Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18362c41-d99e-3d4f-9d91-f85920b7b44d.roa
File:                     18362c41-d99e-3d4f-9d91-f85920b7b44d.roa (raw, json)
Hash identifier:          ONGsQO7h6eafhm/FermhviX1EO7Py6n/waYhquRgR8Q=
Subject key identifier:   7D:01:54:90:37:B9:12:67:04:5C:86:58:39:D5:E9:49:0D:90:7E:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1113E3935CF6C1498ED280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18362c41-d99e-3d4f-9d91-f85920b7b44d.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        73.246.84.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:13:e3:93:5c:f6:c1:49:8e:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=4da798aa-ac9f-4315-bb50-9d7e4385f77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:1e:5b:dd:7b:50:97:59:c2:0e:04:f5:f2:
                    8d:d9:d6:0b:92:0e:d8:5a:6b:8a:67:5e:2b:8e:3e:
                    c5:65:14:3c:03:fa:62:9a:dc:53:a0:43:07:38:e5:
                    7c:48:03:6c:93:10:7f:cd:82:13:17:23:35:25:55:
                    33:df:24:4b:c0:3b:df:eb:dc:b0:8d:d5:b6:23:59:
                    a6:2a:8b:20:78:cc:91:60:dc:e3:d5:cb:ca:22:15:
                    50:f7:15:e9:72:93:54:56:46:49:c1:64:43:5a:f0:
                    6f:8a:89:e7:9d:bd:8c:26:16:62:48:ca:82:6f:8f:
                    60:66:c9:de:48:bb:15:5b:72:0b:99:8b:3a:17:5f:
                    93:be:99:cd:0a:b3:fc:94:c1:06:be:93:85:5f:fa:
                    87:dd:98:28:a7:ef:89:c0:e4:54:63:b5:8f:3f:1a:
                    4a:b8:6f:f9:c0:43:44:20:ab:a1:ed:4c:84:34:68:
                    5c:52:3f:ba:70:93:a4:1e:55:32:17:ed:b5:3a:18:
                    94:b1:64:20:fe:61:63:2e:4e:a1:fd:6d:92:d5:e4:
                    b7:b5:50:42:c3:3b:cf:32:b4:da:27:3e:0e:d3:e7:
                    58:21:90:59:81:1c:ec:65:43:87:57:00:c5:4f:c8:
                    b6:1d:c1:73:75:5f:68:c7:c7:f8:b5:93:4f:e1:67:
                    2d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:01:54:90:37:B9:12:67:04:5C:86:58:39:D5:E9:49:0D:90:7E:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18362c41-d99e-3d4f-9d91-f85920b7b44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.246.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:8f:55:17:16:32:c5:52:5c:93:b1:65:fe:2b:20:82:54:a2:
         45:fa:ba:bb:b2:25:a4:10:46:b5:7a:00:67:87:a5:ac:d5:e4:
         31:5a:71:f9:a8:87:2c:c6:c5:d2:e5:e6:19:8e:3d:2c:8a:52:
         34:52:c0:ab:2e:de:67:66:28:58:50:b1:9b:ad:9d:14:bf:f8:
         41:dc:9a:6c:c5:09:b1:cb:be:de:b1:8c:f1:da:76:c9:6d:11:
         01:42:1f:de:b0:f8:d5:53:66:23:c7:31:43:47:29:34:76:40:
         04:14:6f:2b:bf:4c:72:7c:87:b4:69:09:7a:3a:c9:79:b1:c1:
         65:de:4e:88:e9:88:93:b5:c2:ea:a0:21:7b:1e:03:ac:18:a7:
         24:9f:c7:3a:3e:ed:28:d5:00:8f:2a:fc:52:42:49:d6:ad:f9:
         c1:44:51:24:a0:4b:6a:13:5c:c3:ee:48:17:de:2a:5c:7e:c2:
         9b:07:d1:a2:6b:f2:1a:77:5f:27:18:1c:44:15:92:5f:61:91:
         75:e6:f1:d9:e2:ac:89:36:ef:41:58:78:5c:fb:2e:dd:b1:c2:
         a5:77:0e:dd:2b:a1:0a:5b:06:7b:75:c6:db:a3:10:ff:11:fa:
         69:75:6a:7b:79:b6:0e:32:04:e5:f6:70:de:17:8d:dc:ce:30:
         13:96:10:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMERPjk1z2wUmO0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NGRhNzk4YWEtYWM5Zi00MzE1LWJiNTAtOWQ3ZTQzODVmNzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkAeW917UJdZwg4E9fKN2dYLkg7YWmuKZ14r
jj7FZRQ8A/pimtxToEMHOOV8SANskxB/zYITFyM1JVUz3yRLwDvf69ywjdW2I1mm
KosgeMyRYNzj1cvKIhVQ9xXpcpNUVkZJwWRDWvBvionnnb2MJhZiSMqCb49gZsne
SLsVW3ILmYs6F1+TvpnNCrP8lMEGvpOFX/qH3Zgop++JwORUY7WPPxpKuG/5wENE
IKuh7UyENGhcUj+6cJOkHlUyF+21OhiUsWQg/mFjLk6h/W2S1eS3tVBCwzvPMrTa
Jz4O0+dYIZBZgRzsZUOHVwDFT8i2HcFzdV9ox8f4tZNP4WctJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH0BVJA3uRJnBFyGWDnV6UkNkH7BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTgzNjJjNDEtZDk5ZS0z
ZDRmLTlkOTEtZjg1OTIwYjdiNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfZUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOPVRcWMsVSXJOxZf4rIIJUokX6uruyJaQQRrV6AGeHpazV5DFacfmo
hyzGxdLl5hmOPSyKUjRSwKsu3mdmKFhQsZutnRS/+EHcmmzFCbHLvt6xjPHadslt
EQFCH96w+NVTZiPHMUNHKTR2QAQUbyu/THJ8h7RpCXo6yXmxwWXeTojpiJO1wuqg
IXseA6wYpySfxzo+7SjVAI8q/FJCSdat+cFEUSSgS2oTXMPuSBfeKlx+wpsH0aJr
8hp3XycYHEQVkl9hkXXm8dnirIk270FYeFz7Lt2xwqV3Dt0roQpbBnt1xtujEP8R
+ml1ant5tg4yBOX2cN4XjdzOMBOWED8=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:47 2025 by rpki-client