Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e881750-a47d-30ba-9bb1-46468ec561ed.roa
File:                     7e881750-a47d-30ba-9bb1-46468ec561ed.roa (raw, json)
Hash identifier:          hcdGSj6cjHTzIxsV+IKTsFIHiBP8/lBlSBsRl1lUurY=
Subject key identifier:   DE:27:73:49:21:7B:AD:5C:80:D9:66:BE:76:40:5D:3B:2D:2C:6D:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1A1BA882C9FE9DC968B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e881750-a47d-30ba-9bb1-46468ec561ed.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        73.252.216.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:a1:ba:88:2c:9f:e9:dc:96:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=91ce00df-75d2-4d61-bde6-369b38604b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:47:e0:ba:87:50:d3:88:68:9e:65:e4:85:
                    16:7c:88:a2:22:1b:c3:46:28:b2:ac:e0:7d:af:11:
                    9e:31:c4:58:e8:47:db:92:a8:ec:cf:41:5b:e3:67:
                    51:2f:47:bd:e3:b4:1b:2b:49:e3:07:a7:be:a4:bf:
                    2a:c7:62:05:99:ce:55:96:1a:f8:22:33:93:2b:04:
                    3d:31:56:3b:59:74:c0:ab:a5:55:e6:de:c4:ae:04:
                    76:0a:9a:f5:33:e6:b8:16:03:8a:fc:19:1f:8d:9c:
                    92:b6:68:43:39:32:81:3e:29:aa:97:68:2e:5c:4d:
                    64:72:d6:64:49:f9:63:0b:bf:e2:5c:00:0e:26:ba:
                    bf:4a:cf:89:1f:cd:84:5a:db:96:8b:63:4c:46:db:
                    40:33:4b:af:f7:da:34:d7:16:09:26:00:da:ee:a9:
                    71:3b:86:b3:5b:87:3d:e9:99:c9:e8:40:5e:e2:3d:
                    43:60:02:f5:05:cf:9d:a5:ad:61:89:60:70:b1:61:
                    57:97:b7:67:b4:98:32:7c:e8:7b:a6:0c:06:6e:91:
                    59:f3:77:cc:42:b1:8c:c2:e2:db:e7:16:5e:8a:cf:
                    1e:a7:98:8e:3e:b9:63:b3:e1:54:04:b3:47:8d:26:
                    58:7e:79:d1:25:ff:d9:69:01:c1:fb:3e:b9:9a:96:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:27:73:49:21:7B:AD:5C:80:D9:66:BE:76:40:5D:3B:2D:2C:6D:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e881750-a47d-30ba-9bb1-46468ec561ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.252.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:da:09:2f:31:0b:f0:9d:0f:e6:45:f4:fd:93:25:1d:eb:99:
         0e:78:b2:58:b1:67:cc:3d:66:f8:8b:97:66:d3:f3:9c:56:ce:
         ef:7b:f5:c7:f2:f5:c5:56:d5:ab:d3:b7:77:30:dc:05:b0:4a:
         2b:de:d0:8d:d8:f1:36:3f:9c:c4:d4:0f:08:95:98:76:8e:0a:
         e9:a1:07:06:b5:ff:fc:3e:0a:cd:65:e1:66:38:80:7f:53:33:
         e9:20:f6:42:10:f5:c5:9a:c2:54:0e:ec:c2:29:b2:06:a0:11:
         e8:b8:a8:19:c1:5d:7e:df:15:fe:1a:7e:3f:55:25:75:0c:89:
         ad:03:ba:cd:4b:2f:32:70:14:d8:ec:4a:8d:c0:fb:f6:18:99:
         0f:8c:78:94:50:32:0b:a4:83:ab:55:ba:44:dc:f2:54:9e:29:
         33:82:f5:9a:34:ca:87:c6:9b:c0:67:c1:59:27:53:97:e6:18:
         db:8d:c6:dc:f3:18:08:99:b0:69:0b:34:e0:dd:e5:b0:2a:93:
         42:f0:9b:2b:14:8b:14:2f:e3:4d:33:f7:60:dc:cb:ff:30:b2:
         d0:0f:ed:49:e1:39:05:f3:ae:40:ca:b9:75:0e:e0:a4:0b:a4:
         10:39:2e:79:2b:84:28:73:27:b3:c0:39:5e:54:17:e1:10:2a:
         97:b9:f9:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssaG6iCyf6dyWiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
OTFjZTAwZGYtNzVkMi00ZDYxLWJkZTYtMzY5YjM4NjA0YjEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo5H4LqHUNOIaJ5l5IUWfIiiIhvDRiiyrOB9
rxGeMcRY6Efbkqjsz0Fb42dRL0e947QbK0njB6e+pL8qx2IFmc5Vlhr4IjOTKwQ9
MVY7WXTAq6VV5t7ErgR2Cpr1M+a4FgOK/BkfjZyStmhDOTKBPimql2guXE1kctZk
SfljC7/iXAAOJrq/Ss+JH82EWtuWi2NMRttAM0uv99o01xYJJgDa7qlxO4azW4c9
6ZnJ6EBe4j1DYAL1Bc+dpa1hiWBwsWFXl7dntJgyfOh7pgwGbpFZ83fMQrGMwuLb
5xZeis8ep5iOPrljs+FUBLNHjSZYfnnRJf/ZaQHB+z65mpZQAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4nc0khe61cgNlmvnZAXTstLG1IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2U4ODE3NTAtYTQ3ZC0z
MGJhLTliYjEtNDY0NjhlYzU2MWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfzYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANbaCS8xC/CdD+ZF9P2TJR3rmQ54slixZ8w9ZviLl2bT85xWzu979cfy
9cVW1avTt3cw3AWwSive0I3Y8TY/nMTUDwiVmHaOCumhBwa1//w+Cs1l4WY4gH9T
M+kg9kIQ9cWawlQO7MIpsgagEei4qBnBXX7fFf4afj9VJXUMia0Dus1LLzJwFNjs
So3A+/YYmQ+MeJRQMgukg6tVukTc8lSeKTOC9Zo0yofGm8BnwVknU5fmGNuNxtzz
GAiZsGkLNODd5bAqk0LwmysUixQv400z92Dcy/8wstAP7UnhOQXzrkDKuXUO4KQL
pBA5LnkrhChzJ7PAOV5UF+EQKpe5+Y4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:22 2025 by rpki-client