Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18b3235c-491a-3641-8704-26d6ccdceaab.roa
File:                     18b3235c-491a-3641-8704-26d6ccdceaab.roa (raw, json)
Hash identifier:          rVCIDytotXLeOin6lsl2qYalxQa6SuohVE9WtZzFFfk=
Subject key identifier:   E6:A2:56:B1:FF:76:87:55:17:04:D8:C6:43:E7:48:1A:E5:BB:F5:E0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1115D16713238685FC3A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18b3235c-491a-3641-8704-26d6ccdceaab.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        73.247.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:15:d1:67:13:23:86:85:fc:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=6d3fea58-7aec-4aaf-9e80-eb1644fa8dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:d5:d1:fa:58:f5:64:db:5e:02:c2:9e:52:
                    d4:64:8b:23:48:0b:58:80:fc:b0:c0:89:96:52:ff:
                    e3:18:8f:df:9c:3a:69:ab:de:a6:9d:38:94:13:b7:
                    49:ca:cd:19:8a:a3:12:03:78:74:73:7a:0c:1d:97:
                    55:ef:cd:02:bb:e4:cf:8d:f0:db:17:95:e8:c7:67:
                    11:3c:ea:91:e5:87:43:9f:aa:d1:84:f0:eb:ce:4c:
                    8f:f9:c8:c7:14:2c:18:52:eb:1f:b1:6f:2f:0c:59:
                    16:c7:77:b7:b0:69:92:1e:a5:29:40:d2:e1:4e:9d:
                    fc:18:a0:f3:29:96:e8:67:8c:10:43:1f:13:a9:8b:
                    0e:49:0a:6a:bb:07:fd:33:a9:71:73:6a:5a:f0:c5:
                    d9:fb:a0:fc:df:de:a7:aa:c2:9c:69:7e:8a:ed:f1:
                    07:27:bc:9b:76:b6:39:0b:d3:06:d6:9a:2a:f5:df:
                    07:52:64:c8:70:7b:f0:b5:16:8c:41:85:c3:38:9f:
                    51:4a:d0:c3:30:88:99:fa:d0:5c:02:ff:8b:e2:7d:
                    c5:de:58:cd:26:ff:c3:aa:e8:91:56:d2:43:b5:a2:
                    b7:e8:44:2b:97:30:8f:52:19:c0:69:04:fa:39:f0:
                    44:bf:13:7c:09:46:4e:c3:8b:3b:35:ef:a7:0d:66:
                    ab:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A2:56:B1:FF:76:87:55:17:04:D8:C6:43:E7:48:1A:E5:BB:F5:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18b3235c-491a-3641-8704-26d6ccdceaab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.247.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:e9:41:c5:66:1e:71:11:e2:23:2e:bf:a4:db:9e:af:7d:16:
         d1:73:d3:09:77:88:c7:f9:54:5f:f0:0a:2e:56:8e:1a:f7:cd:
         1d:c8:b1:44:fb:5c:c1:30:e2:8e:e3:b8:c5:09:e9:c4:2f:fd:
         cc:03:e3:0b:6b:72:ee:15:28:84:e6:a7:71:a1:21:91:13:b0:
         09:1f:6c:d3:93:c1:44:04:7d:b6:e4:9b:72:4e:f7:6d:80:05:
         39:e1:63:d7:28:a1:e0:d3:7b:4b:5a:79:2f:a6:c3:59:80:35:
         ca:0f:d7:45:ff:32:a9:d3:81:64:7b:3d:bf:8f:ed:af:89:bb:
         d8:74:c2:5e:a2:bb:40:a3:67:b5:8f:0c:51:dc:dc:92:0e:13:
         3a:b9:f0:6e:40:c1:7d:d5:37:42:98:2c:4f:9b:61:79:33:a8:
         61:0a:ed:79:fb:10:59:e6:c8:30:92:21:55:58:15:7d:5e:72:
         1b:bf:53:94:68:62:f8:e7:d4:52:5a:c4:31:48:e4:d6:9e:45:
         f4:cf:89:e4:31:b2:7c:8d:7a:cf:03:22:89:4e:59:a8:2c:39:
         5a:67:70:35:ec:11:83:02:f4:bf:eb:ab:6c:f6:87:6f:04:1e:
         b0:f4:e9:57:94:ea:92:10:f3:70:99:78:5f:3d:ed:bb:77:42:
         b2:fa:c9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:55:21 2025 by rpki-client