Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47e3404f-61f4-31a5-a5bb-fe0b18fe887a.roa
File:                     47e3404f-61f4-31a5-a5bb-fe0b18fe887a.roa (raw, json)
Hash identifier:          v5wS6XaFRYVDYugbb0M0eooyfMppd+Xpehsy795Fu18=
Subject key identifier:   7F:A4:82:71:CC:27:B3:4A:F4:36:71:95:B5:D3:60:8B:B8:E8:81:85
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAEEE33401E75F3FBB767A8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47e3404f-61f4-31a5-a5bb-fe0b18fe887a.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33659
IP address blocks:        73.248.14.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:ee:33:40:1e:75:f3:fb:b7:67:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=66c9c825-e1d0-462f-8503-30e8bff8d0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:43:88:7a:21:61:21:1d:44:60:d5:c8:fe:b7:
                    a7:b4:07:4e:d0:b0:03:df:1b:6e:11:4e:17:d8:35:
                    07:c3:7f:5c:2e:bf:88:a2:92:95:b2:de:e9:4f:fd:
                    a9:75:3f:3a:76:4e:86:84:06:aa:ad:8f:80:a7:aa:
                    17:1c:6d:88:9c:ea:a9:a1:74:b1:b8:3a:6d:10:8b:
                    72:2f:a6:02:33:06:9b:d7:2e:57:22:6d:d2:c5:61:
                    50:65:a4:f2:85:a5:d2:ec:2e:6a:da:b2:9f:3b:80:
                    97:cd:8e:38:5d:2b:d4:44:76:c7:10:97:7f:20:fc:
                    b8:9c:ed:04:88:25:64:ae:9c:7d:7a:cc:8e:c9:bd:
                    bd:f2:0c:aa:6d:8e:8d:2f:a0:53:2e:f7:12:ff:15:
                    84:8f:2a:c7:9d:55:d1:b8:1a:5f:31:8e:f3:9d:78:
                    97:12:0e:03:94:e4:c8:ab:95:bd:f4:27:e7:ae:92:
                    7c:e1:00:ab:fd:37:56:3d:28:71:e8:0b:0b:bb:6c:
                    f0:01:69:23:c6:3e:1c:fc:ef:ab:c2:61:df:b8:6f:
                    cd:dc:b6:c0:c8:36:c2:99:8e:2a:da:1a:00:16:7c:
                    d0:8f:86:ae:e4:b6:c3:7a:2c:ca:9d:03:0c:ce:63:
                    7f:8f:bf:65:3f:25:b4:f3:81:34:b9:e5:bd:97:65:
                    b1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A4:82:71:CC:27:B3:4A:F4:36:71:95:B5:D3:60:8B:B8:E8:81:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47e3404f-61f4-31a5-a5bb-fe0b18fe887a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.248.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c6:80:19:1a:d1:6d:2f:d4:97:14:dd:01:b7:bd:9a:e8:da:
         fd:c8:ac:ed:a7:22:72:8b:c5:0f:e1:d7:c6:1d:86:91:2a:56:
         ca:51:c0:45:6c:aa:ce:12:08:8d:d6:ce:96:65:fd:bb:40:10:
         c4:fa:9f:2c:39:7b:dc:fb:47:c7:70:70:d7:88:93:0d:c0:ae:
         4c:3a:ae:11:92:ed:a3:26:75:04:21:1b:80:30:fd:e1:76:73:
         b1:3a:1f:07:9b:06:17:52:8b:bf:bf:59:80:4e:6c:07:04:0f:
         80:ca:79:35:11:34:3d:16:97:db:69:6b:5c:91:46:e6:d0:c6:
         0b:02:48:0b:86:98:d1:08:bd:df:c4:2c:30:96:53:e0:45:36:
         e7:e0:32:0f:21:81:35:03:c5:65:27:c0:a8:a7:8d:94:6b:42:
         53:e1:7d:b5:0c:0f:ed:9e:32:a3:ec:25:63:86:da:f9:33:d3:
         d2:0b:52:0d:ad:66:50:86:61:e4:ea:9c:2a:00:cd:23:7a:bd:
         4d:e5:16:73:f7:1b:7d:4a:5b:5f:ec:bc:86:c3:53:d0:11:6e:
         cd:d7:20:2a:34:83:a3:8b:cb:32:a1:f4:86:47:fd:19:c6:61:
         7b:4d:f7:1c:9f:c0:a4:3f:7d:46:09:7c:52:a3:27:c2:ee:89:
         31:eb:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:40 2025 by rpki-client