Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d408d3ee-f85c-329f-b950-abed28464af7.roa
File:                     d408d3ee-f85c-329f-b950-abed28464af7.roa (raw, json)
Hash identifier:          hjdvxLJYS6NGtQQGGhalOGsPZlMvq/p7sxYKW5Vzl6w=
Subject key identifier:   90:C8:E4:CF:8E:F8:B3:CD:CB:DC:98:84:EF:4F:09:74:E3:47:6D:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C11396B3C006C9F1C711D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d408d3ee-f85c-329f-b950-abed28464af7.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        76.141.198.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:39:6b:3c:00:6c:9f:1c:71:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=4c3df4a4-ca1b-4e9f-8257-950367207293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:64:26:c7:66:7b:47:5b:25:8c:52:dc:66:
                    d0:3c:68:1c:70:75:53:35:61:1d:a6:1a:8b:1a:bf:
                    80:80:33:69:7a:b6:92:65:7d:06:77:85:8a:b5:2a:
                    d1:94:f3:32:f2:ac:f5:02:60:0c:9b:bb:c1:b5:63:
                    51:af:3e:f1:8d:ee:d8:e8:17:8e:d5:25:ae:23:67:
                    42:fc:58:e8:83:0e:61:8c:db:f2:bf:a4:1c:b2:fc:
                    22:ce:c8:4d:ae:8c:99:0d:13:60:9a:fd:99:20:ec:
                    06:92:87:30:63:2a:dc:de:15:2f:37:68:6f:53:43:
                    c3:97:53:b3:3c:3b:19:54:5d:1f:14:37:ed:d8:65:
                    69:7c:26:d8:c1:a5:11:b7:40:e2:24:33:1e:65:74:
                    d5:5f:50:7c:0f:5e:60:d2:74:10:b4:ce:cc:ee:40:
                    9d:5c:24:c4:97:11:08:3b:2f:8e:28:1f:c9:3c:97:
                    c4:d6:9e:12:eb:b7:8a:78:b2:1a:c7:0f:bd:ac:a2:
                    fb:29:24:ea:4a:2e:b0:11:ad:b1:d9:99:d6:d9:fd:
                    d2:68:3e:ce:0a:1b:29:99:ba:59:a0:a7:84:38:44:
                    14:53:21:b7:ea:09:22:5b:0a:61:77:7a:d6:d9:5a:
                    39:d1:4a:79:ae:16:f0:6b:77:f0:88:d8:14:be:d8:
                    29:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C8:E4:CF:8E:F8:B3:CD:CB:DC:98:84:EF:4F:09:74:E3:47:6D:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d408d3ee-f85c-329f-b950-abed28464af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.141.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:72:73:07:c4:f0:b5:90:34:5a:ff:bd:47:25:2b:64:00:3a:
         dc:42:4b:85:a1:94:9d:2e:3f:5f:11:30:b2:12:d5:ac:01:8f:
         89:61:3d:47:1e:40:e5:fb:3a:11:2c:ec:85:d9:2c:9d:b0:5a:
         12:24:f1:d1:c2:bd:79:ba:81:82:8d:07:32:a3:23:2e:c2:28:
         56:76:ba:25:4e:b2:00:e7:0f:11:1c:2f:62:18:fc:13:02:4b:
         21:63:e5:75:9e:e0:7d:c8:e1:dc:b6:97:b9:d8:fa:59:54:76:
         3e:1a:14:ff:10:d8:2d:07:05:87:4e:d8:d1:e6:f5:91:13:91:
         15:90:5f:02:8b:8b:61:61:6c:b9:91:30:68:75:97:2e:43:71:
         b9:e9:53:84:f4:15:df:b9:34:33:74:85:80:86:27:bc:5f:1e:
         59:88:72:24:13:80:e2:60:d7:f9:fb:a3:88:6a:7c:ec:82:03:
         73:a7:12:2d:1f:af:f3:6c:ec:a8:ab:9c:00:3d:8f:b1:ab:cd:
         4b:a8:97:55:ac:90:ad:f1:af:07:df:59:40:32:2b:87:12:be:
         e3:a4:6f:0f:57:1e:cf:a2:4f:93:1e:0b:34:01:0d:e7:14:d2:
         8e:2e:f2:b6:68:d2:d2:c4:0f:00:ec:82:40:32:e5:64:9c:80:
         2e:a0:2b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:39:40 2025 by rpki-client