Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9216edc9-723e-38b9-b9ad-0b5d8e8d0d83.roa
File:                     9216edc9-723e-38b9-b9ad-0b5d8e8d0d83.roa (raw, json)
Hash identifier:          yuZGdtreFXOzP3SJWnE+kA+nPkeOWUy9ZQoeiB8hejY=
Subject key identifier:   25:93:1B:06:7A:01:FF:7C:31:63:F9:A2:F8:7D:E8:D7:A3:E6:9E:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B02C9501F5CEFBAC25600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9216edc9-723e-38b9-b9ad-0b5d8e8d0d83.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.186.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:02:c9:50:1f:5c:ef:ba:c2:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=e71eefbf-af5f-4bbe-8183-9080feb2d8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:91:b1:4a:19:dd:75:1d:4b:c7:a8:c6:37:
                    44:1b:6d:d9:c7:90:1c:8b:80:3c:4a:82:3c:30:15:
                    d9:55:69:d3:38:76:e9:8c:f5:60:fa:ee:75:22:c2:
                    10:9c:db:a3:6d:24:c0:45:8c:0f:20:a1:cf:50:63:
                    3b:fc:93:e8:70:4d:ab:d7:e3:ed:96:cb:2d:be:9a:
                    d3:f7:60:8f:c5:44:4c:eb:70:ef:3f:47:88:0a:98:
                    0d:42:77:14:11:a2:b1:41:19:c8:4b:9d:92:60:86:
                    b4:f0:0c:90:a6:13:fc:32:75:0f:2d:99:c3:ff:94:
                    89:cd:d1:4a:19:f9:39:59:33:de:51:52:cd:47:db:
                    c4:e7:11:83:e3:a7:9b:83:05:72:22:50:eb:e2:d1:
                    0d:84:34:ed:a9:39:a9:3e:9c:31:1a:5d:a3:78:38:
                    3b:02:d7:aa:1e:ec:1d:13:95:1c:6e:d2:ac:09:f3:
                    61:c5:6e:c9:ab:f9:f2:9b:c3:0d:ca:3b:04:6c:27:
                    b0:4e:c6:3b:a2:ae:e3:60:51:86:d3:2c:95:fb:83:
                    46:f8:a9:90:57:0a:69:78:4c:47:c7:df:38:cb:1b:
                    b5:e8:80:72:23:c3:4a:e2:6d:2a:3c:9c:49:45:d8:
                    36:bc:a3:41:ba:86:67:82:62:8b:90:b4:4e:df:f8:
                    b9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:93:1B:06:7A:01:FF:7C:31:63:F9:A2:F8:7D:E8:D7:A3:E6:9E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9216edc9-723e-38b9-b9ad-0b5d8e8d0d83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.186.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:de:98:01:88:0b:af:d9:c2:57:38:44:a3:cc:64:25:d8:8e:
         39:b3:ac:51:9d:0b:af:3e:85:0b:99:1b:bf:0a:d7:aa:cd:3d:
         57:ee:77:84:fc:f4:da:2b:33:b6:f0:be:a9:15:13:d3:04:99:
         82:57:19:f8:a5:1d:bb:6f:ca:46:68:fd:ec:2e:5f:b7:95:d4:
         3a:74:1a:17:be:30:04:3e:71:07:14:87:2e:bc:43:8a:de:bd:
         75:35:19:03:33:67:70:ef:60:93:72:2d:e0:16:0a:c9:91:7f:
         8e:16:27:8b:cc:b3:39:10:b8:6e:50:3e:d0:cc:d6:41:37:a8:
         01:5d:23:12:9b:c9:ba:d2:eb:d9:31:bb:9c:95:2e:fa:ac:3a:
         10:5e:5b:70:a7:2a:4e:6f:78:af:8c:9f:a6:b5:cb:8f:bc:bd:
         82:91:53:f6:dd:e0:c7:3e:d8:db:42:d4:d9:7a:09:65:2d:46:
         7d:5d:d9:54:38:fa:bc:87:11:a1:75:c7:e9:bc:10:41:6b:b2:
         6d:2e:47:62:30:e3:bb:1d:0f:e5:fc:1e:9a:07:8b:88:5d:73:
         b7:26:fd:e0:85:42:46:3a:3a:d2:2e:d1:17:c5:b1:4e:8c:9c:
         57:eb:f3:ee:2c:14:f9:1c:b4:58:11:ba:bc:4b:fc:de:3e:11:
         fb:63:64:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:19 2025 by rpki-client