Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4313349-23c9-359f-9d31-b5d656a81839.roa
File:                     b4313349-23c9-359f-9d31-b5d656a81839.roa (raw, json)
Hash identifier:          LpztWOUv6opzXmN5f+A/uvD1UO2hfOc6a/KoB3j1JNY=
Subject key identifier:   D5:2E:44:B2:76:0E:95:01:29:6C:12:BA:1F:8B:55:FD:95:B3:E8:31
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143E0919714DA11C9A1000C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4313349-23c9-359f-9d31-b5d656a81839.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.149.132.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3e:09:19:71:4d:a1:1c:9a:10:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=8cc41241-661d-49a3-b5b2-eb805ad5f282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:39:76:21:c0:74:20:c6:a8:74:d2:8b:3d:
                    e1:07:19:42:14:3d:ff:73:21:58:d6:77:c4:56:8a:
                    57:3c:5e:90:95:01:d0:eb:bc:bb:ac:06:02:2a:47:
                    92:c9:1d:35:b6:6c:9b:b5:8b:53:d3:13:d1:32:e5:
                    eb:62:a8:be:b1:b6:43:d0:ca:c9:47:21:b8:a7:47:
                    e4:36:5a:5d:68:9b:ad:26:8f:bb:bd:9c:c4:f7:9d:
                    8c:de:22:e9:f6:bc:13:9e:15:5f:ba:bc:6a:f9:ee:
                    e9:f3:ec:a0:e3:22:1d:50:76:38:c5:76:18:3e:bf:
                    cc:cb:c6:8a:39:18:1c:df:25:00:05:7e:4b:b0:e3:
                    f0:96:a8:62:78:06:48:a2:45:2b:d8:d1:de:08:21:
                    89:1e:b5:b7:2b:0a:9d:fb:35:e7:6f:03:e4:d2:36:
                    0e:68:f6:85:a5:d0:ba:09:cc:29:16:3a:e2:fb:ab:
                    ec:80:4f:48:bf:ed:1d:d6:37:34:f2:55:d9:d9:d7:
                    cd:09:d7:48:3d:eb:3f:cd:97:92:9f:de:7a:88:91:
                    e9:39:e4:c7:95:ec:ce:ba:65:39:b2:a9:34:13:e1:
                    12:af:b1:4d:25:f4:0b:01:df:78:c6:81:6d:e4:38:
                    36:df:bd:39:e7:78:e3:1f:aa:61:35:01:41:fb:11:
                    14:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2E:44:B2:76:0E:95:01:29:6C:12:BA:1F:8B:55:FD:95:B3:E8:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4313349-23c9-359f-9d31-b5d656a81839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.149.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:4c:42:0a:c7:ad:d6:1d:ea:e8:e7:13:63:73:73:a0:8f:be:
         c0:dd:64:ca:e0:97:44:9b:22:65:76:5b:c2:3e:3e:4b:35:f5:
         7b:e4:c1:5d:ae:a3:e7:0a:5f:f8:cc:f7:65:64:5e:dc:35:e5:
         35:a3:d2:6e:9f:13:bb:33:fd:af:21:74:1e:cc:71:4b:fa:3e:
         d8:f6:54:a0:9c:b2:f4:f6:62:7f:c3:9c:0f:b3:14:8e:59:44:
         12:c7:ad:6a:99:4d:fd:70:f4:15:6e:c0:ba:7c:3b:bb:a1:c9:
         3f:61:27:90:43:f6:b2:e3:d3:09:6f:ca:d1:60:b9:cd:80:f3:
         c2:67:d6:cf:10:fe:df:a4:a2:85:91:1c:11:34:4e:23:d8:8e:
         52:af:11:10:7a:83:ff:17:49:a6:fb:25:59:95:63:78:ae:d8:
         36:e5:de:ed:48:56:4c:a5:82:d1:1e:64:44:ea:d8:92:b0:3b:
         dc:ed:bc:ef:3d:e7:b8:83:f3:26:75:fb:b5:a0:b0:8f:0f:84:
         ca:21:82:10:d6:95:da:21:87:a7:6b:f0:d4:21:e4:e5:5e:ee:
         0f:88:b4:5e:45:97:6f:66:b3:88:e8:29:95:fa:b6:09:1f:f3:
         2a:98:df:88:e8:1f:68:8a:bb:01:09:5d:7f:20:e9:00:2d:30:
         78:3c:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:05:45 2025 by rpki-client