Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa3eded2-4e03-3e77-9e2b-6484be995e11.roa
File:                     fa3eded2-4e03-3e77-9e2b-6484be995e11.roa (raw, json)
Hash identifier:          m37X3vWAkK8d2TBGoVfLevA8DrKdsFBNZjQKo2L3O5s=
Subject key identifier:   05:BC:38:ED:DD:F5:76:0E:43:2E:21:F1:69:92:90:6E:35:43:95:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C10C00C28EDE3BFF3799600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa3eded2-4e03-3e77-9e2b-6484be995e11.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        174.182.44.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:c0:0c:28:ed:e3:bf:f3:79:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=55768de5-2afb-4b7f-aba8-46574f385c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:94:cf:e3:77:87:32:84:90:46:98:df:00:
                    14:b6:99:61:6a:56:be:92:ae:22:28:16:0f:46:08:
                    1c:8e:3c:a6:38:68:51:a0:91:9a:4c:ee:1d:29:47:
                    63:de:9d:9e:49:f1:1a:2e:46:91:3b:f6:74:dd:6f:
                    ac:11:d0:e7:8e:c3:de:2c:31:8c:70:af:1b:8f:34:
                    5d:61:d6:df:ff:a5:2e:0c:d1:5d:4f:5f:39:3e:51:
                    fd:2f:06:c8:de:6c:a0:6a:ca:54:14:17:49:87:c2:
                    ee:63:5b:91:8e:20:50:79:bf:04:9a:48:1a:20:e6:
                    76:fe:e6:ff:ed:7b:70:66:2a:68:10:31:a7:30:b5:
                    e4:b8:f0:5e:6f:03:37:1d:c3:71:e1:e4:08:2b:6e:
                    14:de:8a:52:0f:a2:7f:52:35:47:40:32:e5:40:e8:
                    e3:a1:cc:f4:6f:08:13:76:39:52:05:04:bc:49:97:
                    f4:da:0b:d1:85:20:db:85:cd:e8:66:b6:3e:12:0e:
                    03:c2:38:67:7c:18:6b:d1:92:51:ad:85:23:39:a5:
                    39:dc:cc:ef:5f:69:72:78:fa:45:6d:e5:7b:95:3a:
                    03:1b:39:cf:86:a3:37:9a:ef:8a:c4:27:6e:a2:af:
                    d9:ef:7a:b1:09:1d:7f:b4:36:e4:8b:ca:db:bd:01:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BC:38:ED:DD:F5:76:0E:43:2E:21:F1:69:92:90:6E:35:43:95:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa3eded2-4e03-3e77-9e2b-6484be995e11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.182.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:91:93:25:c5:d3:05:ce:c1:8f:32:eb:9a:ce:94:57:9d:81:
         40:31:66:cd:f0:60:52:8f:ab:bb:65:e9:1f:fb:1d:62:5e:a0:
         a2:b1:52:b6:20:44:2b:3a:de:15:59:4a:9d:7d:ee:c2:e7:a5:
         65:cd:ce:25:13:73:c2:ee:d2:a2:4c:07:b6:a5:83:3c:58:c5:
         77:a5:7d:31:cb:61:e5:34:92:67:db:67:9c:6a:a9:20:24:69:
         32:60:a4:0e:a8:d9:1d:5e:c2:59:f1:fa:ed:9d:95:d8:cc:2f:
         08:15:81:5e:07:e2:22:44:62:87:21:da:32:0c:0d:4c:0b:e6:
         f7:e3:0b:e7:e4:8f:2e:43:15:62:7f:9a:c9:7c:48:ab:04:ec:
         65:3b:a7:61:df:89:b9:7f:d2:c7:3a:76:f2:06:94:e8:dd:d0:
         ea:56:f9:3f:e4:f7:55:c5:88:b0:40:66:0b:16:98:4d:96:b6:
         fb:ff:77:da:3e:57:a3:23:c6:e7:b7:d1:39:41:13:d1:1e:42:
         ba:91:f4:b8:ba:6c:4f:03:a5:51:57:bd:eb:15:1a:44:28:9c:
         bb:5b:17:e8:4b:3f:df:76:33:da:b0:dd:fa:99:d5:98:31:ac:
         aa:64:5d:41:3d:08:85:44:4b:ef:7c:c3:46:49:0a:ea:1e:34:
         1b:16:f5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:06:14 2025 by rpki-client