Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c189462-b93c-3d23-915d-d8383ef46552.roa
File:                     1c189462-b93c-3d23-915d-d8383ef46552.roa (raw, json)
Hash identifier:          rREtvJ6Wq9kDL1s76YbpIAPGHmdeVROHxL3L09dyNcw=
Subject key identifier:   38:CE:E8:61:5E:46:E5:26:8F:93:0B:D7:B5:5B:63:D4:40:4A:E5:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF5D177A53F417E46E0AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c189462-b93c-3d23-915d-d8383ef46552.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        71.57.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:5d:17:7a:53:f4:17:e4:6e:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=0452ea52-56d0-4841-9a9a-8806a2d4ed85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2d:c1:66:e6:ab:28:2e:a0:b0:dc:3e:f0:44:
                    7e:d2:9e:03:47:dc:e1:6d:a4:d7:b6:d2:2e:e7:d6:
                    5d:eb:ce:a1:ac:9b:79:a9:87:a9:62:34:c1:73:63:
                    49:b8:2a:ae:2c:b5:1b:c4:13:f7:e2:f3:4b:9a:1f:
                    8c:60:81:3a:a7:4e:31:24:a8:a5:41:77:48:cc:6e:
                    ad:14:3d:b7:56:b3:2f:6c:ec:f7:88:68:27:36:97:
                    9b:9b:d1:2c:47:56:cf:21:f7:2b:69:b6:ef:1f:86:
                    f0:4b:e6:69:54:31:71:bf:19:98:49:9f:ea:c5:64:
                    a0:9f:b7:a3:02:d0:b0:d3:2b:14:04:ed:32:d3:5d:
                    14:33:02:bc:ca:67:01:56:97:66:ed:4b:a3:73:a4:
                    ae:35:90:02:4e:d9:25:39:c9:f3:42:59:d9:7f:5b:
                    f7:a7:15:e4:be:c3:91:94:62:1e:d2:8b:4c:5f:a6:
                    20:9f:0b:fe:c3:67:55:89:93:35:50:2b:10:8b:33:
                    1e:dd:3d:ec:5c:79:17:90:30:69:49:ef:78:26:e9:
                    b1:b4:37:93:d9:5b:c2:30:89:15:ae:56:f2:6b:84:
                    d5:8e:6b:cb:d9:70:2b:15:bc:08:72:57:9e:f6:73:
                    9e:97:e2:06:a8:1d:e6:c1:e5:cd:eb:21:dd:51:88:
                    d5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CE:E8:61:5E:46:E5:26:8F:93:0B:D7:B5:5B:63:D4:40:4A:E5:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c189462-b93c-3d23-915d-d8383ef46552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.57.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:73:6e:b1:43:21:d2:5b:24:13:86:e3:fb:80:77:f3:55:bc:
         82:dc:f9:dd:eb:bc:40:3f:c1:b4:0b:21:44:0c:4e:c0:e5:9e:
         51:26:41:10:00:c4:0a:cb:c9:d0:c5:f4:b3:f4:8e:6b:51:44:
         46:f8:ad:8a:14:88:f6:60:a7:86:7a:ec:07:1e:cd:81:e0:0d:
         05:c9:7f:b8:5b:1c:a5:7c:5a:77:dd:8e:d8:7b:95:dd:67:b7:
         1c:f9:49:77:1f:99:35:3d:c4:c6:04:ed:53:d2:79:a4:40:c9:
         d9:ca:92:00:53:8c:97:22:63:d4:bf:d1:38:bc:73:43:2f:ae:
         c8:b9:4b:b4:4d:56:33:9b:d5:7e:1f:63:2c:8c:a8:3b:23:fa:
         50:4a:09:45:56:ec:72:df:d4:cb:2a:a5:ae:ab:57:81:3a:c9:
         a4:70:47:92:2c:c3:27:cb:8b:da:ac:24:62:35:64:86:ae:6a:
         11:60:ca:bd:8c:2c:59:fa:d1:ca:07:1e:b4:09:4e:48:6d:aa:
         fe:b2:e4:4c:12:d4:be:16:3e:f2:b1:17:7e:a0:7d:ec:40:6d:
         d4:bf:05:79:6f:66:53:d0:19:79:fd:21:ae:f2:34:81:b2:66:
         12:9e:a4:d9:f0:64:24:0c:6e:9e:ec:63:5e:fd:e5:90:df:46:
         4e:85:c6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:26:58 2025 by rpki-client