Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d57f2545-a413-39ab-ba93-7867b3dff4c2.roa
File:                     d57f2545-a413-39ab-ba93-7867b3dff4c2.roa (raw, json)
Hash identifier:          G/PhUx8DpZLVIO4CZOBlHcmLmkeEiG7FebnD3r645pU=
Subject key identifier:   03:85:3E:9C:69:20:AA:D0:A9:B3:A5:14:0C:CE:96:96:19:22:FE:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B3ED2F41C4993273F7800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d57f2545-a413-39ab-ba93-7867b3dff4c2.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33668
IP address blocks:        174.162.78.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:3e:d2:f4:1c:49:93:27:3f:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=1afbc768-d067-4f14-b8ca-67ee95c77feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:98:32:a3:60:e4:55:fa:5b:5e:98:65:4c:3f:
                    73:3a:91:99:32:42:30:b4:7d:25:0e:27:35:a1:5b:
                    11:07:f0:dc:25:6c:d4:de:11:39:50:fc:51:e8:ac:
                    56:42:f9:9a:a0:ae:a4:39:a1:7a:76:b7:cb:c9:ca:
                    c8:10:96:4c:f3:b4:05:ef:be:e7:3d:72:04:13:3e:
                    c3:c7:c2:52:f7:76:ea:94:8b:f5:a5:9e:8f:62:b4:
                    f2:08:e1:a5:70:cd:ab:62:d9:3f:30:7b:7c:f5:cf:
                    03:c0:9f:1a:06:dd:e8:31:27:50:98:d4:fd:c7:a2:
                    95:92:23:e0:4b:66:04:df:e7:eb:2c:f5:41:46:6d:
                    58:02:b5:82:d4:9f:b3:5a:0c:ee:e9:15:ac:fe:fd:
                    b4:ff:b7:3a:63:3e:63:ba:2d:72:e5:5a:5c:d0:c9:
                    4a:e2:fd:fa:50:e2:51:80:b2:d5:88:9e:2b:c7:8d:
                    98:ba:cc:e3:50:87:35:fc:a0:25:a7:7c:a1:b6:f8:
                    d3:20:da:e0:0b:9b:3c:f8:40:b3:cf:c6:df:16:5b:
                    92:29:5d:54:c4:07:7d:41:89:36:81:e9:84:94:c1:
                    d3:4d:0f:5e:ee:f7:16:f8:a6:18:8c:f2:74:84:52:
                    c7:61:85:1b:bb:d1:15:1d:45:21:2a:51:9c:fe:61:
                    06:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:85:3E:9C:69:20:AA:D0:A9:B3:A5:14:0C:CE:96:96:19:22:FE:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d57f2545-a413-39ab-ba93-7867b3dff4c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.162.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a5:a0:b0:3b:57:e3:30:bc:f5:87:2f:d9:87:2f:19:4d:d7:
         c6:18:ea:fb:7a:34:90:6a:8d:91:02:5e:51:49:2b:0d:fa:b0:
         90:4c:49:eb:c7:39:31:a2:c1:97:5e:f7:aa:c5:0f:7b:bb:15:
         9f:f1:34:62:44:e7:e0:f1:83:37:cd:ac:04:a8:76:e6:4e:ca:
         ed:ce:7f:05:7d:ed:75:fc:c1:5a:37:26:a9:60:f4:92:15:3a:
         bd:f6:75:35:14:a0:1d:c4:de:bd:12:f4:c8:bc:e8:3a:da:a7:
         96:16:0b:5f:c6:dc:b3:ae:46:92:50:fa:76:c4:4e:70:3b:5d:
         31:9a:1b:3a:4e:db:4a:e8:f5:32:3f:58:9c:86:3b:4c:9e:f7:
         90:8d:f5:80:98:c8:4a:3f:7b:84:68:45:79:6d:17:12:63:43:
         d2:22:54:b1:44:10:7f:9d:ba:ae:61:cf:8a:39:e4:f2:18:22:
         71:6c:a3:ff:0b:54:6a:e8:4f:90:9b:59:fd:cd:40:cd:29:37:
         ca:27:07:89:7b:48:37:45:33:c2:a1:64:c6:da:66:a0:b8:00:
         03:59:5e:65:c8:cf:c6:13:5e:9b:11:0c:82:10:94:9e:2e:53:
         19:c1:fd:c6:01:b3:1f:c5:5b:9c:f8:4c:3c:bf:52:00:6e:c1:
         60:db:26:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:30 2025 by rpki-client