Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2cfe721-a212-30ec-9318-5bc72bedcdd0.roa
File:                     d2cfe721-a212-30ec-9318-5bc72bedcdd0.roa (raw, json)
Hash identifier:          Wo1GOIBLz9o8ssEydCv80YNWA6+/CDXsUkrQrf4GIMo=
Subject key identifier:   6A:D0:FF:83:A2:04:1B:28:78:4F:B7:7C:58:FA:94:20:AE:15:64:CC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F9492EA2BF2F79DF9DF000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2cfe721-a212-30ec-9318-5bc72bedcdd0.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        73.77.42.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:49:2e:a2:bf:2f:79:df:9d:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=a7cc0dea-0cac-49b1-9989-1fa2faa38ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:e8:be:6b:01:aa:05:4d:f3:8c:77:38:b2:
                    ef:a8:f5:ba:29:f0:11:b5:e9:56:36:97:8b:66:77:
                    72:1e:d7:a4:3a:23:94:46:4a:81:df:b8:05:c8:20:
                    fb:00:6f:76:32:20:c7:9b:e6:9c:d0:f8:99:73:bb:
                    e4:5e:79:28:67:72:7a:a3:60:01:52:96:b2:0d:26:
                    c8:90:53:d0:40:82:b4:67:5e:10:6d:bb:7b:74:60:
                    cf:1e:80:0a:5a:76:79:4c:ac:38:17:a5:c4:6e:dd:
                    4c:d2:2b:13:4d:ff:39:6a:96:46:97:16:92:b0:f2:
                    40:ac:fb:58:38:0d:75:0b:20:a9:34:bd:57:77:3d:
                    4a:72:52:1e:eb:32:4f:37:ee:53:d0:01:06:79:05:
                    48:2a:e1:cd:53:97:be:19:cc:81:fd:cd:25:7f:d5:
                    34:8e:c3:ea:f3:0e:ac:22:71:28:f8:49:44:39:cb:
                    40:f3:08:58:95:6f:91:50:01:b6:06:dd:f8:52:ee:
                    7d:af:d7:9d:86:6c:5e:d3:3f:5b:28:68:fd:f6:14:
                    09:91:0e:96:97:eb:2b:58:40:e5:19:7c:5c:dd:01:
                    34:43:a4:87:c1:6b:de:d6:95:df:9c:32:b7:17:4a:
                    62:94:12:09:95:ce:7e:88:35:24:de:56:5d:10:c3:
                    a1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D0:FF:83:A2:04:1B:28:78:4F:B7:7C:58:FA:94:20:AE:15:64:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2cfe721-a212-30ec-9318-5bc72bedcdd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.77.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:92:0d:21:18:36:8f:42:75:3f:f7:38:ea:7e:5a:35:d7:5e:
         1b:8f:1a:d2:b9:8a:8d:18:70:3b:1f:27:30:14:a5:ad:e9:d7:
         cb:be:6b:dd:ad:13:4f:17:b8:96:96:8c:86:c5:de:80:6a:7e:
         65:d8:c3:e9:16:36:47:db:b7:fe:ec:7d:c2:0a:90:7f:2a:75:
         70:3d:c6:75:d3:ea:0f:68:d5:9c:36:2b:1a:b6:1c:a0:c8:bc:
         68:85:6f:cf:f6:7b:d8:e5:2a:6e:de:67:84:36:b7:0c:6c:ef:
         d0:3f:39:96:b1:43:d6:88:72:ce:39:7f:29:50:7b:7f:80:26:
         a3:93:d7:ab:5d:e9:c9:14:de:05:15:40:1b:51:05:60:b2:90:
         9f:e9:45:6e:56:16:e9:ad:60:fd:77:7a:4f:f2:49:b5:fe:38:
         ae:23:b4:07:e4:f0:16:e2:be:62:1d:53:3b:bf:6c:5a:9c:c5:
         f6:c5:b0:60:cd:ca:d4:e6:a7:14:eb:02:63:0e:c1:eb:9e:77:
         5c:18:a9:e8:d8:0b:5d:e4:f6:67:4c:2f:98:c5:5c:63:04:e0:
         8e:85:36:4f:85:2e:82:6d:6c:38:c1:32:dc:97:1c:27:ea:7f:
         35:0d:9c:a7:4a:6b:93:66:9a:74:22:80:1f:cf:b7:e7:47:7c:
         e9:c3:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:10:41 2025 by rpki-client