Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e15dfee1-6665-3d75-81e5-560c63205099.roa
File:                     e15dfee1-6665-3d75-81e5-560c63205099.roa (raw, json)
Hash identifier:          Nll263iYkfEOVQN7LJ2mFRdRg6gC2+af3dJSWuQRI6U=
Subject key identifier:   E3:EF:69:9A:F9:DB:1A:4A:64:46:FA:ED:72:26:EF:21:D5:8A:BD:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6BE270B25596656B6EE380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e15dfee1-6665-3d75-81e5-560c63205099.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33489
IP address blocks:        73.224.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:e2:70:b2:55:96:65:6b:6e:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=7e0ca7e8-3fb4-473a-9769-95c44ca98a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:62:35:89:56:3d:cf:07:65:a9:4b:3d:bb:48:
                    41:8d:cc:f6:b1:bd:f4:29:b9:3f:0b:ab:a4:69:ac:
                    f2:92:7e:f4:ae:fc:e3:a0:7a:31:c6:b1:5c:60:ea:
                    08:94:b3:6a:5a:ec:7e:d7:82:dc:37:8a:e1:21:ad:
                    3c:df:8a:56:98:f3:8b:e5:08:90:32:f4:6a:b8:83:
                    2a:ee:b1:63:46:14:f6:12:7a:26:1a:a0:e4:a7:3f:
                    8d:54:f4:dc:e1:55:5b:52:36:53:41:fc:42:6d:d4:
                    1e:82:fd:13:d9:27:f9:5e:fe:6b:e7:bc:ae:3c:48:
                    a9:8c:64:02:ea:20:28:a2:ca:da:4e:f9:9d:ca:e4:
                    42:70:d0:c7:5c:3f:c6:7d:87:8c:af:58:58:70:85:
                    3b:55:37:4a:1b:d2:86:7d:fe:25:b2:69:75:d2:60:
                    87:36:6e:a4:71:16:f4:bd:c5:99:41:a6:9a:b4:fd:
                    b4:e9:85:e0:68:e3:67:1b:6f:d2:e4:2a:51:90:97:
                    62:4d:68:c4:aa:aa:08:2f:e2:a1:8e:51:e5:68:1f:
                    f4:2d:f4:d9:8e:00:79:9c:54:47:01:a2:6d:84:17:
                    ad:44:1f:75:77:55:44:de:de:79:c2:d3:bb:47:9b:
                    e1:66:37:c2:00:31:f9:d5:f6:74:a0:e9:d4:2c:4e:
                    d4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EF:69:9A:F9:DB:1A:4A:64:46:FA:ED:72:26:EF:21:D5:8A:BD:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e15dfee1-6665-3d75-81e5-560c63205099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.224.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:39:71:f8:fb:9b:2a:83:0b:8d:d8:21:d9:8b:01:f3:bc:4d:
         c1:22:7b:ac:2b:b9:91:47:e5:b3:07:ca:12:64:1a:be:a8:0b:
         b8:bb:6d:dd:b0:99:90:66:1f:c7:28:5a:60:63:17:88:2d:a9:
         3e:16:e3:cd:a8:4a:c5:b0:ed:0f:02:84:34:83:02:db:e3:59:
         c4:f4:57:26:79:a9:47:c9:d4:46:39:c2:02:b3:34:07:a5:f3:
         e4:5f:fd:68:39:dd:e3:43:31:12:98:b3:e1:28:c2:69:f9:f5:
         d3:46:90:f6:c6:bb:36:f2:69:1a:49:0b:ef:c5:65:7b:3e:5a:
         46:b8:ae:7a:71:74:29:01:35:94:f9:1f:85:bb:01:e9:ae:6f:
         a4:30:26:c2:3a:fe:69:48:34:a8:20:a8:6d:7f:d5:86:0b:7a:
         57:dc:8f:df:ae:89:58:ef:a2:c9:c2:cf:08:49:03:f6:25:07:
         bf:27:36:e9:db:6e:54:39:59:99:f9:76:da:1b:f4:7d:58:6a:
         ca:03:e8:25:b2:34:ae:d2:1e:ed:e2:2d:42:77:ed:7b:2f:43:
         46:fa:6a:51:30:ef:e7:5b:86:3f:bb:51:6c:1e:25:3e:5d:6b:
         2e:bd:21:08:0b:fb:5a:bb:8f:dd:a4:07:df:78:f6:6b:8f:7c:
         2f:cb:cb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:27:24 2025 by rpki-client