Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2d40d53-a223-3a42-90a0-bc1eb7273877.roa
File:                     b2d40d53-a223-3a42-90a0-bc1eb7273877.roa (raw, json)
Hash identifier:          wfpN/6zLlQAgV/GMBoM2MQjn9OOCItqwh3hD8RwHZCs=
Subject key identifier:   9D:79:95:1D:86:2B:5D:60:D0:44:52:1C:93:55:42:3A:2D:63:57:B0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C128B30ACE75369AF0F42C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2d40d53-a223-3a42-90a0-bc1eb7273877.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        69.246.200.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:8b:30:ac:e7:53:69:af:0f:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=10e60c95-ba67-4aa8-bfff-beb7aba72e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fc:bd:b2:a7:27:c4:dd:11:25:c6:0e:b8:96:
                    cd:95:8f:18:d8:30:33:fd:df:a0:99:7e:71:e9:08:
                    fa:5d:98:6a:44:d0:c1:e4:4c:89:58:a5:f6:e0:59:
                    1f:c9:f3:d7:2e:b9:b8:dc:f6:9f:f3:95:30:ac:10:
                    69:31:ff:81:80:96:64:24:6c:98:ef:73:21:a7:4f:
                    ba:dc:18:0e:26:cc:26:d6:6c:ca:29:75:09:43:ff:
                    46:78:b7:ac:aa:8e:30:0d:5b:16:04:0e:88:7b:4d:
                    a1:d5:fb:cf:b8:81:da:8e:d0:05:63:fe:30:58:67:
                    d4:26:dc:11:4e:5e:bf:dd:6f:c3:c2:6a:75:09:d7:
                    ec:19:20:93:21:da:dd:4d:8f:6f:e5:34:5a:0b:ed:
                    fd:34:31:8d:3f:ba:93:4f:1f:c1:aa:ef:f8:b0:2f:
                    46:5b:8c:3c:36:ba:ae:6e:86:e9:10:59:49:45:b2:
                    de:e8:a5:4e:a6:bd:32:04:cd:65:a9:32:fe:ec:c2:
                    42:81:b2:f1:15:a1:95:1f:89:8d:05:c5:41:34:05:
                    00:45:30:26:4b:1c:91:2e:34:79:e9:7e:e1:5f:cc:
                    dc:68:ff:ab:a7:8e:83:6e:ae:8b:ff:49:23:7d:ec:
                    29:6b:23:6c:1b:ec:53:f6:9f:d3:1e:17:2b:c8:e5:
                    3c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:79:95:1D:86:2B:5D:60:D0:44:52:1C:93:55:42:3A:2D:63:57:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2d40d53-a223-3a42-90a0-bc1eb7273877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.246.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5e:d6:fe:82:ce:97:98:00:b1:a1:cb:ae:69:57:d1:96:d7:
         12:c2:07:60:0b:64:c4:3f:6c:14:c0:a7:29:2d:3a:60:ef:cd:
         b7:98:61:e4:1f:c3:03:9f:d4:88:db:f2:47:13:9f:60:35:89:
         54:8b:e4:7b:e9:82:38:20:4a:bd:69:af:59:90:27:2a:8c:f2:
         a8:5d:8c:ef:7b:4b:40:69:8e:e2:75:58:40:51:d8:52:e7:b8:
         ee:da:85:c1:c5:8d:e8:6b:85:48:d0:b1:0b:f2:07:c9:01:09:
         56:71:f6:a5:a7:7a:c9:44:75:d3:ad:d0:38:8b:d3:2d:db:83:
         3c:44:52:12:5b:b4:3a:d5:1d:a1:da:32:e8:d0:84:92:b8:ea:
         a8:f7:d3:69:13:48:bf:d6:03:8b:0d:fc:69:af:74:d1:4e:ca:
         9e:3b:2e:de:2c:70:2c:62:99:14:fd:9a:1f:96:a2:d7:bc:f5:
         8e:3b:2f:c6:d4:bd:d3:ed:52:fa:92:1a:26:15:e5:ea:8f:a9:
         93:2f:26:d9:ba:5d:3e:3f:66:02:0a:1a:93:1b:a0:9e:a4:75:
         d0:a7:87:96:9e:c0:7d:f3:53:ea:7c:a3:b5:1b:f8:8e:21:f6:
         6e:a8:fb:3e:18:52:42:f5:5d:46:27:df:c7:c2:dd:c3:67:d0:
         e1:8a:d0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:58:22 2025 by rpki-client