Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efb301b5-4c04-3208-869d-ffeae73acf3e.roa
File:                     efb301b5-4c04-3208-869d-ffeae73acf3e.roa (raw, json)
Hash identifier:          dxSGb3FhtAI55iQgta9bIAeXgqxop85tEUU93DZMFvo=
Subject key identifier:   09:8A:5C:AD:98:69:BC:6C:F2:9C:2F:48:D4:6B:4F:DB:4A:A4:E0:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C109D9238153C3CCB6DBE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efb301b5-4c04-3208-869d-ffeae73acf3e.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        71.58.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:9d:92:38:15:3c:3c:cb:6d:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=cbdd56bc-d71c-450a-9058-83a9d9f65d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:55:15:fe:be:4b:94:bc:c9:37:81:97:d1:
                    38:dc:4e:03:8f:46:08:d6:f0:78:bd:5c:27:42:1b:
                    c3:b2:40:5a:02:5b:20:68:60:e3:64:4a:93:f2:7c:
                    d3:b2:84:01:47:cc:c0:f4:c6:04:fd:9a:e5:a5:4b:
                    74:c5:7e:38:87:66:fd:47:3b:2a:90:cb:e2:1f:8a:
                    1e:28:f4:b7:bc:d9:c6:3f:1b:7c:15:94:a8:a5:5d:
                    ef:5e:27:92:49:f6:b9:2a:22:32:62:96:df:34:eb:
                    99:9e:83:7a:40:a6:7e:ac:c2:54:7f:0b:3d:24:04:
                    98:64:00:cf:46:91:08:45:63:27:e0:fc:8c:03:49:
                    d9:09:c3:8a:3c:2d:18:ff:b8:47:87:cb:db:70:94:
                    41:f7:58:eb:83:aa:74:66:64:ac:d5:2d:86:6b:12:
                    6c:e8:25:7f:40:5a:6d:c0:9d:84:95:12:23:bf:1a:
                    e0:10:ed:9a:2a:23:1f:63:1f:e3:c1:29:b4:c3:5b:
                    d3:a7:9b:ee:91:0c:68:fe:12:5a:87:17:4e:3a:b2:
                    ba:e9:40:9e:82:c9:0e:14:32:25:1c:29:1f:05:f9:
                    1a:65:83:82:65:13:45:b3:a9:6a:be:99:ec:d2:20:
                    54:85:dc:3a:79:7b:0c:54:ad:99:55:5d:65:f9:1a:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8A:5C:AD:98:69:BC:6C:F2:9C:2F:48:D4:6B:4F:DB:4A:A4:E0:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efb301b5-4c04-3208-869d-ffeae73acf3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.58.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:52:c8:80:03:93:2d:84:e9:1d:00:17:a4:10:a1:72:34:ba:
         87:e9:a4:7d:ff:27:be:ef:e1:81:2e:40:1e:50:01:d8:1c:36:
         b1:ed:1d:f5:cf:f5:85:91:c1:cd:b2:fe:8c:6e:39:9b:a4:76:
         6c:0c:d2:fc:98:bd:12:76:10:98:82:9a:5d:20:7f:e6:b6:13:
         86:05:fb:d3:ce:60:13:40:d3:50:a7:a8:9e:10:92:34:cf:48:
         61:fa:b0:ec:9e:2f:9a:f8:b7:22:93:89:37:a8:59:0b:00:91:
         07:41:e4:1e:22:2e:c2:25:8e:4e:36:bd:87:1e:19:a1:41:85:
         a5:94:fa:d2:5d:6e:36:5e:19:86:a4:f3:8c:68:05:e2:09:6c:
         3f:6c:81:b4:5f:07:b1:68:08:d5:03:a4:41:fd:6b:2c:05:45:
         43:bd:93:45:38:d2:4c:38:d4:c0:47:57:fa:af:d1:f7:d1:b8:
         e5:16:ea:fe:f7:52:56:53:e8:be:96:e4:03:bd:a4:13:27:cd:
         9a:35:82:65:9c:03:ae:f0:c9:5d:d4:83:73:5e:9f:09:9d:91:
         47:50:16:57:9e:dd:65:98:6a:39:02:4b:74:2a:e1:18:6a:77:
         d8:18:05:91:7a:94:20:ba:c4:ee:bf:f9:fc:bf:d1:b4:dc:ec:
         44:3c:ee:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEJ2SOBU8PMttvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
Y2JkZDU2YmMtZDcxYy00NTBhLTkwNTgtODNhOWQ5ZjY1ZDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowRVFf6+S5S8yTeBl9E43E4Dj0YI1vB4vVwn
QhvDskBaAlsgaGDjZEqT8nzTsoQBR8zA9MYE/ZrlpUt0xX44h2b9RzsqkMviH4oe
KPS3vNnGPxt8FZSopV3vXieSSfa5KiIyYpbfNOuZnoN6QKZ+rMJUfws9JASYZADP
RpEIRWMn4PyMA0nZCcOKPC0Y/7hHh8vbcJRB91jrg6p0ZmSs1S2GaxJs6CV/QFpt
wJ2ElRIjvxrgEO2aKiMfYx/jwSm0w1vTp5vukQxo/hJahxdOOrK66UCegskOFDIl
HCkfBfkaZYOCZRNFs6lqvpns0iBUhdw6eXsMVK2ZVV1l+RqvuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAmKXK2Yabxs8pwvSNRrT9tKpOD3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWZiMzAxYjUtNGMwNC0z
MjA4LTg2OWQtZmZlYWU3M2FjZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARzoxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5SyIADky2E6R0AF6QQoXI0uofppH3/J77v4YEuQB5QAdgcNrHtHfXP
9YWRwc2y/oxuOZukdmwM0vyYvRJ2EJiCml0gf+a2E4YF+9POYBNA01CnqJ4QkjTP
SGH6sOyeL5r4tyKTiTeoWQsAkQdB5B4iLsIljk42vYceGaFBhaWU+tJdbjZeGYak
84xoBeIJbD9sgbRfB7FoCNUDpEH9aywFRUO9k0U40kw41MBHV/qv0ffRuOUW6v73
UlZT6L6W5AO9pBMnzZo1gmWcA67wyV3Ug3NenwmdkUdQFlee3WWYajkCS3Qq4Rhq
d9gYBZF6lCC6xO6/+fy/0bTc7EQ87ik=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:22 2025 by rpki-client