Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcbce7da-3e8a-37ce-96f9-ad192367f9c8.roa
File:                     fcbce7da-3e8a-37ce-96f9-ad192367f9c8.roa (raw, json)
Hash identifier:          utGl4+j1P1UWgz5dGoDq7SRorGQYFgvKkf3ucunfmLk=
Subject key identifier:   1F:B1:E9:27:02:59:09:10:0D:99:86:71:93:87:E1:69:92:56:1F:1C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8B52CFFB95F5BF5596000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcbce7da-3e8a-37ce-96f9-ad192367f9c8.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        73.69.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:b5:2c:ff:b9:5f:5b:f5:59:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=3bdf6387-d645-44ba-a322-841da75da250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:32:fa:9e:57:29:c7:88:db:4e:ad:bc:9f:42:
                    02:d1:1f:03:87:52:44:c5:0d:08:bc:5d:49:75:63:
                    1d:89:1a:21:ac:31:6c:20:52:64:00:77:4a:a1:aa:
                    4f:15:95:01:3d:05:1a:1a:7b:b3:fa:56:25:e1:ce:
                    2a:d4:1d:55:4e:02:09:89:f4:63:8c:ff:5b:82:68:
                    f9:63:0b:b5:2b:0b:f2:2f:1d:14:9c:7f:4a:00:5a:
                    10:e7:7f:26:03:f1:d9:8f:78:a2:87:55:c4:67:94:
                    06:89:4f:57:e8:b3:c2:3d:a7:c3:22:4e:ad:67:6b:
                    8c:a6:f5:4d:41:eb:97:94:42:ff:f8:3c:93:32:97:
                    e9:26:ca:28:0f:cf:ff:15:0d:d5:aa:7d:e2:b3:a7:
                    5c:a3:07:68:0e:02:1e:8d:77:2f:ed:9d:66:d4:72:
                    a2:e1:47:24:30:72:00:91:bd:b0:11:f2:a4:b1:c2:
                    99:0a:fc:b2:35:e0:7a:09:f4:22:1e:9d:fc:1d:6a:
                    02:04:50:59:8a:d7:39:d5:9f:0f:16:76:2f:93:ef:
                    2c:8d:20:77:fe:bb:de:4f:3a:e6:4d:a6:09:89:ba:
                    a0:36:ff:a3:25:48:64:47:ff:f8:79:53:90:94:4e:
                    f6:7f:b0:94:a1:86:66:b8:84:4c:0a:81:a7:88:06:
                    90:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B1:E9:27:02:59:09:10:0D:99:86:71:93:87:E1:69:92:56:1F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcbce7da-3e8a-37ce-96f9-ad192367f9c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.69.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a0:06:31:ce:e1:01:a2:bd:ad:21:f7:2b:00:0a:1a:6a:02:
         c2:f6:af:91:b0:4d:d3:ef:50:51:7e:bb:83:7a:cb:f5:a1:67:
         14:74:e4:0b:bb:ae:df:4f:be:d0:66:17:47:62:e5:a8:1a:b7:
         13:12:73:d4:63:a4:00:c7:17:32:e4:2d:1b:f7:c1:01:1b:e7:
         0c:c4:ae:da:8b:8c:45:02:c6:8a:bb:4b:1a:da:25:9e:23:70:
         87:01:97:f8:0f:34:ff:b3:ca:ac:68:d9:e9:43:54:67:c4:a2:
         a8:e8:d1:89:43:a8:b8:09:fd:5f:9c:07:e0:36:d4:33:bc:6c:
         4f:60:71:3c:73:a3:3d:7c:23:44:60:a1:fa:65:12:3a:46:7b:
         3a:fa:64:21:92:3c:94:a2:94:c5:91:8f:68:5b:ef:2e:1b:e5:
         54:e8:1c:c6:1f:63:b1:88:77:61:ef:78:9e:65:48:ab:15:e2:
         04:63:81:c0:39:e5:f6:fc:20:b3:a5:29:b8:fe:b8:92:35:73:
         e1:e0:d6:4a:5b:81:c1:ea:72:92:c1:5b:37:0e:70:c9:b2:1c:
         0a:08:e8:5b:36:b9:d8:e9:f1:e5:b1:3f:56:89:c5:b8:67:5a:
         cf:a3:24:f8:19:cc:f7:79:73:75:08:ef:87:9b:93:9c:ce:d6:
         38:68:ee:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:34 2025 by rpki-client