Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c22f52e3-ff1f-3895-8417-febd078d2be3.roa
File:                     c22f52e3-ff1f-3895-8417-febd078d2be3.roa (raw, json)
Hash identifier:          x+Mq9xQqJtkAt/pedgSbVKF70vbkHB5hnrLWLcLaCMY=
Subject key identifier:   BE:EF:FA:B9:03:78:43:27:B4:9C:09:F3:79:EF:DA:A4:19:6E:43:30
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B2E4D83A594C8F7DC8300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c22f52e3-ff1f-3895-8417-febd078d2be3.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        76.118.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:2e:4d:83:a5:94:c8:f7:dc:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=de4aae3e-803c-4fb7-9be1-5c53bfb71a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:8e:75:ca:92:16:be:98:a7:33:7b:0b:d4:
                    8f:95:3f:11:07:fc:82:bb:9b:17:f2:06:22:04:df:
                    9f:17:fb:75:dc:6a:e3:4d:28:95:f4:c2:20:36:1f:
                    15:42:b9:9a:c9:db:81:d1:1e:c9:d7:af:a1:65:be:
                    a2:8a:3f:9a:a5:b8:c7:ff:aa:1f:0b:55:d4:3f:7e:
                    19:56:f3:c7:56:e4:6b:7f:b6:43:43:40:4f:87:dd:
                    fd:52:b4:26:b4:30:ba:ab:02:de:8e:57:ae:17:1c:
                    61:75:5f:be:4d:1c:68:e9:12:97:a1:b1:85:10:41:
                    ad:ca:66:7f:f3:7c:1e:d1:3d:58:18:7c:f6:60:7c:
                    49:e1:13:3d:86:0b:14:f0:7b:b8:a1:db:47:de:3d:
                    d7:8c:63:62:c0:af:f9:0c:5b:ac:27:4a:c1:ce:ee:
                    cd:82:37:fa:63:1d:1e:92:9a:2e:d6:76:a0:5e:65:
                    59:59:40:f1:7f:e2:c7:ef:22:2f:c5:28:3a:75:bf:
                    55:27:2e:93:23:9b:70:61:04:86:b7:61:44:c0:4b:
                    e2:96:7f:50:4b:32:c7:a4:af:f2:0b:57:67:1a:b7:
                    5c:5c:73:47:e6:ac:9c:2a:a1:b2:f8:8f:4f:df:be:
                    f7:29:61:a4:64:5a:81:b9:6b:9a:b4:28:0e:23:4f:
                    38:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EF:FA:B9:03:78:43:27:B4:9C:09:F3:79:EF:DA:A4:19:6E:43:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c22f52e3-ff1f-3895-8417-febd078d2be3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.118.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:7d:69:05:3c:cc:20:23:9e:ef:68:fb:fe:64:b2:d0:77:fd:
         ec:03:02:ba:f1:74:9e:a5:dd:6a:fe:9e:87:35:3c:99:48:93:
         07:db:2f:02:59:3d:87:ac:30:e8:96:29:f5:0d:bc:60:64:96:
         ff:6a:ea:f1:81:fe:a7:71:7a:27:66:cc:76:48:a4:a9:b2:8c:
         c9:94:0a:82:90:31:a2:0b:a7:b4:cd:aa:b8:55:d5:48:cf:dd:
         da:20:83:90:59:61:80:40:25:54:91:fc:4a:86:05:15:b5:91:
         bd:76:fc:72:53:1c:f8:f8:8d:a3:ba:68:48:1f:dd:b5:2f:1f:
         e9:2f:dc:cc:3a:20:c7:20:04:13:81:ae:39:87:7e:db:c0:be:
         d5:f0:4c:33:48:14:d0:45:ac:54:df:1c:24:35:b4:7c:28:45:
         61:d5:87:45:f8:57:72:46:7b:7d:d3:b7:32:b3:94:c3:1d:06:
         ff:bc:26:17:84:f7:55:e0:73:99:31:04:29:f6:9d:a5:9d:0a:
         fd:4a:14:f4:93:fc:44:38:32:37:97:96:68:75:0f:f0:f5:98:
         af:38:92:b8:16:d8:9f:0b:5d:0a:ff:5f:a7:c8:15:fc:27:e7:
         19:a6:69:09:4e:d1:82:df:82:79:bb:3a:23:c8:ab:6f:8d:9f:
         f2:5b:1a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:25 2025 by rpki-client