Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a74075-85de-3ccc-ab47-48d720964614.roa
File:                     91a74075-85de-3ccc-ab47-48d720964614.roa (raw, json)
Hash identifier:          F+jmWiOZ7gOqR3RkS20/2NSW96+xXJ1mb+iZdpGpBdk=
Subject key identifier:   A5:CA:AF:B4:9F:A6:CA:ED:C2:60:90:19:29:DA:7D:FE:F9:ED:77:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1135D3D54F5DB2DC276E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a74075-85de-3ccc-ab47-48d720964614.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        76.136.180.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:35:d3:d5:4f:5d:b2:dc:27:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=924d9c2b-5093-48da-a6c7-a6775413ec05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9e:08:c7:25:86:37:e3:3e:a3:f1:f3:a1:1e:
                    d3:85:fe:71:00:21:a0:1d:99:f3:f4:06:b6:c5:d4:
                    d6:07:be:7c:56:25:06:5d:25:c0:d7:4e:49:a4:d4:
                    dd:0e:cd:8b:38:ee:c1:3a:0a:b7:ea:0b:8f:f7:06:
                    b8:8b:be:51:8a:5c:d5:e3:6b:a2:e4:52:77:06:a4:
                    e5:a9:02:13:8c:f1:b2:61:b9:7d:3a:2c:f2:50:49:
                    66:66:7d:f2:0f:e8:22:55:3d:dc:5a:d2:71:22:fa:
                    fc:0f:bb:b8:d6:e6:f4:0c:e0:e3:e4:e9:e6:9c:f2:
                    e5:16:29:69:0a:41:97:16:bf:27:d4:63:e7:31:5b:
                    99:26:34:f4:52:2e:ff:7d:25:ee:4a:4b:75:8c:d2:
                    ee:17:69:4c:ee:dd:70:cc:82:22:64:e7:84:c9:93:
                    20:3a:e3:8d:84:d7:73:7c:e2:c3:ba:41:6c:8e:cb:
                    84:33:8b:ac:a0:1e:d0:ae:d1:ce:ab:91:ca:d0:b9:
                    6a:80:8e:73:5c:eb:ef:36:df:0c:83:49:3f:62:04:
                    18:fe:88:29:dd:b7:07:56:11:04:77:6e:6c:4c:89:
                    5b:2c:68:d3:49:10:d8:92:2a:ab:6a:f8:a0:42:29:
                    c3:8e:95:4b:eb:c1:31:75:73:d1:23:d6:0f:78:b3:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CA:AF:B4:9F:A6:CA:ED:C2:60:90:19:29:DA:7D:FE:F9:ED:77:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a74075-85de-3ccc-ab47-48d720964614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.136.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:ba:1d:db:f0:5b:fb:92:c7:ac:d9:68:16:a3:86:76:51:c1:
         9e:2e:f9:43:96:ee:2c:82:de:c9:2d:ee:c6:ec:dc:b3:ba:b9:
         a9:3d:26:e8:43:4d:57:76:18:de:e9:12:b7:68:8d:c8:f1:78:
         b2:12:2a:0c:4e:2d:56:10:6e:d5:a9:af:fd:9b:38:63:3a:a3:
         f6:8f:1e:df:e4:26:76:3b:14:a5:8a:60:7b:72:ee:fb:55:e1:
         72:78:dd:8d:4c:8e:1b:bf:f8:c1:c9:00:b7:76:4b:e5:b6:fa:
         bb:b1:e7:5f:e7:56:b1:c2:58:04:03:70:1f:4f:9f:77:71:e5:
         a8:cc:62:cf:23:4c:e0:7c:d0:c4:aa:63:f4:21:2a:2c:3d:93:
         44:9c:b5:b6:f5:4e:09:a7:a2:79:cd:a3:f3:db:3a:43:f1:55:
         29:e8:e6:82:37:fe:87:bc:ab:86:b2:17:b9:d0:7d:2a:27:5d:
         bf:a0:df:83:9d:d7:fd:e1:85:c7:e5:f1:14:2b:bd:e3:4f:db:
         fd:45:8c:e3:fd:07:41:56:a0:d8:2d:d0:cf:d5:65:03:8f:f4:
         c1:75:b5:5d:9b:71:33:f4:fd:52:7a:5d:c6:3f:f0:a6:dd:55:
         fd:04:27:fe:22:e7:19:05:c5:64:48:8d:e0:dc:88:d8:fd:43:
         12:73:93:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMETXT1U9dstwnboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
OTI0ZDljMmItNTA5My00OGRhLWE2YzctYTY3NzU0MTNlYzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ4IxyWGN+M+o/HzoR7Thf5xACGgHZnz9Aa2
xdTWB758ViUGXSXA105JpNTdDs2LOO7BOgq36guP9wa4i75RilzV42ui5FJ3BqTl
qQITjPGyYbl9OizyUElmZn3yD+giVT3cWtJxIvr8D7u41ub0DODj5OnmnPLlFilp
CkGXFr8n1GPnMVuZJjT0Ui7/fSXuSkt1jNLuF2lM7t1wzIIiZOeEyZMgOuONhNdz
fOLDukFsjsuEM4usoB7QrtHOq5HK0LlqgI5zXOvvNt8Mg0k/YgQY/ogp3bcHVhEE
d25sTIlbLGjTSRDYkiqravigQinDjpVL68ExdXPRI9YPeLM28wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKXKr7SfpsrtwmCQGSnaff757XfGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTFhNzQwNzUtODVkZS0z
Y2NjLWFiNDctNDhkNzIwOTY0NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIi0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL+6HdvwW/uSx6zZaBajhnZRwZ4u+UOW7iyC3skt7sbs3LO6uak9JuhD
TVd2GN7pErdojcjxeLISKgxOLVYQbtWpr/2bOGM6o/aPHt/kJnY7FKWKYHty7vtV
4XJ43Y1Mjhu/+MHJALd2S+W2+rux51/nVrHCWAQDcB9Pn3dx5ajMYs8jTOB80MSq
Y/QhKiw9k0Sctbb1TgmnonnNo/PbOkPxVSno5oI3/oe8q4ayF7nQfSonXb+g34Od
1/3hhcfl8RQrveNP2/1FjOP9B0FWoNgt0M/VZQOP9MF1tV2bcTP0/VJ6XcY/8Kbd
Vf0EJ/4i5xkFxWRIjeDciNj9QxJzk1w=
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:57:54 2025 by rpki-client