Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71141413-e7fa-3b0f-8341-487cacf441d0.roa
File:                     71141413-e7fa-3b0f-8341-487cacf441d0.roa (raw, json)
Hash identifier:          yGA1HneuHvQVqtdVVzfDvOK5I6cpFufE/rgfLScezWQ=
Subject key identifier:   D0:0C:95:7D:16:24:BF:0B:4D:7E:EA:7E:C1:94:39:7F:43:1C:1D:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C11AD8E39E5DACE9CB1D000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71141413-e7fa-3b0f-8341-487cacf441d0.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        73.92.210.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:ad:8e:39:e5:da:ce:9c:b1:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=b4c23857-b638-4146-b2f4-719d9e2a3cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3b:e9:a6:4b:58:f1:ff:04:de:c4:90:2a:5c:
                    aa:dd:d8:a1:f8:dd:6d:6b:26:7d:30:a0:1e:1d:4e:
                    8a:d8:d6:7c:23:79:4b:f0:81:86:72:21:f8:22:e7:
                    f7:85:25:61:44:fc:96:9c:33:da:26:26:b5:7c:75:
                    10:aa:1d:72:b7:fe:79:88:c9:3b:01:c9:32:5c:c9:
                    44:86:c3:a2:eb:1c:f8:1e:91:c8:b0:5a:5e:89:39:
                    6e:7c:46:b0:f1:db:12:3e:16:08:9b:a5:4b:22:6e:
                    4d:8f:39:10:55:3e:f2:9b:92:72:a4:1f:2a:2e:2c:
                    06:69:77:90:ab:71:c7:c8:77:68:19:46:40:0e:bf:
                    ef:d6:33:2c:d0:44:58:b8:fa:c6:10:c4:dd:4c:7e:
                    df:5f:0d:93:d1:d2:ef:94:fc:92:f1:05:4b:56:00:
                    d5:45:ba:46:2a:38:b1:46:8b:64:92:c7:d8:e8:77:
                    fc:23:21:b8:71:aa:6e:31:5d:72:7d:de:b5:21:9f:
                    1c:4d:83:55:a2:e6:91:e9:33:f7:9f:d0:cd:98:cb:
                    94:1e:d3:17:6d:72:54:c2:8e:70:10:bb:2e:a3:38:
                    8f:c4:5f:03:2a:c9:15:2a:94:7d:3c:ac:6c:ac:9c:
                    89:c5:be:ec:90:0f:43:56:64:fd:a8:91:f4:94:91:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0C:95:7D:16:24:BF:0B:4D:7E:EA:7E:C1:94:39:7F:43:1C:1D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71141413-e7fa-3b0f-8341-487cacf441d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.92.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:3e:a1:ec:8e:19:7a:9f:71:1f:9e:7f:a0:e2:a9:2d:74:f6:
         1e:ef:e3:72:08:36:31:3b:5f:e2:e9:6e:f8:a2:e5:5c:ab:0b:
         6f:35:f9:61:9b:ec:da:24:62:b8:7c:88:48:a0:8f:24:59:1b:
         01:15:6c:c8:8e:4d:18:98:b1:21:40:78:c9:fe:6b:fc:e7:2f:
         dc:bf:2f:48:38:75:8e:4b:73:f0:09:9c:66:85:ca:e2:32:7d:
         f4:ff:3e:a1:24:9e:f8:e6:ce:f1:5d:73:c6:6e:03:61:82:86:
         77:95:36:ec:f6:15:96:8b:ce:66:4c:0a:b2:78:82:c7:a4:2b:
         cb:8b:5a:1e:63:58:ad:f1:2d:fe:44:cf:bd:21:70:c9:20:3a:
         86:72:fd:d2:d4:8a:e6:2a:8b:a6:70:de:5d:36:ac:13:2c:0f:
         7a:fa:ec:99:1f:6c:ff:c2:66:bb:94:c1:f4:7d:5f:5f:f3:93:
         01:25:91:68:a5:e6:71:92:de:d3:bc:7a:56:e0:0e:d3:d0:28:
         d8:c7:d6:c3:a9:81:25:d9:fc:0e:96:bd:15:ee:0f:18:e4:58:
         0c:55:8e:1f:1d:0a:6a:41:51:e6:83:70:98:6f:32:40:e6:a0:
         80:d2:73:cf:a0:48:60:96:55:52:0c:8f:62:0e:54:7f:64:e8:
         44:60:be:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:47:58 2025 by rpki-client