Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcd4b97b-a6d5-3adf-ad23-3c292c666c65.roa
File:                     dcd4b97b-a6d5-3adf-ad23-3c292c666c65.roa (raw, json)
Hash identifier:          y7wBrzJ8ac9FyzhnK/nN8n8IvenhJQ8Dd2T6MHNV53I=
Subject key identifier:   2F:64:79:EB:58:2B:F3:AF:CB:9F:00:5B:5D:B4:41:E9:E8:00:BF:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFB15E8E35C63DBD198640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcd4b97b-a6d5-3adf-ad23-3c292c666c65.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        76.136.152.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:b1:5e:8e:35:c6:3d:bd:19:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=02496ec4-c637-4f79-863c-7c737222cc70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:98:c4:31:e8:d3:a5:78:f7:c1:eb:5e:f7:
                    98:11:a5:51:45:71:74:f2:8b:5e:21:39:93:81:95:
                    7d:63:3b:72:6a:d9:17:c3:81:db:f7:50:ec:d5:64:
                    e2:66:a7:ea:dd:8e:a6:40:81:ac:93:a4:c6:25:45:
                    ec:ba:9b:72:54:0b:13:32:fa:86:d5:de:ad:f4:4b:
                    17:76:50:f8:ee:16:04:83:61:e0:da:49:69:19:d1:
                    a4:7f:ae:37:5d:36:34:62:a6:c7:3d:e0:0d:e1:c0:
                    ac:2d:a6:db:7a:84:01:c1:10:f5:c0:d0:ce:70:b7:
                    0d:3a:ec:03:35:34:4f:4d:c2:34:e3:54:e8:68:57:
                    dd:c8:0f:65:10:c9:e0:f7:f8:08:ae:cf:44:d5:be:
                    90:aa:7f:b9:bf:d6:fd:a4:22:36:ba:74:9b:d6:dc:
                    65:31:09:c6:fb:7a:d2:7a:1c:8d:82:a9:30:d4:58:
                    3f:72:5f:64:77:23:6d:eb:f7:59:3d:17:f9:76:6e:
                    1c:0d:97:d0:f8:03:34:d6:8b:59:8a:50:57:07:7e:
                    00:e9:70:2c:8b:e4:53:3a:42:0b:9f:c8:38:33:4d:
                    af:7e:0a:7e:bc:fe:0d:a9:7e:2d:4d:2c:ec:b9:8d:
                    a2:9d:67:91:ff:ff:88:cf:a2:5d:9e:bd:77:e7:8d:
                    c7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:64:79:EB:58:2B:F3:AF:CB:9F:00:5B:5D:B4:41:E9:E8:00:BF:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcd4b97b-a6d5-3adf-ad23-3c292c666c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.136.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ba:ef:47:1e:95:1b:0f:8e:21:08:31:84:79:04:a2:e9:cf:
         cf:16:54:03:a8:cc:d4:ec:6e:e2:81:f0:81:20:b9:16:fe:a9:
         3d:7a:4f:24:d3:ef:56:ed:6a:b0:a6:36:9f:c2:69:f7:83:84:
         62:2d:fb:dc:59:71:7b:ac:76:f2:21:3d:ae:f7:31:43:85:d2:
         bc:3a:e3:b6:50:22:16:7c:fa:b0:9a:f7:90:d0:2c:ae:fa:26:
         d8:5c:fe:58:0d:62:2d:e1:a1:a2:53:d4:b2:d8:d6:38:aa:59:
         90:08:83:16:b5:8e:d8:de:bd:24:7e:cb:1d:a8:24:73:6b:7d:
         73:51:d6:f3:a6:d4:80:fc:60:16:e4:8b:ed:49:c5:44:35:48:
         13:de:a3:94:2e:3f:d9:a1:7e:15:c1:dd:3f:3b:b0:10:9d:79:
         ec:d9:f8:ac:43:85:96:a0:02:68:d0:1d:69:90:7d:fc:3d:e7:
         19:84:a4:71:74:d5:23:ba:bd:b4:42:f4:9f:29:1d:32:aa:fd:
         34:94:30:d8:10:71:f8:12:f8:b6:9d:b3:ca:7d:d5:6b:45:18:
         e0:db:da:18:14:01:b0:40:d0:b4:90:47:16:ad:5f:d2:02:53:
         a2:24:59:20:ae:2c:c8:16:3a:23:88:8f:38:cb:c1:93:37:f7:
         e0:d8:d7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----