Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78266872-7902-379f-aeee-965359a7caa1.roa
File:                     78266872-7902-379f-aeee-965359a7caa1.roa (raw, json)
Hash identifier:          WomjSqDad3/yMDU+XciIrd90Ksimgcei4uNXEiqPW9w=
Subject key identifier:   5F:BE:C2:7F:05:65:A9:86:4C:80:41:8D:B1:6C:D2:2F:F1:6E:B9:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C118B7AB8ADB9DCE275C440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78266872-7902-379f-aeee-965359a7caa1.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        73.15.156.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:8b:7a:b8:ad:b9:dc:e2:75:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=061b8cd5-99bf-4aba-b846-9a7917d30afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fc:ae:ba:04:8b:11:ce:57:e3:1f:e7:a5:59:
                    c9:0a:10:66:23:06:62:e8:da:d1:6b:d3:4a:fe:41:
                    13:13:20:3b:f2:18:a2:fa:2c:29:e5:43:c3:57:45:
                    2c:ce:15:e1:09:71:96:08:5a:91:d0:d0:a7:a7:91:
                    02:8d:5b:45:3d:79:ab:01:ec:7e:c2:af:13:17:2f:
                    0f:d5:28:09:41:30:04:df:47:fc:f2:65:3d:ed:fb:
                    8a:9c:f9:fa:ad:53:5e:03:fd:f7:6d:a2:91:a1:91:
                    e0:95:79:f5:47:db:14:de:d6:b8:e1:0b:2a:1a:0b:
                    17:91:07:33:04:44:48:b2:8c:3e:8b:83:3d:05:9e:
                    a7:e0:a5:75:11:cc:cc:56:e6:bb:97:a8:b6:e7:e7:
                    52:08:f5:7d:5f:03:fe:eb:4e:46:d8:83:d3:81:53:
                    ee:b5:95:8d:41:93:9b:39:f1:02:c0:ff:5a:c9:05:
                    51:ce:3d:d1:d9:59:51:c8:35:f3:70:29:1f:d6:43:
                    e0:fe:d9:cf:cf:37:dd:fc:23:a1:22:cb:ec:77:10:
                    bf:ce:ba:d6:cc:18:b8:57:75:5c:e5:fc:99:64:bd:
                    03:c5:d4:c7:f5:85:93:aa:40:94:6a:1c:f0:a5:8d:
                    d8:c8:7b:68:00:b5:e2:df:47:bc:05:bc:10:28:20:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BE:C2:7F:05:65:A9:86:4C:80:41:8D:B1:6C:D2:2F:F1:6E:B9:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78266872-7902-379f-aeee-965359a7caa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.15.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f7:30:74:18:ce:21:e4:4a:37:08:48:4b:38:15:4f:35:c8:
         63:f8:d1:6a:ba:b6:68:1b:c7:47:32:14:4a:23:34:60:f9:da:
         e3:35:1e:07:c1:75:93:df:7f:19:fb:4e:74:fa:49:ce:17:63:
         2c:f5:7e:c7:03:75:ac:e1:c7:9c:b7:7c:81:6d:9b:3e:4d:aa:
         0c:2d:57:f3:24:e2:7e:c1:f9:d9:0f:27:97:4c:f0:cf:6b:d2:
         42:30:e7:83:64:dd:1c:d4:0d:63:f4:29:1d:24:15:e6:be:e6:
         04:d0:fc:7d:05:aa:c7:dd:5c:1e:d2:be:4f:55:88:9e:42:dd:
         61:e3:73:22:66:14:f5:83:1b:d1:35:fc:1b:97:f4:37:e2:0a:
         a7:02:14:bc:1f:e3:78:d2:e1:2e:0c:07:f8:98:f5:e7:3d:eb:
         62:61:c0:bf:ac:25:1e:0f:16:29:b1:0c:4f:30:63:82:c4:f8:
         8e:87:5d:1c:8b:49:20:9c:cd:d0:7d:11:a2:74:c8:73:1d:f8:
         31:f1:3e:35:ef:3c:cd:5c:89:56:78:85:eb:0c:95:0a:55:f3:
         90:53:13:72:79:ae:2b:11:a2:58:66:9e:41:75:ec:12:2a:19:
         36:54:a9:3a:cc:04:12:03:fe:ce:bf:47:84:7d:5e:85:d9:eb:
         e9:b2:d6:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEYt6uK253OJ1xEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MDYxYjhjZDUtOTliZi00YWJhLWI4NDYtOWE3OTE3ZDMwYWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/yuugSLEc5X4x/npVnJChBmIwZi6NrRa9NK
/kETEyA78hii+iwp5UPDV0UszhXhCXGWCFqR0NCnp5ECjVtFPXmrAex+wq8TFy8P
1SgJQTAE30f88mU97fuKnPn6rVNeA/33baKRoZHglXn1R9sU3ta44QsqGgsXkQcz
BERIsow+i4M9BZ6n4KV1EczMVua7l6i25+dSCPV9XwP+605G2IPTgVPutZWNQZOb
OfECwP9ayQVRzj3R2VlRyDXzcCkf1kPg/tnPzzfd/COhIsvsdxC/zrrWzBi4V3Vc
5fyZZL0DxdTH9YWTqkCUahzwpY3YyHtoALXi30e8BbwQKCCfOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF++wn8FZamGTIBBjbFs0i/xbrlzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzgyNjY4NzItNzkwMi0z
NzlmLWFlZWUtOTY1MzU5YTdjYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQ+cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABT3MHQYziHkSjcISEs4FU81yGP40Wq6tmgbx0cyFEojNGD52uM1HgfB
dZPffxn7TnT6Sc4XYyz1fscDdazhx5y3fIFtmz5NqgwtV/Mk4n7B+dkPJ5dM8M9r
0kIw54Nk3RzUDWP0KR0kFea+5gTQ/H0FqsfdXB7Svk9ViJ5C3WHjcyJmFPWDG9E1
/BuX9DfiCqcCFLwf43jS4S4MB/iY9ec962JhwL+sJR4PFimxDE8wY4LE+I6HXRyL
SSCczdB9EaJ0yHMd+DHxPjXvPM1ciVZ4hesMlQpV85BTE3J5risRolhmnkF17BIq
GTZUqTrMBBID/s6/R4R9XoXZ6+my1qg=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:29:38 2025 by rpki-client