Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5254663-927e-3f60-b781-2127afd866b5.roa
File:                     f5254663-927e-3f60-b781-2127afd866b5.roa (raw, json)
Hash identifier:          rFz1Uqa81dCrCJmuQDG7ifC1rblfKABFoCvdZ+RAQU8=
Subject key identifier:   55:52:39:F1:98:A6:3F:02:79:89:40:8A:57:1B:24:B1:19:8B:12:F5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C10ED67F88CF8E9782B8080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5254663-927e-3f60-b781-2127afd866b5.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        69.136.178.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:ed:67:f8:8c:f8:e9:78:2b:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=f3e194c6-9d3d-493b-b43d-209664e9ee4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:8b:b6:98:e0:0e:14:26:f2:78:74:d2:e9:
                    52:ad:ac:24:b4:db:5c:a8:8e:3b:4e:fe:5b:f4:7b:
                    de:be:7b:c6:2e:97:ea:93:2f:9e:d9:cc:9a:37:d9:
                    52:50:cf:b4:5f:58:62:ba:a8:63:39:ba:34:12:25:
                    46:2d:b0:cd:ad:01:ea:ac:5c:9f:7e:ec:7c:c3:2d:
                    83:71:0f:c5:82:c5:58:ff:0c:e4:94:c7:88:45:f1:
                    ce:3d:c4:c6:d7:12:c4:c9:66:f1:8f:f9:8d:98:a8:
                    dc:6c:43:0b:8a:20:41:32:42:75:22:85:0c:80:d8:
                    07:d7:08:33:71:81:c5:d4:b2:84:e6:79:2c:4f:00:
                    2b:41:2e:bb:4f:cb:80:0d:9c:4d:d4:e9:4f:77:bc:
                    21:a9:1c:32:be:f5:ca:4d:23:f2:67:8d:cb:33:da:
                    d4:e5:6a:11:00:6c:65:1f:a9:8c:36:e8:bd:37:4e:
                    50:95:d6:db:05:48:69:7c:53:f1:6e:3c:a2:72:11:
                    84:2c:54:22:85:3a:77:6c:3f:e9:03:f0:b5:47:94:
                    c2:d5:31:b3:03:13:08:24:28:ac:11:dc:c6:e8:47:
                    60:c6:9a:0e:55:39:c1:39:d0:46:5a:00:3b:41:44:
                    21:0e:19:d6:0f:b8:71:53:29:0f:3b:1c:29:70:4f:
                    45:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:52:39:F1:98:A6:3F:02:79:89:40:8A:57:1B:24:B1:19:8B:12:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5254663-927e-3f60-b781-2127afd866b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.136.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:72:c5:57:38:b0:21:ea:28:80:1e:92:98:d6:02:3f:6b:cd:
         4f:cb:f4:a8:72:17:cb:63:9a:2f:86:ff:88:dd:b8:1c:09:71:
         a3:27:b3:95:3b:18:43:13:f3:29:b8:ef:82:0b:4a:7d:23:c0:
         25:89:75:86:eb:0e:c1:c4:e1:a4:9a:98:0d:2d:eb:ad:e2:33:
         1f:37:cf:39:a8:9c:69:2e:a4:67:ec:66:96:fe:1a:83:61:72:
         04:cf:0f:76:e5:d2:07:3f:bf:a4:5f:4c:eb:c2:24:3f:be:96:
         e8:18:a0:64:41:29:30:9b:1f:e8:1c:c2:ba:93:42:3a:71:87:
         e9:d7:d5:14:9f:57:41:36:f6:85:c0:d0:1c:09:d8:27:e2:40:
         86:55:36:e1:51:b4:9f:e9:95:24:3e:71:1d:f4:40:fa:3b:65:
         7a:f8:89:0d:59:13:89:63:89:cc:66:6f:84:2f:d8:7f:9b:30:
         c4:d5:7b:7d:7e:f9:88:51:a4:e3:ee:51:2e:e9:73:75:cd:bf:
         1c:6e:2a:a6:5d:49:18:91:f3:de:17:6d:e9:e7:11:35:a3:c5:
         d2:eb:d6:75:14:e4:8f:1f:31:5e:81:ab:fc:0f:ce:42:6d:23:
         c6:64:f0:3b:fb:4f:ca:f6:d0:46:89:0f:fc:4c:1a:bf:24:32:
         1e:2c:b5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:28:47 2025 by rpki-client