Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ff84b3c-bd15-30af-a5b1-100f3c40fd3d.roa
File:                     0ff84b3c-bd15-30af-a5b1-100f3c40fd3d.roa (raw, json)
Hash identifier:          5DFs+8H90/e9LzbImb1x1KTKOAgJI5W5cNnLOBzBy/I=
Subject key identifier:   BE:5D:09:A5:EC:54:73:1E:DF:1E:80:79:5C:4E:95:F4:70:F5:08:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C120970863042B4D14D5180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ff84b3c-bd15-30af-a5b1-100f3c40fd3d.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33659
IP address blocks:        73.195.173.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:09:70:86:30:42:b4:d1:4d:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=2d2e4a1a-914c-458a-822c-e82e9e914ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d0:c0:ef:4d:bd:bb:93:5d:7e:38:bd:73:89:
                    3e:5f:b5:3c:32:af:be:b7:55:73:b7:66:3a:d9:31:
                    1b:03:3c:89:3e:62:5c:d9:00:e4:6c:4e:48:5c:c7:
                    02:81:e5:8f:5d:6c:9a:87:aa:29:32:cc:6d:95:a6:
                    a2:e4:07:4b:5f:71:95:59:36:e5:7d:c4:e6:de:c8:
                    21:c2:5b:f6:b3:61:51:f8:c3:d7:b3:a4:7e:05:ac:
                    49:c6:43:00:01:67:5f:6d:75:7b:fa:93:6b:43:97:
                    17:f3:99:ce:ec:ba:7d:c0:e5:70:f7:6e:0f:c8:1d:
                    f7:35:d0:8c:fd:bd:e9:f5:3e:77:fa:5a:af:37:9e:
                    0b:3c:59:b0:3b:b8:cf:c9:19:79:2d:e0:39:b5:44:
                    4f:fe:3d:e4:07:72:bb:a9:4c:72:3b:fb:fc:b7:3e:
                    9f:73:68:5b:bb:f3:64:9b:5e:c4:b0:6b:8c:f1:f3:
                    3c:7a:a9:71:95:f0:e2:52:12:5a:ae:27:a6:c1:ff:
                    24:e0:03:94:98:e7:f6:aa:97:63:e2:e8:98:3c:ac:
                    fb:49:e0:32:b1:e2:d4:71:30:1d:ea:90:23:cd:c6:
                    58:6a:ee:a7:75:08:b8:ef:58:81:cd:52:fc:7e:10:
                    24:a0:d7:3b:cd:9f:9e:b8:69:ab:fe:ac:da:d4:1b:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5D:09:A5:EC:54:73:1E:DF:1E:80:79:5C:4E:95:F4:70:F5:08:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ff84b3c-bd15-30af-a5b1-100f3c40fd3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.195.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:aa:70:e5:72:6e:19:c1:53:6a:4b:25:5c:ca:0f:fc:c9:11:
         91:c3:fe:cc:89:00:d3:ca:b1:33:2f:ca:8f:27:06:0c:f1:6b:
         ba:c4:8b:de:6d:3b:3f:67:1b:0e:67:d5:a2:7a:47:96:3a:dc:
         e2:4a:6c:7b:53:da:b2:6d:57:ea:d3:e7:67:0b:3d:e7:70:c4:
         41:09:34:d1:14:29:1e:9f:6f:0e:be:41:2f:12:08:39:d8:58:
         73:95:c7:7b:cf:e0:85:68:3f:d8:3b:c4:f1:e8:49:46:43:f0:
         bc:3c:07:64:7e:37:f8:ba:bf:dc:e7:6c:6d:e9:60:c0:9e:ef:
         70:43:74:96:d1:0c:da:af:1d:79:23:6b:5c:f4:4e:f2:7b:cd:
         d6:d9:a0:3a:c6:d6:36:b0:a8:27:de:ff:42:f3:ca:a6:cf:cd:
         4e:06:6a:2d:b4:a0:b9:7e:45:f3:e0:21:3e:73:a4:92:99:d5:
         b4:40:34:97:40:9a:1e:ed:c9:b3:c9:39:b0:fd:2c:13:33:86:
         f8:fe:90:61:bf:eb:87:d2:bf:24:02:f8:02:52:57:01:3a:e9:
         62:2c:bd:d0:5e:1e:48:cf:35:c1:c8:e1:3d:22:c8:a8:2f:08:
         1c:e7:c5:c7:3f:f3:84:a5:e8:db:7f:f1:63:60:4d:64:c9:7f:
         78:d8:1e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:05 2025 by rpki-client