Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a76e7566-33f5-3207-8e12-795b5f04834a.roa
File:                     a76e7566-33f5-3207-8e12-795b5f04834a.roa (raw, json)
Hash identifier:          w6VliilYNq04Ld/B4QOmE8cfMfwn0HDOc4tktYKyncM=
Subject key identifier:   95:A4:F0:10:AB:BE:D9:BC:B2:B9:E1:C5:2E:CF:0D:64:C9:35:90:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F94C660F566B70EB695A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a76e7566-33f5-3207-8e12-795b5f04834a.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        76.142.56.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:4c:66:0f:56:6b:70:eb:69:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=a279758a-a1ab-4bf1-97b5-d34bf8c5dcde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:fe:eb:4e:5a:c0:92:18:f4:d2:c3:1f:28:
                    54:5e:95:16:ec:97:72:96:98:46:36:d8:82:cc:11:
                    a4:78:e2:aa:27:ed:46:34:f3:0c:0b:0d:44:3b:cf:
                    d1:49:4a:56:de:ec:04:33:59:9f:43:22:a4:e8:2f:
                    02:77:72:e3:48:50:24:90:6a:05:ce:c5:e7:14:76:
                    f4:a5:4b:af:b0:16:01:34:4b:83:e9:53:42:6e:e4:
                    eb:39:21:b4:88:5f:26:d8:2b:83:6a:fd:2f:57:e9:
                    3f:0d:ec:18:df:a9:06:d2:e3:b9:bd:59:e0:f9:84:
                    30:65:e2:07:d1:fb:36:24:05:17:98:81:10:72:d7:
                    35:15:f6:b9:be:d7:c7:6d:e0:76:57:f2:13:75:94:
                    a9:85:33:c7:a2:c7:9e:96:8d:ea:b2:f4:6c:b7:06:
                    09:11:3a:3f:f2:30:9e:3d:1f:39:27:39:8c:5f:7e:
                    f6:f7:22:9a:e3:19:37:d1:05:d9:9a:00:98:0f:be:
                    55:de:f0:d4:94:4d:c1:c9:a7:40:75:66:3a:ce:a5:
                    5d:a0:e9:d5:b0:57:61:28:fb:78:24:99:ac:5b:72:
                    7b:63:d3:80:c9:ca:a9:5e:4a:01:70:f0:47:a4:f6:
                    97:e6:25:12:62:a3:db:b8:6b:86:21:ba:48:84:49:
                    50:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A4:F0:10:AB:BE:D9:BC:B2:B9:E1:C5:2E:CF:0D:64:C9:35:90:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a76e7566-33f5-3207-8e12-795b5f04834a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.142.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c6:c3:cb:3f:01:88:64:e5:fa:56:93:33:7b:d3:42:85:5c:
         d5:59:aa:38:37:3c:40:d8:0b:a2:fc:0c:8a:5d:02:65:f5:36:
         d5:4b:9a:04:ea:d4:d7:6d:66:79:6b:48:a0:49:8a:b0:5c:72:
         f7:0d:e9:2a:fe:29:b2:1b:d3:36:2f:d9:11:25:72:c6:86:2d:
         41:22:c3:81:31:09:9b:88:5b:71:d1:71:d5:87:c9:b6:5b:c9:
         63:95:99:83:5f:88:75:8d:77:2f:44:f2:0d:f6:4c:45:a9:e6:
         e0:ef:30:c7:fb:37:fc:a3:ba:67:14:d5:fb:26:49:42:47:be:
         c1:76:45:f9:f0:25:f6:14:47:82:42:00:4b:f7:a3:7c:3a:2b:
         9f:78:ea:4b:38:ad:2e:43:2c:a4:43:a6:2a:e7:87:07:10:03:
         4b:2c:ab:83:be:47:d3:c3:2b:4f:72:f9:51:df:ae:06:9e:d8:
         b0:f1:bf:ae:62:75:11:d0:bb:2c:15:ee:50:3c:69:f2:5f:d7:
         ec:89:35:6a:54:29:16:e6:0c:bd:0d:46:a2:4b:39:14:f2:ca:
         51:9e:6e:a6:78:54:72:95:06:ce:e6:74:53:54:71:5d:a4:f5:
         6f:9c:12:16:4f:a5:52:c2:c4:c8:47:52:e9:33:f3:c4:6d:58:
         a8:04:a7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:25:41 2025 by rpki-client