Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2c0dae3-e2b3-33b7-afee-f4ce6b613dda.roa
File:                     c2c0dae3-e2b3-33b7-afee-f4ce6b613dda.roa (raw, json)
Hash identifier:          LSjGl/JHdSZUSIeXB0QtEVUcM3V9kInsa2KeB/+Oggg=
Subject key identifier:   4A:63:AA:9F:6E:C0:2E:D9:EF:7C:C1:6D:74:5D:80:A7:47:86:D0:DA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143BA7C2C606BC7D33C74440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2c0dae3-e2b3-33b7-afee-f4ce6b613dda.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        73.206.164.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:a7:c2:c6:06:bc:7d:33:c7:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=950042ce-fe26-498a-86ca-acb21fb82290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:f3:5f:27:86:79:2c:7b:dc:66:0d:62:06:
                    12:9b:2e:5c:af:30:5e:6f:4b:1a:25:14:f6:1c:c9:
                    f4:9f:96:17:00:ef:bd:66:c6:66:82:55:e4:f8:e5:
                    fc:b5:26:25:0a:ad:a2:f8:b2:b0:55:a6:ad:ba:62:
                    2c:81:f0:8d:e5:2c:53:46:fe:51:b6:05:9f:41:43:
                    a4:33:a9:5d:c1:f6:b7:7f:c2:d8:dc:04:b5:42:2f:
                    8c:46:31:90:62:b9:ad:c0:35:ef:df:b1:1a:d9:16:
                    22:0a:08:ab:71:81:0f:09:c5:11:2b:be:16:30:f8:
                    9a:b3:8f:f8:11:f8:00:b9:2f:4f:7c:b7:a0:02:d0:
                    78:f5:97:c0:e1:ed:54:b7:e3:42:b1:2e:a2:0b:b8:
                    60:13:de:b8:0a:3d:d0:70:39:77:1c:a3:83:2f:57:
                    1b:c6:40:7c:66:58:4a:ad:0d:34:59:15:15:b2:0e:
                    08:a3:73:34:5d:8b:cc:bc:53:39:b5:25:24:32:75:
                    24:35:93:4e:d2:d3:fa:be:48:f9:02:9d:ea:1a:2b:
                    96:29:19:8c:5f:dc:b2:35:07:1f:c6:75:57:09:3c:
                    8f:f7:cd:0e:1b:d1:7d:a3:9e:f2:5a:5f:80:8d:be:
                    1d:3f:ba:6c:9a:42:d5:76:6e:5e:9f:d1:9d:f9:47:
                    67:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:63:AA:9F:6E:C0:2E:D9:EF:7C:C1:6D:74:5D:80:A7:47:86:D0:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2c0dae3-e2b3-33b7-afee-f4ce6b613dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.206.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:b5:8f:06:7a:cc:30:dc:90:e0:ab:aa:a9:d5:dc:4c:54:4c:
         47:b9:0f:9d:89:cb:49:a8:e2:94:44:1d:2f:2d:95:49:e6:8f:
         88:88:3a:b9:a3:db:5f:7c:ef:55:69:c5:c8:af:e7:7a:ae:4b:
         0a:c5:ee:91:01:13:dd:77:06:b0:a3:5d:28:6e:11:be:64:b1:
         30:bf:db:01:9c:f3:b8:44:0f:59:a7:23:6b:78:f4:7a:ad:a8:
         1b:09:e1:e8:de:69:31:14:70:6c:2d:10:e7:ea:20:6d:6a:99:
         9b:81:01:c1:8c:50:cb:fc:b4:2d:0a:ad:bb:43:cc:7c:77:0c:
         7d:b7:dd:61:d5:9b:db:01:96:98:ca:2c:f3:8e:4b:fb:68:9e:
         4e:19:98:f2:a7:dd:1b:88:c0:3e:2b:0b:c2:b7:a1:d8:b4:5e:
         3a:9b:1d:f8:15:86:0c:aa:70:69:39:16:c1:54:94:4c:fd:70:
         79:3c:6c:2f:0d:ae:b6:e3:d3:2f:37:ff:f4:50:53:3a:1d:fe:
         34:43:71:a9:ab:59:51:27:4a:24:a0:54:a1:87:eb:4d:01:1e:
         fc:82:45:5b:02:a1:eb:64:98:e9:a6:c7:00:b6:dd:4c:71:c0:
         55:3e:a7:3f:a9:c6:9c:33:d0:1e:9e:1b:e9:ab:90:3a:b8:68:
         82:e3:c7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:32 2025 by rpki-client