Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6b3424b-b474-3303-9af2-eb36a6d718d9.roa
File:                     f6b3424b-b474-3303-9af2-eb36a6d718d9.roa (raw, json)
Hash identifier:          xYDs2rS/2gCEgCRRxJlMZDLKbXN1soXUrG9ULPyTSTE=
Subject key identifier:   E4:F5:CE:73:40:5A:60:BF:AD:B1:1F:D3:8C:46:43:3C:D1:55:EA:2D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C12B044DE8C3F1085A616C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6b3424b-b474-3303-9af2-eb36a6d718d9.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        73.211.28.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:b0:44:de:8c:3f:10:85:a6:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=3a7be3b4-e8af-4118-99cf-a0f677df2e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:57:94:1a:78:91:e6:2b:3c:a4:15:64:6f:16:
                    f1:f5:0d:0e:42:11:11:ca:36:ce:57:10:da:f8:c1:
                    38:8f:51:b4:d5:3d:c8:c8:44:78:bc:e1:b3:47:bb:
                    e8:6a:55:a9:51:8b:4d:ca:63:69:34:65:cd:f6:bc:
                    3e:6c:2c:f9:a7:e3:ba:a9:45:b2:b3:93:86:70:99:
                    0e:e8:29:ce:f8:dc:ac:57:c2:ce:78:a7:b6:ac:4e:
                    fc:70:68:69:d2:76:aa:de:a2:46:fb:a4:62:43:d3:
                    a6:51:42:da:33:93:40:91:0d:6b:95:e9:c8:97:16:
                    34:84:4e:33:10:0d:5c:ab:fa:42:4c:99:23:10:e1:
                    e6:f4:03:05:c2:be:f6:63:f5:6e:d7:69:21:44:6c:
                    93:e5:79:c0:af:5d:4b:c3:62:90:69:4b:ec:e7:c4:
                    3f:52:f7:ce:35:be:5b:43:5b:46:2b:14:81:b5:ea:
                    3c:53:b6:e3:cd:ce:e2:1f:6e:9b:58:3a:64:24:a6:
                    7d:44:fd:65:b3:c2:dc:00:3b:e8:ee:29:23:53:2b:
                    ef:91:bc:a8:8c:24:4f:a2:d7:d9:02:02:32:a2:66:
                    38:6b:1d:0d:76:09:a1:ea:e1:12:0d:4c:c4:2c:87:
                    fb:3e:94:bf:5c:ba:df:b4:1b:55:0c:fa:44:88:50:
                    e7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F5:CE:73:40:5A:60:BF:AD:B1:1F:D3:8C:46:43:3C:D1:55:EA:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6b3424b-b474-3303-9af2-eb36a6d718d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.211.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:0f:6f:8a:ed:cf:7e:4a:d2:4a:b9:13:1b:4e:2e:f7:8f:10:
         2f:5d:00:13:80:64:3c:e1:59:f6:d2:04:37:10:d1:0f:c7:31:
         87:8c:27:b3:50:b2:9f:5d:94:60:cc:17:1b:83:d9:28:d2:89:
         c2:97:93:44:09:f2:7a:b4:80:79:7a:2b:8c:1c:1e:09:4a:7d:
         4c:07:98:b6:bc:49:14:45:93:e2:60:28:b0:c0:ea:3d:c1:34:
         59:7d:e9:3f:7a:f9:cd:55:70:a3:74:98:2f:5c:29:9a:5f:38:
         04:8e:bb:29:1f:98:38:97:ec:ef:6a:a0:03:ce:33:62:48:60:
         3f:a6:47:71:19:03:0f:44:d4:df:5f:52:dd:52:c3:6e:7c:14:
         d2:c6:22:5f:d0:4c:16:69:5d:b6:0d:7b:a9:60:82:5c:6b:14:
         69:2c:f1:b7:27:21:e5:a6:77:93:33:74:7e:f5:17:2f:3b:51:
         d2:bd:0a:cd:39:47:92:b6:8f:7f:ad:8a:d9:76:e8:48:7a:53:
         d0:58:16:02:93:90:8a:93:2b:90:af:8e:5b:2d:2c:73:28:d4:
         69:30:b6:65:d6:a4:fd:9e:eb:c4:d4:6c:d3:57:39:94:ea:8f:
         ad:ea:02:57:8b:04:8f:d5:53:e3:4f:58:60:24:72:7b:13:54:
         47:5a:3d:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMErBE3ow/EIWmFsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
M2E3YmUzYjQtZThhZi00MTE4LTk5Y2YtYTBmNjc3ZGYyZThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1eUGniR5is8pBVkbxbx9Q0OQhERyjbOVxDa
+ME4j1G01T3IyER4vOGzR7voalWpUYtNymNpNGXN9rw+bCz5p+O6qUWys5OGcJkO
6CnO+NysV8LOeKe2rE78cGhp0naq3qJG+6RiQ9OmUULaM5NAkQ1rlenIlxY0hE4z
EA1cq/pCTJkjEOHm9AMFwr72Y/Vu12khRGyT5XnAr11Lw2KQaUvs58Q/UvfONb5b
Q1tGKxSBteo8U7bjzc7iH26bWDpkJKZ9RP1ls8LcADvo7ikjUyvvkbyojCRPotfZ
AgIyomY4ax0Ndgmh6uESDUzELIf7PpS/XLrftBtVDPpEiFDnbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOT1znNAWmC/rbEf04xGQzzRVeotMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjZiMzQyNGItYjQ3NC0z
MzAzLTlhZjItZWIzNmE2ZDcxOGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASdMcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ0Pb4rtz35K0kq5ExtOLvePEC9dABOAZDzhWfbSBDcQ0Q/HMYeMJ7NQ
sp9dlGDMFxuD2SjSicKXk0QJ8nq0gHl6K4wcHglKfUwHmLa8SRRFk+JgKLDA6j3B
NFl96T96+c1VcKN0mC9cKZpfOASOuykfmDiX7O9qoAPOM2JIYD+mR3EZAw9E1N9f
Ut1Sw258FNLGIl/QTBZpXbYNe6lgglxrFGks8bcnIeWmd5MzdH71Fy87UdK9Cs05
R5K2j3+titl26Eh6U9BYFgKTkIqTK5CvjlstLHMo1GkwtmXWpP2e68TUbNNXOZTq
j63qAleLBI/VU+NPWGAkcnsTVEdaPag=
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:32:26 2025 by rpki-client