:d1:39:5a:bb:d8:76:0c:f2:61:69:1d:15:
         2f:4e:98:3b:a1:98:dd:4e:7f:35:5c:f8:1b:d8:94:28:7d:4d:
         4f:6d:e6:18:31:69:85:50:52:18:d1:11:10:79:63:6c:29:ec:
         ef:c0:33:81:36:e3:16:50:44:a9:ee:2d:ba:76:c9:c4:74:37:
         07:98:ae:b2:88:42:72:68:94:cb:1f:7c:16:2d:4b:47:5c:c5:
         d1:8c:aa:15:e7:9e:27:83:a1:78:4b:0c:d8:f3:81:85:68:70:
         01:9e:a1:dd:6a:74:3b:aa:26:da:dd:6b:de:fb:29:e7:5c:f5:
         d3:bd:0e:44:9b:2b:ad:c6:28:95:95:f2:52:4f:98:aa:c0:ea:
         24:2f:51:b6:23:60:2f:17:44:c0:98:61:5b:b1:07:b6:b5:7c:
         8d:f4:c8:73:39:e1:86:6f:23:f7:5f:75:22:da:cc:81:d8:84:
         0f:38:be:a7:a5:86:f5:f8:f6:bb:48:a4:b4:49:8d:5e:19:9b:
         fa:08:91:9a:6b:1c:1b:fe:3c:18:be:5b:39:7a:31:2d:6a:2a:
         92:f4:3c:a0:84:35:21:ca:9e:e1:0f:df:a8:9e:e3:22:ba:e8:
         e4:e2:a1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:03:15 2025 by rpki-client