Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f6ab193-b1c8-3dfe-b67e-012179908c4c.roa
File:                     7f6ab193-b1c8-3dfe-b67e-012179908c4c.roa (raw, json)
Hash identifier:          XlDWU2Q7En60JdQa/uRTGt8/WfdZXYrTOfPBhfBF0AI=
Subject key identifier:   90:85:82:36:C9:26:CB:D2:51:34:F6:80:7B:F3:30:06:A1:C9:DF:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B30D6EFE0AB8D60715600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f6ab193-b1c8-3dfe-b67e-012179908c4c.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        76.119.224.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:30:d6:ef:e0:ab:8d:60:71:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=cf64f874-0c5f-42c2-b694-29f2a46ea1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:84:83:3d:83:5d:9d:cd:71:9e:fd:0a:2c:
                    c0:0e:9f:0f:47:de:ed:f5:93:c6:b7:6f:3f:8c:bf:
                    10:85:45:e3:ee:3d:ab:6f:8e:be:ed:37:3d:f1:9b:
                    64:a8:8f:e3:7a:5c:8a:f0:14:46:57:de:8a:b0:4c:
                    82:7c:c4:8c:f4:14:69:8a:11:34:92:1f:f2:b6:97:
                    3d:a0:16:eb:05:67:ce:f8:25:36:cc:a0:16:6f:f0:
                    30:b2:0d:22:51:26:4b:7b:d7:7d:42:0e:fb:3c:23:
                    38:fa:9e:d0:54:85:fe:f1:d6:a9:44:33:dd:95:28:
                    69:c3:be:41:60:14:17:9e:65:28:aa:d1:49:00:7c:
                    28:9c:fa:ce:53:74:65:9a:bb:11:32:c9:fd:50:63:
                    b3:aa:e1:0f:e6:c0:d8:c2:fc:b2:e0:88:ff:a8:77:
                    8b:c2:a9:87:57:60:06:da:a3:b4:80:67:15:ae:c4:
                    e0:8e:7f:11:0b:01:af:00:f4:df:c0:9c:8d:4f:bd:
                    fa:b6:b2:bd:79:dd:4b:4b:65:6b:c9:f5:24:05:1d:
                    1d:84:75:b8:f2:91:71:2a:8d:50:9a:ef:ae:03:f5:
                    69:c9:ed:41:da:47:07:49:19:47:c8:46:dc:e9:0f:
                    43:cc:34:a6:57:43:9a:67:9b:eb:97:6d:25:aa:1a:
                    e5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:85:82:36:C9:26:CB:D2:51:34:F6:80:7B:F3:30:06:A1:C9:DF:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f6ab193-b1c8-3dfe-b67e-012179908c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.119.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ad:3c:a0:6e:3d:04:c9:7f:dd:4d:9e:fb:52:c5:92:74:81:
         5d:dc:1c:4d:bf:c0:80:3e:c3:b3:7b:8b:89:ef:b6:20:3d:b5:
         ba:74:cf:bc:94:a7:09:f0:09:5c:2d:56:f7:13:57:0d:8b:7e:
         5e:36:68:19:11:50:69:34:bf:c1:bd:19:ab:d6:35:1c:4e:28:
         97:5c:3a:09:e6:ab:22:b8:0e:85:f6:09:a2:fb:b5:a1:83:bc:
         19:f6:7a:04:94:cc:d2:83:55:2a:57:e0:1a:86:ee:84:d1:98:
         4e:97:71:9b:72:a5:b4:43:c9:ad:0d:d8:de:99:f7:58:aa:78:
         24:da:72:d0:22:06:3e:65:23:f5:cd:42:e5:43:9a:d7:f9:ba:
         31:f7:9c:e8:92:51:67:8e:97:7c:19:0e:5e:51:da:de:b9:ed:
         a1:69:45:67:88:71:52:c6:e0:77:9a:73:52:27:fc:85:3b:35:
         9e:78:e9:c6:4a:b5:b8:90:46:cd:6b:e8:25:3e:9e:11:ec:89:
         f9:0c:c1:b7:d1:b2:42:03:71:08:27:bb:aa:58:ee:4c:11:dd:
         43:55:23:d4:fc:86:70:c7:86:18:e8:f0:96:71:cb:76:64:f5:
         7c:54:b0:f5:85:09:fc:c3:d1:ec:df:50:de:1b:22:05:2e:2a:
         61:d3:99:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:01:26 2025 by rpki-client