Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04b9704b-adee-3a70-87d5-0f5fbbedd1a8.roa
File:                     04b9704b-adee-3a70-87d5-0f5fbbedd1a8.roa (raw, json)
Hash identifier:          KWyX8nlmtHp5WwH8hqfVsz7EWvPCfUhF2NAZdMV3zcE=
Subject key identifier:   6A:C8:60:65:47:09:FD:D9:58:63:93:4D:44:3C:47:D3:9A:D7:A1:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143D2E2D6D3F25B86D285A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04b9704b-adee-3a70-87d5-0f5fbbedd1a8.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33490
IP address blocks:        73.164.250.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3d:2e:2d:6d:3f:25:b8:6d:28:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=61c7c2e1-c706-4f1e-9c7c-fd0b8d01c14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:47:c8:4b:7e:bd:10:8f:1d:2a:0b:73:71:ec:
                    c7:90:f8:95:a7:e1:7b:47:f4:7d:7d:52:29:e9:97:
                    47:e2:7b:c6:45:52:77:25:49:4e:8c:0f:75:d3:9b:
                    57:28:a5:e0:a6:4e:2c:71:0a:8e:92:2c:be:35:6c:
                    8e:69:6d:6c:d0:f1:e0:0a:08:f4:ab:d9:01:9e:16:
                    57:91:f3:76:e6:15:d2:89:d3:c5:6b:8c:3b:79:40:
                    ce:86:bb:9d:d8:f1:4a:d3:0f:7b:86:6f:ec:00:ab:
                    ab:54:a9:67:cb:dd:81:eb:74:70:cd:0b:c3:50:8c:
                    69:41:92:cb:90:bc:0c:58:65:f5:c6:73:64:1a:ed:
                    53:ca:fd:e6:33:2d:0d:56:1e:df:69:1b:32:24:41:
                    57:d9:1c:c3:eb:20:3d:63:fd:9a:a8:78:97:98:6f:
                    e4:92:3d:41:f3:6b:6f:ed:3c:81:d9:e7:74:0a:b1:
                    46:fd:34:72:0f:ef:3f:22:a2:09:89:df:fa:a1:50:
                    78:a7:74:9f:a8:4f:dc:89:e0:dd:4d:3e:a6:ca:91:
                    43:07:65:f1:cc:f4:b6:60:8c:64:6c:ed:b9:aa:c3:
                    de:f1:97:62:01:72:ef:98:52:5b:ba:41:c4:59:6e:
                    ae:f5:79:f9:a3:03:08:5a:39:ce:c9:ca:44:d8:58:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C8:60:65:47:09:FD:D9:58:63:93:4D:44:3C:47:D3:9A:D7:A1:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04b9704b-adee-3a70-87d5-0f5fbbedd1a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.164.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f7:62:2c:d0:24:19:33:b8:02:0d:57:7e:54:7b:85:a9:ce:
         b9:38:33:6c:16:ac:6d:34:44:8c:9b:f9:81:75:c1:ad:0a:4b:
         6e:f0:f0:c0:ac:88:d5:a3:83:ca:81:2d:da:ee:bb:71:4c:d1:
         04:2b:3c:4c:fd:9f:ec:1a:38:9a:c1:dc:85:4a:2e:c8:ef:c6:
         5f:a0:01:03:85:4b:e8:f9:1e:05:26:61:0b:0e:1d:91:2a:34:
         17:cd:5b:16:6f:df:44:c4:2b:02:5d:19:71:93:dc:60:79:b8:
         d2:09:8f:00:1d:4b:10:fc:7b:bc:eb:ca:f4:03:5d:82:0b:3d:
         a6:03:45:0b:0e:9c:a3:25:6e:c2:0d:dd:c2:38:fb:72:c2:f5:
         bd:da:f2:56:41:60:55:f9:ca:24:34:fb:82:eb:97:dd:40:b1:
         74:05:e5:0e:a4:7e:60:32:aa:57:da:d7:08:71:22:76:ca:ec:
         65:77:87:e5:fd:50:84:20:de:4e:ee:51:72:d1:d2:0c:9d:37:
         9a:03:2a:97:9c:d5:4a:a7:7e:de:58:82:5d:6d:9d:4f:88:90:
         5d:26:f2:ba:7b:4d:b3:b5:31:b3:7d:5e:da:69:a8:10:35:41:
         51:0f:7d:2c:65:a1:83:6f:78:4b:42:1e:f8:13:30:fa:72:dc:
         1c:9c:e5:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPS4tbT8luG0oWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NjFjN2MyZTEtYzcwNi00ZjFlLTljN2MtZmQwYjhkMDFjMTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUfIS369EI8dKgtzcezHkPiVp+F7R/R9fVIp
6ZdH4nvGRVJ3JUlOjA9105tXKKXgpk4scQqOkiy+NWyOaW1s0PHgCgj0q9kBnhZX
kfN25hXSidPFa4w7eUDOhrud2PFK0w97hm/sAKurVKlny92B63RwzQvDUIxpQZLL
kLwMWGX1xnNkGu1Tyv3mMy0NVh7faRsyJEFX2RzD6yA9Y/2aqHiXmG/kkj1B82tv
7TyB2ed0CrFG/TRyD+8/IqIJid/6oVB4p3SfqE/cieDdTT6mypFDB2XxzPS2YIxk
bO25qsPe8ZdiAXLvmFJbukHEWW6u9Xn5owMIWjnOycpE2FhK6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGrIYGVHCf3ZWGOTTUQ8R9Oa16FJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDRiOTcwNGItYWRlZS0z
YTcwLTg3ZDUtMGY1ZmJiZWRkMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaT6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAb3YizQJBkzuAINV35Ue4Wpzrk4M2wWrG00RIyb+YF1wa0KS27w8MCs
iNWjg8qBLdruu3FM0QQrPEz9n+waOJrB3IVKLsjvxl+gAQOFS+j5HgUmYQsOHZEq
NBfNWxZv30TEKwJdGXGT3GB5uNIJjwAdSxD8e7zryvQDXYILPaYDRQsOnKMlbsIN
3cI4+3LC9b3a8lZBYFX5yiQ0+4Lrl91AsXQF5Q6kfmAyqlfa1whxInbK7GV3h+X9
UIQg3k7uUXLR0gydN5oDKpec1Uqnft5Ygl1tnU+IkF0m8rp7TbO1MbN9XtppqBA1
QVEPfSxloYNveEtCHvgTMPpy3Byc5TQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:14:29 2025 by rpki-client