Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3d69339-d35f-353e-aefa-115b9a0f4f3a.roa
File:                     f3d69339-d35f-353e-aefa-115b9a0f4f3a.roa (raw, json)
Hash identifier:          m3mi/nBuGqZGDRuajFy966O4ei/FssNcM6UUYD9yECo=
Subject key identifier:   DD:B8:09:F6:F0:C8:EC:2B:5D:5D:F6:7E:6E:49:D9:2E:61:A5:F7:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C1D021A4103DD76487570
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3d69339-d35f-353e-aefa-115b9a0f4f3a.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33667
IP address blocks:        71.27.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:1d:02:1a:41:03:dd:76:48:75:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=f20ac0d1-6fad-40d0-a535-d3e07481db1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:11:f6:56:57:3b:e3:18:6f:ec:b4:bb:bb:a7:
                    d6:c0:bc:fd:1d:59:5f:7c:17:cd:86:40:08:db:e4:
                    4a:4c:aa:63:24:1a:d7:aa:00:31:b7:96:f7:e3:48:
                    c0:8b:e4:85:16:c4:d2:07:ab:06:79:83:1c:23:86:
                    22:92:e0:0d:32:40:73:ed:ae:40:94:7d:c3:e4:c1:
                    70:5c:fe:75:22:a7:35:2b:29:32:3c:26:9d:97:ba:
                    5f:8f:ba:d1:d3:68:8f:b4:cd:37:05:12:d6:1f:7d:
                    71:f2:03:60:f2:ff:7c:db:34:44:1f:93:7b:e8:ae:
                    6e:38:a9:6f:7d:8b:30:b8:8b:6e:61:d0:71:b1:a5:
                    a4:46:27:46:b4:28:e4:84:16:4f:85:34:64:57:24:
                    23:fb:b0:b1:67:88:05:04:f9:a4:16:74:46:b4:85:
                    44:98:ec:9b:07:79:30:02:d5:c7:31:ff:28:ed:94:
                    b3:39:14:09:d8:c2:9b:3c:40:46:59:08:33:82:7b:
                    7e:44:f8:f1:e8:df:6b:e5:e7:0c:a9:66:08:c7:c6:
                    7e:43:22:9f:0a:c2:95:55:ac:e6:55:ce:c6:bd:78:
                    9e:e7:cf:18:24:d2:45:10:d3:a0:e6:24:42:ed:e9:
                    fa:9b:0c:8c:cf:1a:67:9b:18:b6:45:70:0c:91:94:
                    c8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B8:09:F6:F0:C8:EC:2B:5D:5D:F6:7E:6E:49:D9:2E:61:A5:F7:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3d69339-d35f-353e-aefa-115b9a0f4f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.27.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:a4:a8:88:a9:79:db:80:46:76:a0:6e:57:fb:b1:2d:0b:27:
         19:59:c9:85:1a:a8:11:59:7e:ac:83:93:fd:c5:11:84:04:b2:
         5c:97:df:33:d2:88:32:3d:b9:7e:b0:4e:35:da:d1:65:c7:a5:
         1f:fe:1a:c7:0f:ec:e0:4d:58:ea:21:94:e5:f1:d1:2f:d6:a9:
         d9:fd:ce:5d:58:f0:9b:4a:57:80:73:6c:7d:10:9b:33:be:cc:
         89:cc:f3:28:95:04:ed:3d:0a:56:55:25:37:07:f2:f5:c0:f2:
         4a:03:6e:88:db:4c:f5:06:62:1f:fc:bc:fd:de:d0:be:8f:de:
         f4:81:f8:1e:ee:66:a3:55:d6:45:2d:4e:d6:8f:cf:fc:4b:b3:
         28:9a:6c:97:cc:a2:cc:d4:4b:9e:3a:d2:63:86:ba:18:6c:6d:
         c1:6b:05:3d:7a:25:a9:ee:19:56:a3:87:c0:85:c4:fa:b0:42:
         28:3b:23:b5:31:21:f8:dd:fe:3d:c8:dc:61:70:f5:fd:af:0d:
         2e:f8:b3:8b:96:09:2f:f1:ef:68:bd:17:50:ea:d7:70:13:b2:
         50:39:48:2b:bf:8e:fb:c8:78:1b:c4:a2:ea:87:db:17:1d:71:
         f6:3f:27:82:db:9f:d6:a6:96:94:30:42:45:0e:74:24:ee:8f:
         af:2b:84:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:54:26 2025 by rpki-client