Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7038227c-c874-3cbd-ab56-7355b2603cf5.roa
File:                     7038227c-c874-3cbd-ab56-7355b2603cf5.roa (raw, json)
Hash identifier:          Rx+7iMvEFX7C+8TgEM4O+vSARBjwX1K6hpkWejLmZRA=
Subject key identifier:   A7:1E:F4:D1:7C:CE:A9:A4:FA:83:37:33:79:FC:66:92:66:76:F6:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143F3ED7ABE1852B79DEDB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7038227c-c874-3cbd-ab56-7355b2603cf5.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33668
IP address blocks:        68.46.146.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3f:3e:d7:ab:e1:85:2b:79:de:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=d3e3d10b-4430-450a-b984-78b7785d7ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:72:11:2d:7a:b5:e4:0f:54:66:0d:30:96:
                    7c:e6:b3:6f:6b:b1:e2:8a:eb:fc:ed:a0:2c:ad:81:
                    99:a3:90:5b:dd:dc:0e:45:de:58:1f:61:61:07:11:
                    ed:38:20:b7:b8:7f:df:e7:1c:34:d2:3d:bb:65:6d:
                    28:eb:42:14:98:2c:c9:30:30:d9:9a:c2:74:a3:be:
                    12:b7:9d:ac:bb:69:93:fc:16:7e:f7:d4:03:ce:e2:
                    75:96:c4:ae:86:f7:f8:69:d7:b3:66:7b:94:a2:c1:
                    32:86:d3:ce:f2:16:5b:d7:1b:b0:63:43:4b:79:4a:
                    e4:04:41:ea:2b:b2:03:59:9a:2d:5d:5a:04:52:a7:
                    9f:94:73:f4:b9:54:0d:11:77:69:bd:02:37:04:17:
                    01:e1:3e:ea:2e:2e:f0:f7:1f:ac:bb:0a:d9:e2:5b:
                    81:fc:f9:2f:78:f7:9f:ad:10:ec:fc:9e:42:54:33:
                    d1:2b:61:da:24:23:e0:b9:e6:bf:3b:4d:07:d3:49:
                    27:62:7d:03:1e:75:a3:09:94:dc:fb:ae:0e:e8:da:
                    7e:cd:e0:82:3d:f7:cd:65:ce:dc:75:12:44:d8:8b:
                    c5:a5:e3:3c:e3:2c:61:d9:b4:3d:1c:87:67:23:51:
                    db:54:38:42:a9:88:25:a3:a4:53:bb:0b:05:d6:2d:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1E:F4:D1:7C:CE:A9:A4:FA:83:37:33:79:FC:66:92:66:76:F6:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7038227c-c874-3cbd-ab56-7355b2603cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.46.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e6:ec:d8:75:c7:47:4c:79:58:3c:ad:52:19:67:d2:3d:b4:
         4f:5e:26:77:4e:d5:67:67:d4:2f:fb:82:45:00:3f:bb:0e:3b:
         c3:88:c7:25:d9:da:a4:54:d3:cf:93:cf:a1:e4:bf:6c:99:58:
         6b:9a:79:31:81:b8:d8:8c:ff:35:df:db:23:13:20:b7:25:aa:
         d8:a8:e9:38:7f:9b:8c:bc:8f:52:52:e3:76:e1:58:8b:e4:0a:
         62:27:7d:e1:de:50:ec:a0:e0:cd:f4:94:da:3c:2e:70:a7:15:
         1d:13:2c:bc:d0:bb:b8:08:7e:1a:cb:c3:77:cc:48:ec:59:f2:
         ff:85:5d:92:71:8e:e6:42:2e:e1:0a:99:66:f5:42:9c:64:39:
         48:4e:42:fb:5c:0a:f9:b2:37:2e:b2:05:4e:c1:42:4c:ae:30:
         39:5d:a3:b0:3a:26:7e:00:58:7f:af:ae:7f:52:03:d0:df:c6:
         cd:c5:86:03:f2:16:54:4a:ca:9b:37:46:3f:4a:ea:48:f8:ee:
         bc:9e:f0:63:b9:e4:02:5b:87:b6:bf:a6:fd:86:f5:17:90:cc:
         fa:50:14:76:4b:12:cc:8e:71:eb:84:af:c1:67:f7:99:81:ca:
         76:3c:7f:e5:aa:03:e4:cf:31:79:b1:0c:a1:92:0f:00:27:0c:
         f3:48:ef:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:20:06 2025 by rpki-client