Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b264e826-f455-3a7a-aefc-93a9d2fdac0c.roa
File:                     b264e826-f455-3a7a-aefc-93a9d2fdac0c.roa (raw, json)
Hash identifier:          HuDdczbQOyQAWbua1lHZO0diIg8dIiSODG5g9V7WSCM=
Subject key identifier:   EC:D3:8F:18:31:91:CC:D9:52:E6:E8:BB:30:67:FF:EB:69:17:F3:60
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAEB65ECC59ED52C6A0FE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b264e826-f455-3a7a-aefc-93a9d2fdac0c.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33660
IP address blocks:        76.149.144.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:b6:5e:cc:59:ed:52:c6:a0:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=3895074f-f93f-4901-b5cd-9ae14f83817c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:b4:19:c3:67:f7:c5:79:60:55:51:63:a6:
                    a2:25:7e:f6:3b:c7:71:41:6a:76:ce:1c:79:cf:58:
                    83:51:02:9c:b9:bc:9f:fa:ba:ee:f6:d5:59:0d:65:
                    e6:84:7e:2d:90:01:aa:89:ce:52:a7:26:3b:c9:8e:
                    c0:1e:d6:87:33:42:ed:52:61:ac:fa:f9:b8:69:21:
                    3a:c4:a3:c9:58:53:aa:2b:78:ea:ce:3c:6f:2c:28:
                    e0:1a:21:3b:b1:9d:87:93:98:4d:9a:5f:73:6f:54:
                    64:8c:a2:d9:bd:b1:03:a8:ff:4b:d2:a2:0b:c6:08:
                    1b:f8:55:d9:54:80:55:03:b9:bd:07:a2:d5:87:ae:
                    7f:19:13:3d:12:02:c7:77:6d:fc:6f:bf:d6:4f:eb:
                    9a:0a:b3:2d:a1:60:d3:ea:06:d9:35:8c:91:31:e2:
                    67:2f:ed:03:93:8b:b5:49:fe:52:81:a1:a5:43:99:
                    d2:59:b9:fb:bc:26:2b:77:ad:19:30:ea:a6:d7:eb:
                    de:29:65:f4:e6:e8:ac:80:28:38:f0:be:73:13:a0:
                    a5:14:00:cc:b2:93:81:1b:99:f4:3e:0e:12:48:c0:
                    7f:9e:e9:54:70:55:ed:bf:fd:f1:49:06:bc:21:9a:
                    a4:d0:83:92:f8:d4:10:3e:aa:cf:0f:09:ad:15:78:
                    8b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D3:8F:18:31:91:CC:D9:52:E6:E8:BB:30:67:FF:EB:69:17:F3:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b264e826-f455-3a7a-aefc-93a9d2fdac0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.149.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e9:26:87:af:ce:3e:a2:20:8c:d7:c2:4d:01:64:ff:fd:4f:
         e5:d6:65:49:af:86:4e:55:2e:3c:5c:d8:08:ce:4e:4e:c3:64:
         c8:08:4b:3b:5b:72:a4:4a:51:32:13:9d:81:77:ec:9e:0d:5d:
         cd:6c:88:7d:df:da:01:a5:d4:3f:cb:80:94:2c:ba:27:00:5c:
         9a:1c:f5:8d:e2:5f:15:d1:2e:5b:51:bc:c0:7a:b4:83:6d:6c:
         70:16:0f:33:44:00:b7:d1:2b:3f:10:a0:72:fd:74:fd:b1:9e:
         2b:62:fc:13:9e:c6:62:a6:ea:91:2c:54:13:27:6b:81:d8:17:
         09:56:c6:39:d1:2a:47:fa:39:e1:c3:a0:f8:53:5f:27:76:f9:
         3e:4d:a3:fc:7d:2e:3d:e0:1d:b6:1a:6d:f1:04:85:e7:73:98:
         00:26:18:fc:5a:26:28:d5:5f:36:cb:5a:64:14:b6:1d:9b:ff:
         79:38:7f:ca:c9:bd:8c:b3:e5:e6:c3:99:bc:aa:81:53:ad:71:
         49:f8:51:f0:16:0e:fa:6c:15:6d:85:22:73:ef:b9:73:2d:97:
         49:ae:22:17:a9:e7:8b:59:98:53:b4:76:78:8b:50:d1:fc:4a:
         f8:1a:12:c4:5b:1b:c2:d8:f2:5f:e5:79:92:6f:c3:5b:64:1c:
         b9:e6:c2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----