Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/065ae527-ca28-3b54-bc4b-b79679912f26.roa
File:                     065ae527-ca28-3b54-bc4b-b79679912f26.roa (raw, json)
Hash identifier:          T6WuLLxyD2jiQj6p4zPEr1CqBaEvF049Zoqtjqz36Cw=
Subject key identifier:   30:9F:51:3B:D7:4A:AB:F4:B2:78:D9:07:D2:AD:3C:1E:D3:00:D6:4C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F6E1C38F6FD6A113B22D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/065ae527-ca28-3b54-bc4b-b79679912f26.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        76.144.82.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:e1:c3:8f:6f:d6:a1:13:b2:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=a2537e8e-8d9c-47f7-b250-cecf330b5a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:36:2d:e7:6b:9f:18:b6:98:2c:d9:89:f7:
                    f6:4a:f7:0e:25:71:0f:b5:43:ee:6a:1b:14:c1:7b:
                    58:ca:ce:54:a7:21:47:20:9e:26:8a:10:5c:c9:86:
                    62:df:75:25:a4:66:18:39:f1:ef:64:9c:78:c2:00:
                    fb:fa:6e:60:17:14:4f:16:8c:dd:fb:d2:3e:d2:b3:
                    a7:04:74:ae:25:d2:f6:fc:39:84:ca:7b:68:a2:d1:
                    26:35:09:8e:53:80:4c:44:55:47:46:b7:7b:10:4b:
                    75:11:a3:46:59:8e:96:93:45:9c:65:7d:7f:c4:a0:
                    1a:7d:19:90:ac:94:61:ab:a3:2c:19:23:02:41:e3:
                    25:5e:41:9b:81:e4:d4:5c:8f:ff:fe:be:5b:fb:bf:
                    6a:5f:79:d8:3c:4f:b4:c9:c3:a1:48:bc:24:a6:59:
                    2d:a9:73:c2:42:df:c2:7b:25:82:66:88:c1:61:60:
                    91:bc:a9:25:77:21:05:e2:6d:ef:ef:2c:c7:48:a1:
                    25:de:5e:44:05:6b:e8:ee:c7:b9:f0:24:a0:36:db:
                    6d:dc:9a:e5:57:f2:5d:e3:a9:87:e0:1e:c2:e8:82:
                    99:9e:1c:b9:0b:3d:1b:30:d2:fd:ff:5d:1f:e2:a1:
                    5b:7c:c1:f6:ba:e0:2f:4c:f2:8f:29:a0:74:60:e0:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9F:51:3B:D7:4A:AB:F4:B2:78:D9:07:D2:AD:3C:1E:D3:00:D6:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/065ae527-ca28-3b54-bc4b-b79679912f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.144.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:4d:f3:69:00:45:a2:1d:05:7b:56:57:be:11:96:c6:e2:fb:
         02:a4:59:fd:f2:d9:1f:23:2b:24:28:18:40:6e:52:db:c6:d2:
         67:71:bb:41:bb:a2:18:e1:de:3b:f4:44:e0:de:d8:09:32:a6:
         c8:5e:69:c3:07:94:7a:64:3f:d2:7c:c4:28:19:51:32:db:00:
         b7:32:d9:62:2d:31:90:99:eb:ab:65:2a:06:fd:d8:45:2a:86:
         4d:3d:9d:40:71:98:06:a1:49:9a:50:08:c8:99:67:cf:1b:fd:
         78:7d:d9:19:4d:69:79:a2:be:a3:25:92:28:83:a5:f1:eb:eb:
         f2:7a:bb:70:d3:c3:61:58:dc:33:92:87:28:95:f1:f6:77:fc:
         2c:cd:3c:cc:4f:2d:a2:8a:71:97:99:14:dc:a6:bc:71:96:3e:
         57:2f:87:3a:97:7a:6e:26:6b:9c:fc:23:6c:9c:20:a5:75:95:
         2f:3e:7f:6d:83:bf:c3:7a:15:d9:de:13:94:60:cb:88:be:3f:
         3b:7b:56:f5:a5:3e:9a:b2:6c:0d:a6:be:42:f1:7c:18:06:73:
         25:05:c1:86:08:b1:27:a2:d3:36:c6:23:37:b9:d4:d5:ff:9a:
         29:7d:d6:a2:47:4a:c2:99:84:5e:6f:7e:6d:58:58:d8:ff:a8:
         07:ef:ce:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----