Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af260a04-2ceb-3ad5-bb6f-905892b7738a.roa
File:                     af260a04-2ceb-3ad5-bb6f-905892b7738a.roa (raw, json)
Hash identifier:          VXdvFaw+EmSYxL6uffraHn7rPnA0YIOqsMDsv4OXhYQ=
Subject key identifier:   B9:10:AE:07:A4:8D:64:5C:5A:76:85:C7:C1:1C:63:3A:BD:08:6E:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1105B269BC370D44D96400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af260a04-2ceb-3ad5-bb6f-905892b7738a.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        73.208.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:05:b2:69:bc:37:0d:44:d9:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=00a93295-123f-42f0-a1d2-d5acb9dbbd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e7:f5:1b:ed:8b:70:07:dd:51:77:4b:c2:2e:
                    23:55:a1:9c:7c:ae:e7:ad:a4:12:32:28:a0:0b:2e:
                    29:14:58:51:b1:ed:0b:fb:48:62:d7:32:b0:df:d1:
                    8f:dc:52:89:93:b2:4e:06:8f:80:3d:45:22:ae:68:
                    aa:19:66:f6:17:4d:5d:2a:27:80:ac:dd:08:67:09:
                    92:b5:6c:2c:31:bc:1c:fc:70:67:05:39:22:d3:b0:
                    8c:eb:0e:17:cd:24:9d:cb:7a:c8:c8:93:dd:14:3d:
                    ab:63:8d:d5:86:25:82:a0:d6:0f:c3:f0:39:e3:63:
                    9c:11:17:3a:4a:a8:b7:85:86:c0:40:2d:fe:cb:41:
                    f9:df:60:c3:6e:42:c1:51:6d:92:1a:67:91:fb:cb:
                    00:f1:68:ce:7b:0e:64:b7:33:70:d4:cb:fa:bf:30:
                    7c:ae:78:b7:57:e2:fb:21:5c:e2:40:36:95:38:ea:
                    28:96:bc:73:ff:b9:88:4b:28:77:84:cf:45:ec:e0:
                    9c:73:b2:c4:0c:38:1b:e7:4e:1d:5f:cd:7c:1c:15:
                    97:38:47:b4:be:99:f7:03:d7:12:4f:19:6d:16:f5:
                    85:8a:71:a9:1a:6e:e0:62:01:75:0f:4c:ff:e3:c4:
                    f1:94:35:47:a8:4c:22:3f:70:10:88:c0:6e:34:d1:
                    2e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:10:AE:07:A4:8D:64:5C:5A:76:85:C7:C1:1C:63:3A:BD:08:6E:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af260a04-2ceb-3ad5-bb6f-905892b7738a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.208.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:14:62:0f:cf:a3:f6:a8:8f:e2:94:59:7c:bd:06:ad:b4:1c:
         23:a8:a9:1f:80:3f:db:4b:0b:19:32:79:86:67:41:36:ca:5c:
         cd:a4:47:63:6e:71:3d:4f:f5:46:76:3c:86:f2:d1:3e:51:56:
         f6:3d:74:f1:91:04:1f:c9:de:f4:02:d0:8b:ea:bd:5b:ec:2c:
         71:f3:a3:bb:a2:32:fa:20:c3:8d:42:73:94:ca:81:b5:6f:d2:
         89:af:ab:2d:a3:4d:1d:9d:46:97:1c:1c:ec:e7:a6:47:40:73:
         52:03:2f:b1:70:a7:b4:34:c3:5d:65:9c:79:b2:b2:d9:e9:66:
         4a:b1:b5:17:b0:ce:71:36:dc:88:d8:e7:9f:77:bf:f5:2f:f8:
         0f:0f:91:4d:c1:d9:91:0d:12:39:ef:84:c8:92:77:b2:2f:4a:
         c0:8e:48:61:60:fb:5b:a9:ef:11:1c:2a:fc:87:ec:9f:af:18:
         f6:d2:c7:f7:14:53:bf:79:ab:a5:b1:7c:67:eb:fa:46:76:6b:
         61:1f:b0:dd:89:3f:e2:30:0c:bf:ec:b3:8f:fc:e4:84:e9:a0:
         77:6f:78:b0:9c:71:cc:08:28:55:60:c3:85:b6:aa:9d:f0:d3:
         73:c4:2b:5e:19:bf:dc:35:9f:81:a3:6f:0f:0e:e5:82:43:e6:
         ed:81:2e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:35:21 2025 by rpki-client