Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6fe67cb-54a6-3342-9ae9-bc87cc39e72d.roa
File:                     a6fe67cb-54a6-3342-9ae9-bc87cc39e72d.roa (raw, json)
Hash identifier:          kKEAOWWcJibg8E1GcFGoOvbHbHHm47Wt2BmxeMZXubc=
Subject key identifier:   C7:8D:93:AC:55:3C:CE:B9:4C:B1:FD:FB:BD:A4:63:A1:10:3E:E6:68
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B9F4AE4841659593D7CED
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6fe67cb-54a6-3342-9ae9-bc87cc39e72d.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        73.166.134.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:9f:4a:e4:84:16:59:59:3d:7c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=23f9e98a-bd2b-4b26-b633-b224882bc6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4a:e1:c9:d9:08:f9:f1:0a:30:b0:f5:de:8e:
                    73:1e:ca:b6:2d:0f:99:cc:2c:25:11:8d:bc:a9:5f:
                    99:11:02:1e:5a:54:4e:db:4e:f9:4d:66:26:0b:36:
                    a4:37:3b:1c:af:15:f2:4c:3e:d1:f7:c4:55:25:50:
                    b4:a5:42:3d:94:76:a6:9f:1b:60:33:b6:32:44:cf:
                    bb:8f:0e:92:07:54:f4:fd:f0:be:41:e3:f9:01:67:
                    48:6b:7c:90:ca:3d:29:42:b3:6e:4c:80:6c:ce:cc:
                    fc:10:b5:c8:e0:65:5b:a9:25:5f:2a:a2:90:74:1d:
                    b8:c6:53:70:61:b8:9f:9d:d7:86:58:de:cd:53:05:
                    be:a8:87:af:f3:99:72:99:73:e3:f9:18:d7:01:a7:
                    13:00:16:5d:ba:a0:06:c6:c1:be:53:93:84:ea:ad:
                    93:ec:0b:35:cb:73:b9:bc:96:21:b9:4a:4b:9b:bd:
                    37:95:7d:fd:f7:6f:be:3a:0f:21:0f:df:d6:e5:6e:
                    bb:0e:fd:cc:97:c1:6e:14:3c:b2:dd:99:7f:4d:87:
                    48:a7:1b:9f:33:36:fc:fe:f1:0e:13:0e:d7:6f:09:
                    97:43:5e:3c:3e:84:40:41:67:e3:74:77:e2:0c:76:
                    3d:9a:24:00:c7:ac:d0:09:ae:71:8a:7c:78:eb:04:
                    f2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8D:93:AC:55:3C:CE:B9:4C:B1:FD:FB:BD:A4:63:A1:10:3E:E6:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6fe67cb-54a6-3342-9ae9-bc87cc39e72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.166.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:34:0a:39:74:0e:4e:e3:28:3f:32:49:95:bb:eb:5b:bc:7a:
         91:38:d3:f4:02:60:14:be:e2:66:63:f2:2b:61:cd:67:df:74:
         bb:da:07:9c:0f:9c:43:1b:81:1b:a8:93:5a:6a:d5:b2:29:e9:
         4d:fb:e9:11:73:6e:05:ea:87:51:15:95:35:1b:bf:00:79:39:
         94:45:48:a1:f8:94:ad:aa:e9:15:52:d3:6b:e3:1c:89:09:4a:
         d0:45:15:43:2b:f2:99:52:2a:ed:fa:ee:ae:2f:40:b8:7c:5a:
         13:c9:89:d7:92:52:a3:9f:e3:d9:f9:14:ee:c8:18:13:cf:b3:
         20:29:c8:41:74:bc:f2:4c:1e:e4:15:c2:ee:a2:03:9e:16:b1:
         5a:79:44:52:e3:0b:79:00:9c:82:ce:78:64:96:f5:30:55:3e:
         1c:de:a4:30:ca:f9:f7:f1:60:6f:5d:91:ce:ca:09:01:16:15:
         8d:ff:ca:72:1f:62:a8:40:c1:d3:ef:af:20:7f:30:0f:1e:ef:
         56:f5:a5:2e:24:90:ed:96:b1:d2:2d:ca:aa:4f:8a:eb:ab:c8:
         f0:3d:4d:af:f1:d1:06:d6:a5:a1:c3:46:2a:95:61:f3:03:e2:
         80:be:d4:af:61:b9:8b:12:2c:e5:00:f4:59:12:69:95:f3:66:
         58:d8:f4:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUO59K5IQWWVk9fO0wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MjNmOWU5OGEtYmQyYi00YjI2LWI2MzMtYjIyNDg4MmJjNmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0rhydkI+fEKMLD13o5zHsq2LQ+ZzCwlEY28
qV+ZEQIeWlRO2075TWYmCzakNzscrxXyTD7R98RVJVC0pUI9lHamnxtgM7YyRM+7
jw6SB1T0/fC+QeP5AWdIa3yQyj0pQrNuTIBszsz8ELXI4GVbqSVfKqKQdB24xlNw
YbifndeGWN7NUwW+qIev85lymXPj+RjXAacTABZduqAGxsG+U5OE6q2T7As1y3O5
vJYhuUpLm703lX3992++Og8hD9/W5W67Dv3Ml8FuFDyy3Zl/TYdIpxufMzb8/vEO
Ew7XbwmXQ148PoRAQWfjdHfiDHY9miQAx6zQCa5xinx46wTy9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMeNk6xVPM65TLH9+72kY6EQPuZoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTZmZTY3Y2ItNTRhNi0z
MzQyLTlhZTktYmM4N2NjMzllNzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaaGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALc0Cjl0Dk7jKD8ySZW761u8epE40/QCYBS+4mZj8ithzWffdLvaB5wP
nEMbgRuok1pq1bIp6U376RFzbgXqh1EVlTUbvwB5OZRFSKH4lK2q6RVS02vjHIkJ
StBFFUMr8plSKu367q4vQLh8WhPJideSUqOf49n5FO7IGBPPsyApyEF0vPJMHuQV
wu6iA54WsVp5RFLjC3kAnILOeGSW9TBVPhzepDDK+ffxYG9dkc7KCQEWFY3/ynIf
YqhAwdPvryB/MA8e71b1pS4kkO2WsdItyqpPiuuryPA9Ta/x0QbWpaHDRiqVYfMD
4oC+1K9huYsSLOUA9FkSaZXzZljY9LE=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:49:49 2025 by rpki-client