Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/664180f5-db30-3143-9a94-0051c25aa862.roa
File:                     664180f5-db30-3143-9a94-0051c25aa862.roa (raw, json)
Hash identifier:          w12Jo8Yoac9jZjX6Q+WNqceIILfWLCrXjQpROxwwk4c=
Subject key identifier:   D2:B0:3D:F3:B3:E7:AB:E1:33:9A:F9:6D:63:EB:4B:EA:61:41:D1:EF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143ADAEB2DE68312863D6040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/664180f5-db30-3143-9a94-0051c25aa862.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        66.30.16.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:da:eb:2d:e6:83:12:86:3d:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=f52c8d79-117a-4515-9ce6-6a1669ef1d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:12:eb:6f:c5:d0:7d:54:de:2d:71:b8:04:
                    0a:bc:df:18:ec:e9:99:ab:2b:ed:ce:3c:0a:96:bb:
                    bc:ef:c5:8d:84:a9:95:f3:97:1f:85:4f:af:fc:81:
                    da:87:60:a9:fd:83:18:61:f9:c5:de:fe:7e:b5:28:
                    22:da:8b:09:c0:99:bf:4f:7d:da:e5:c9:5a:f0:6f:
                    2f:c5:f1:b0:53:f8:64:49:86:b3:a8:33:74:02:35:
                    5f:86:91:7f:57:2f:09:74:1f:ca:b1:0e:35:84:26:
                    c6:2f:9a:6a:9e:66:16:8d:7a:3a:e2:ee:66:76:25:
                    a7:f6:68:a2:58:0b:bd:a8:db:f1:dc:8e:10:ea:01:
                    d8:1f:df:fd:87:d0:c0:8c:7b:bf:d4:94:87:5f:97:
                    d8:03:36:8b:1a:b3:87:dc:69:51:92:88:b6:f4:7c:
                    91:04:ea:42:76:7e:4f:0d:5a:b0:60:e0:78:cf:5c:
                    3c:74:20:97:a5:f8:92:b2:c7:a3:ab:45:77:9a:4f:
                    43:76:df:18:33:93:db:3b:6e:6a:0e:eb:26:d5:75:
                    29:f5:51:c1:f1:af:95:bc:0b:7d:65:b5:de:d2:a7:
                    c5:24:d1:0a:08:10:5a:b2:ed:2b:71:f1:8b:e0:28:
                    d6:8c:2e:41:d9:c4:ae:8f:6a:79:8f:c9:a7:91:5e:
                    37:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B0:3D:F3:B3:E7:AB:E1:33:9A:F9:6D:63:EB:4B:EA:61:41:D1:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/664180f5-db30-3143-9a94-0051c25aa862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.30.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:44:c3:55:16:97:77:2e:fd:4f:da:4f:70:fd:0b:57:6b:74:
         d2:9c:cc:98:e2:f3:52:44:a5:ba:a7:2a:13:e6:6e:17:cc:8b:
         1e:51:c5:a2:e7:a4:3e:57:2f:82:56:5b:fd:fe:fa:dd:c9:12:
         4a:ab:bb:94:32:cf:62:11:f2:d7:5a:d9:f4:7c:78:9c:45:3e:
         a6:ba:c6:3a:26:82:ef:95:9f:2c:17:fa:c1:31:3e:e9:d7:9e:
         ee:1c:3e:1b:3d:91:24:94:04:e5:a9:77:b5:d2:f8:bb:15:a8:
         a8:73:f0:90:f7:70:44:8b:05:74:4e:da:e8:d2:12:48:b9:74:
         a5:f4:1d:6c:70:a9:c5:fe:da:58:49:ac:dd:c8:0d:be:a5:80:
         38:31:ed:e4:31:0a:2c:1c:4a:8a:24:0e:de:25:6d:6c:c9:ec:
         18:b4:81:6f:81:15:94:7e:ba:07:85:9e:0c:99:7c:03:a6:8d:
         89:f6:03:17:7b:fc:e7:d5:59:c0:9f:a6:7f:ba:72:78:46:3a:
         40:6c:0b:1c:fb:33:13:17:5d:d6:1d:ab:82:b7:b5:3a:4d:57:
         35:e2:71:5c:16:2b:d5:33:ba:e1:b1:9c:36:82:9c:22:e6:0a:
         5c:43:fa:81:8b:7c:b2:0f:38:f8:09:1e:23:13:90:56:33:81:
         8f:63:22:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:01:22 2025 by rpki-client