Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea63ff3d-674d-3af3-ade5-836a77b985a1.roa
File:                     ea63ff3d-674d-3af3-ade5-836a77b985a1.roa (raw, json)
Hash identifier:          LG0fpQdsTOwRnHcJQmV00My5iIYyPqYb4ugDMD4f4lw=
Subject key identifier:   2C:F1:03:07:32:7F:5E:23:E1:33:E5:BA:53:CF:42:B9:7D:72:A5:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB17E5F97879B567CBCC7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea63ff3d-674d-3af3-ade5-836a77b985a1.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        71.198.224.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:7e:5f:97:87:9b:56:7c:bc:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=ea5a74d3-27a2-4d3d-8d0a-dd07a75db874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:74:73:29:87:4e:b7:c9:59:5e:ae:5f:07:
                    f1:09:00:0d:21:69:57:58:d9:e8:99:0e:a1:09:49:
                    31:2a:bc:f3:85:92:ce:b1:41:4a:ce:4e:6b:f4:5c:
                    08:99:82:79:bf:63:47:a0:74:22:58:25:33:6d:19:
                    e7:af:78:83:31:ce:f8:6a:5d:2c:82:26:33:9c:fd:
                    f6:15:a2:42:c5:55:6f:2e:f5:15:df:3b:65:2e:62:
                    01:40:a7:8e:3e:29:c1:90:17:2a:0c:12:2a:b0:d8:
                    4c:76:c0:b1:5e:e8:28:ed:20:e2:ae:bf:69:ef:82:
                    d5:e0:9c:c7:26:04:e7:7a:e7:95:cf:88:e5:b8:01:
                    4f:e5:02:9d:2f:fc:07:86:b5:2c:c9:2e:61:cc:83:
                    16:4a:7a:ef:cd:c1:91:4b:8e:ff:32:84:d5:49:ac:
                    1a:69:a2:b2:55:5b:f2:a5:80:96:4a:fa:a0:ec:87:
                    51:69:c2:73:aa:ff:51:12:a9:fd:57:e2:93:3d:0a:
                    05:93:89:84:c5:39:e4:6d:6c:0a:24:6c:d1:ce:ae:
                    bb:48:36:74:58:d6:f7:16:9f:9f:4e:aa:aa:7f:0b:
                    f1:4c:ea:a2:b2:3b:e6:74:15:78:52:61:4e:e4:0a:
                    ef:37:9f:b3:17:e5:70:fc:d3:25:73:01:d1:c6:2d:
                    77:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F1:03:07:32:7F:5E:23:E1:33:E5:BA:53:CF:42:B9:7D:72:A5:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea63ff3d-674d-3af3-ade5-836a77b985a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.198.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:44:8f:f5:f4:5b:32:83:09:99:a5:86:9f:eb:d1:96:90:c0:
         fb:b3:8d:9a:e0:ef:1e:8c:a8:7e:91:66:c9:0e:35:fc:d1:93:
         3e:8f:14:5b:2d:a2:89:9b:1e:fe:e9:6f:a3:55:77:1f:e9:52:
         3c:2a:12:ce:69:39:e3:e2:5e:13:d8:5d:d3:5c:c8:e4:8b:bc:
         01:db:70:61:dc:2f:43:cb:2e:14:d7:d0:1b:77:e0:4c:a0:06:
         15:eb:14:f1:44:b7:7a:35:87:ad:3e:d1:85:8f:58:5c:29:60:
         54:ec:b6:9e:fa:32:5b:1b:75:a2:a4:89:fd:39:eb:2c:9f:21:
         4f:1e:77:b2:c0:8b:e5:41:04:07:0e:9f:cf:ad:90:3d:1c:f1:
         b4:1b:1c:e2:f9:31:e7:c8:35:ff:af:7c:d8:6b:9a:b4:d3:12:
         19:68:16:e2:61:d7:ac:7f:25:4d:1a:90:34:2c:80:89:8b:43:
         2f:02:38:66:81:53:4c:fa:88:c1:e4:7c:ac:d7:60:9e:cb:b1:
         43:87:1f:fe:b4:88:ee:2b:8a:7b:93:17:9a:1f:05:e2:4a:0c:
         80:51:0b:c6:55:e6:67:bf:93:b0:d2:74:09:a5:cb:06:38:8a:
         0a:40:ab:2a:bf:e3:99:80:72:72:9c:10:64:19:11:60:42:00:
         ef:8b:7d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:14:56 2025 by rpki-client