Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76ad4a44-b046-3f3d-9e3e-a80d2bea2855.roa
File:                     76ad4a44-b046-3f3d-9e3e-a80d2bea2855.roa (raw, json)
Hash identifier:          2DcCnWAPTi2wOwWxPP5VDy0ml9KLyxhPhMLUKZSWVjY=
Subject key identifier:   15:FF:B3:30:91:20:E4:72:21:BF:F7:05:C3:34:9A:F2:8A:8B:DA:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B2616F2DB1EE77F28BC5DE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76ad4a44-b046-3f3d-9e3e-a80d2bea2855.roa
Signing time:             Tue 28 Jan 2025 17:37:05 +0000
ROA not before:           Tue 28 Jan 2025 17:37:05 +0000
ROA not after:            Mon 28 Apr 2025 16:37:05 +0000
asID:                     33491
IP address blocks:        71.194.96.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:61:6f:2d:b1:ee:77:f2:8b:c5:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:37:05 2025 GMT
            Not After : Apr 28 16:37:05 2025 GMT
        Subject: CN=1332adbf-86d8-4a98-9910-8ec150ddac4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:36:52:84:e7:81:30:7b:29:6b:ee:5d:70:9f:
                    8f:83:c0:40:3e:ea:5a:da:4e:55:ae:98:af:f7:e5:
                    e5:01:37:7d:91:5a:64:e2:bf:c3:3d:b6:71:cf:36:
                    73:00:57:36:c3:c1:ab:d8:39:00:d3:46:2a:35:58:
                    cf:e2:45:5b:50:0c:79:12:5a:b8:7b:2e:eb:38:43:
                    8b:5f:9a:1d:45:41:dc:e8:2f:3f:60:97:00:12:dc:
                    67:32:91:35:bd:3f:f3:17:88:1f:8b:22:85:fa:e9:
                    b7:3d:28:5e:4e:b9:3f:51:30:99:c0:5b:17:dd:50:
                    4d:6e:d8:01:4b:74:3f:91:81:98:a0:f9:17:d9:a1:
                    13:a3:db:45:a6:a6:0d:8a:33:dd:d3:2b:5a:d6:57:
                    21:07:65:bd:11:c7:99:ec:74:78:8b:97:73:28:ea:
                    ff:41:c8:6c:24:af:d1:9f:f1:3d:28:ad:1c:4c:b3:
                    ab:ac:31:af:c3:87:7e:01:84:6c:c7:4a:15:9b:e2:
                    15:be:bf:d7:6c:cb:bf:7d:54:f5:0a:93:90:9a:cb:
                    7f:8d:1f:11:a4:ab:e4:41:b9:25:f8:7c:6a:a7:14:
                    f8:be:ce:23:37:b2:31:45:81:05:cf:d2:af:3a:3d:
                    87:43:ee:e5:58:3e:7f:4b:1b:f4:e0:50:a7:4b:11:
                    c8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FF:B3:30:91:20:E4:72:21:BF:F7:05:C3:34:9A:F2:8A:8B:DA:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76ad4a44-b046-3f3d-9e3e-a80d2bea2855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.194.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:e9:dd:82:7a:79:72:f8:c1:9f:0a:38:09:8b:f0:2d:ba:80:
         82:46:f5:ab:18:52:e2:90:29:ba:92:a5:0e:1d:a0:2c:a4:a6:
         1d:1e:bc:ac:f1:37:b3:d3:53:e5:9f:54:cb:46:b7:bd:81:73:
         2e:57:be:56:3d:4c:fc:df:cd:ca:ec:79:b3:25:e4:74:b3:91:
         46:5f:32:40:3e:a8:13:7d:2b:18:39:a9:9c:1f:fb:e6:fb:0d:
         81:c1:38:18:b2:78:b9:87:3b:5e:86:f1:b9:09:2a:af:42:f3:
         c0:f1:76:5b:4f:fa:3b:ea:1e:28:7c:a7:88:f5:ab:78:f8:11:
         87:ed:60:8e:b5:5a:55:e0:19:3a:26:fd:4e:9e:46:4e:36:c7:
         33:86:48:2e:d6:20:a4:d5:8f:05:ad:aa:2f:d3:82:6f:51:6f:
         58:dc:79:d3:65:99:e1:fa:2a:36:7f:d2:86:4c:e8:a0:02:6b:
         4c:f5:b7:63:de:13:66:36:e8:28:a2:bc:35:71:5e:4d:45:79:
         29:00:1c:2b:83:ba:32:f2:2f:a6:78:e1:de:01:28:cc:1b:07:
         66:2b:a5:df:10:08:7b:bf:96:8e:dc:a2:b4:86:8e:7b:b1:be:
         dc:eb:9a:38:96:f8:35:50:27:37:8d:37:74:83:6f:20:c7:bc:
         1f:90:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:34:47 2025 by rpki-client