Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c69d3b07-0d00-3274-a598-c01d21f07513.roa
File:                     c69d3b07-0d00-3274-a598-c01d21f07513.roa (raw, json)
Hash identifier:          yTW5rsycrEfs7/1Cgb1wlS3f7QPqGdPgDoCD77LL/5s=
Subject key identifier:   6F:E5:EB:D5:2B:FA:E3:55:EF:09:E2:A4:4D:BD:21:44:F2:E5:84:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AA119A13388CEC04F4AA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c69d3b07-0d00-3274-a598-c01d21f07513.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33490
IP address blocks:        71.63.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:a1:19:a1:33:88:ce:c0:4f:4a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=396ec1f4-ffbc-489e-94ee-d22c52ab2a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:cb:64:0d:85:ae:31:a8:92:86:5e:e4:5a:
                    63:74:cc:dc:8d:38:04:b9:ed:27:d0:7e:53:d7:9f:
                    96:9c:3f:fb:70:9a:84:e5:8a:51:e7:d6:9f:b5:f1:
                    4a:73:0d:6c:fe:f7:31:a0:2b:2a:f0:69:01:06:08:
                    e6:47:6c:82:c0:00:46:8a:cd:42:3d:b4:69:6c:11:
                    bf:9d:84:9f:33:4a:85:e6:9b:59:a1:a7:d9:2d:1f:
                    5a:44:88:a8:ee:7a:ac:77:5e:d0:0b:33:46:c9:ce:
                    c4:e8:72:6a:49:0d:7d:cb:7b:3b:4f:5a:b6:50:f9:
                    cc:cb:f8:27:af:fb:49:df:3f:bf:a7:32:59:d8:f8:
                    3e:d3:ba:b6:d0:39:94:fe:51:cf:44:93:c1:64:6b:
                    80:41:0e:1f:8f:81:35:85:92:26:a2:9b:cb:b3:50:
                    c1:c6:29:7e:99:a7:68:68:45:d2:09:98:0b:33:8a:
                    04:a3:ed:92:e9:49:cc:8c:42:3e:2e:a7:5a:ed:f8:
                    7a:ed:c0:60:2d:77:2f:d5:75:51:57:30:1f:a5:ea:
                    e3:1f:9e:51:d3:0e:a9:55:b3:5c:43:53:58:42:77:
                    5c:84:c1:37:38:33:0d:2d:6c:3c:d8:ee:87:3e:15:
                    64:d8:63:72:ff:b5:cb:ee:17:2c:7f:d1:9b:22:ef:
                    6b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E5:EB:D5:2B:FA:E3:55:EF:09:E2:A4:4D:BD:21:44:F2:E5:84:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c69d3b07-0d00-3274-a598-c01d21f07513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.63.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:8e:aa:0c:23:68:c7:93:8d:5b:c2:24:8b:43:f7:c1:0c:da:
         ab:eb:5d:fa:96:f7:c5:2f:03:a5:80:1c:8c:d3:6b:c8:c9:05:
         c8:08:61:9c:68:a9:76:28:62:9d:14:98:74:2e:4b:a2:39:49:
         79:b9:72:07:bf:b6:71:37:5a:db:05:ab:2d:30:03:d9:ad:82:
         e9:2c:19:e3:7f:a3:15:e1:f6:8d:ed:ab:81:f2:1b:38:30:63:
         5c:2e:11:90:52:11:a1:41:aa:88:a5:ae:9a:64:fb:06:50:34:
         69:92:2f:24:25:cf:7e:36:d7:e6:2d:89:c8:37:d4:df:82:25:
         91:f7:66:03:4a:6e:61:df:62:4e:80:c9:8f:b0:a4:52:67:7d:
         90:42:10:e5:52:96:14:a8:5e:50:06:bb:b3:d2:65:75:28:8c:
         bb:3c:3b:d8:52:64:77:7b:93:d1:ed:5a:cc:15:a2:10:8b:11:
         63:9d:31:b4:67:9a:a7:12:c1:8a:c3:cb:e8:aa:92:23:22:0f:
         75:60:7b:78:7a:ef:5d:6c:82:87:f4:bd:36:31:19:b5:6b:f8:
         8c:40:1d:de:1a:f1:78:f9:67:17:ad:24:a5:1b:1d:9d:a2:81:
         5a:82:ca:f7:de:5c:22:a3:9e:c3:9f:59:68:63:56:4f:a1:af:
         bc:a9:45:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:16:58 2025 by rpki-client