Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d2d4668-937e-32a1-a3bc-78c34ed6af7c.roa
File:                     4d2d4668-937e-32a1-a3bc-78c34ed6af7c.roa (raw, json)
Hash identifier:          jfE6BSRyPdYQbgRycLvZa3uEf2NKBTLqyLURc4Q03Tw=
Subject key identifier:   9E:E1:AA:18:11:52:56:E8:22:CD:FD:6F:18:CF:7E:FB:60:F4:C0:B0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1181B4F01E1F80AB115C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d2d4668-937e-32a1-a3bc-78c34ed6af7c.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        67.169.52.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:81:b4:f0:1e:1f:80:ab:11:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=7a904b44-a9a6-4fb4-8221-8ad0ffef3551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e2:d1:43:2c:c1:07:43:02:e8:41:80:09:6b:
                    0b:b3:72:1f:6c:b8:d6:22:f8:55:b0:a3:df:bc:8a:
                    aa:87:fd:c7:92:24:79:db:20:5c:48:57:7c:23:09:
                    20:00:4d:34:cb:80:16:81:3a:bb:8f:29:50:ee:0d:
                    97:7b:b6:19:02:47:bb:38:a6:a5:f6:8b:1a:65:43:
                    47:bf:07:e5:fd:d8:88:76:e4:60:2c:35:5e:27:c2:
                    20:8e:31:32:5a:7d:1b:74:10:c9:36:db:24:d4:84:
                    43:fa:0f:1b:fa:32:be:5d:38:22:fc:77:e6:45:14:
                    ae:61:ef:09:cc:f2:6c:c1:66:5e:42:df:b2:d2:2b:
                    64:e2:01:21:8f:e3:96:4f:3b:11:41:5f:7c:5c:d2:
                    d5:03:de:4a:68:10:90:75:0b:c2:9a:7e:a2:b8:7c:
                    55:1a:7d:6e:74:72:82:a6:1f:f8:a3:1a:9f:76:1a:
                    2b:3e:c5:ed:0f:3e:b4:04:ff:f4:1b:c7:76:28:ea:
                    87:ff:d2:d1:ff:6f:0a:7a:0f:49:f7:09:20:23:bd:
                    3e:36:15:74:6e:27:29:57:f7:05:a4:0a:91:d2:5e:
                    b9:cc:58:ab:65:7a:08:b9:0f:0a:5b:53:02:83:2e:
                    72:9e:bd:4f:5b:dc:21:06:49:f8:dd:2a:10:32:11:
                    fc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E1:AA:18:11:52:56:E8:22:CD:FD:6F:18:CF:7E:FB:60:F4:C0:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d2d4668-937e-32a1-a3bc-78c34ed6af7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.169.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d9:69:43:57:68:87:62:94:22:ce:16:8f:31:43:c1:a4:5f:
         ea:28:da:af:a4:a6:bf:9a:94:e4:33:ba:da:2d:1a:b4:59:c3:
         ba:7e:2c:4e:64:45:9b:9c:f8:29:e8:67:43:6d:fc:73:2e:f5:
         22:6b:69:fb:30:83:65:91:de:84:f6:94:40:10:ad:7a:3b:ff:
         36:1e:b1:e1:ca:75:ec:8f:7e:f3:71:64:29:b4:0f:43:03:27:
         53:74:76:41:a4:95:e5:1b:2b:2d:ba:dc:38:34:60:82:c8:c1:
         49:5e:6c:88:63:e9:60:eb:15:50:e8:06:71:79:7f:60:48:26:
         3d:ff:e0:d9:35:53:33:96:c6:e2:ea:3d:e0:79:53:68:1b:d9:
         dc:f4:9b:18:6b:06:57:62:95:9a:66:aa:4f:21:71:68:08:8a:
         36:e5:b3:3b:93:ab:0d:4d:fe:a7:c0:46:3f:fd:46:ac:1f:12:
         f1:1a:8a:e6:9f:e2:d7:f8:f3:94:62:45:dc:ee:70:03:83:27:
         56:80:df:cb:f0:5d:9c:91:04:c8:a5:fa:68:c4:96:c8:8e:91:
         41:89:84:12:0b:83:28:bc:34:ea:3a:fd:4c:1b:f6:d8:9c:23:
         57:22:53:ef:0c:38:90:6a:a2:03:f6:39:e7:a7:04:e3:63:18:
         42:74:54:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:41:23 2025 by rpki-client