Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3c8c8ff-ba26-3495-8413-9e67fe6c872a.roa
File:                     c3c8c8ff-ba26-3495-8413-9e67fe6c872a.roa (raw, json)
Hash identifier:          VwY6Yyb97Qtqnxk4Pblf1rBt+F5jF5k7WUO9kGu6xzM=
Subject key identifier:   12:FF:3E:41:E7:81:B3:4C:DD:0A:78:A8:CD:82:1A:8B:E6:E6:FF:9D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143F8A09AAE78BBDB5E26A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3c8c8ff-ba26-3495-8413-9e67fe6c872a.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33668
IP address blocks:        76.112.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3f:8a:09:aa:e7:8b:bd:b5:e2:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=bebc3f83-241c-42d8-861b-31cf047471db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:84:76:c5:e7:03:74:29:ef:41:e4:b7:e6:
                    88:b5:f0:50:c1:59:3e:be:96:ad:83:42:7f:51:ee:
                    3c:38:90:3c:1a:f9:f5:ae:89:31:44:5c:01:eb:75:
                    a1:2e:e1:16:4f:bc:e8:56:ba:f4:57:2d:66:5c:2e:
                    db:d3:3f:d3:83:92:58:d9:5d:57:9a:1d:67:8d:a0:
                    f4:60:b3:d1:eb:c8:17:50:cc:63:68:d7:96:1f:81:
                    fd:fd:83:8e:f1:f1:20:5c:2b:79:b5:cb:f5:80:09:
                    b7:73:df:cd:fb:3a:ab:62:c7:dc:6a:1f:57:70:c5:
                    8f:b5:5d:55:b4:7f:23:c5:cf:bf:1a:e6:6d:ed:54:
                    75:75:ff:fd:20:70:63:4e:92:c9:38:f1:7b:73:b1:
                    fe:e2:0a:59:88:29:d4:2a:b1:3d:15:b7:8b:56:83:
                    3f:00:64:04:14:93:e6:dc:1d:7d:56:30:7f:5e:42:
                    ee:e1:b5:81:9c:37:48:d4:1c:34:ea:3b:e4:73:1d:
                    f7:a1:69:4e:f0:36:2c:fd:3f:b7:8f:57:99:a0:71:
                    e7:0b:3e:c4:63:93:1e:15:50:65:a7:14:6d:04:36:
                    d2:df:d6:09:fc:65:e0:0b:5f:27:a6:6e:b4:04:4e:
                    7f:08:ce:94:9e:fb:c0:84:eb:09:45:cf:a2:60:a9:
                    3b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FF:3E:41:E7:81:B3:4C:DD:0A:78:A8:CD:82:1A:8B:E6:E6:FF:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3c8c8ff-ba26-3495-8413-9e67fe6c872a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.112.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:8f:e7:83:34:38:01:77:06:d5:59:5d:23:84:7d:5a:c7:41:
         37:03:0f:dc:f5:1c:a8:e5:3d:d7:cf:cb:c7:51:81:ae:70:ed:
         c1:17:73:75:38:66:5e:af:67:c1:a1:0f:dd:95:f7:78:8f:b2:
         97:1f:b0:29:b9:36:be:d0:74:5e:63:25:14:74:38:58:0b:f1:
         39:78:a2:de:90:b1:8d:74:a9:a5:79:12:6a:26:23:89:ec:20:
         1c:e0:18:f4:1d:3d:81:ed:5c:50:f3:a1:db:4b:e2:98:58:c0:
         75:41:2c:d5:84:1f:15:bf:db:2b:f0:e1:ac:da:5b:1b:5b:44:
         46:3e:da:d3:5a:df:85:b9:91:db:fb:80:a2:54:b2:59:78:26:
         ed:1f:07:3e:bd:9c:8a:1b:fd:8f:a8:61:0a:03:1a:3c:66:30:
         3e:b5:e1:e6:c2:f8:a0:91:03:52:b4:7c:10:4e:36:a3:91:1a:
         a3:04:07:29:a8:1c:47:2e:05:bc:96:4f:fe:cc:f5:81:01:e1:
         5d:39:bf:f6:77:9c:9f:cd:96:d3:cc:d5:5c:7c:25:6d:48:ec:
         7b:e5:33:31:eb:ca:08:53:52:a2:63:fc:f5:21:42:81:98:83:
         dd:4d:44:dd:55:2e:d0:8c:e5:ec:56:0c:88:99:b6:ba:44:41:
         ee:24:ca:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:12:46 2025 by rpki-client