Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1eeae8c0-197a-39c4-b279-2fa721e4d07a.roa
File:                     1eeae8c0-197a-39c4-b279-2fa721e4d07a.roa (raw, json)
Hash identifier:          Yz9OAfVD/6soz3qROvnZwHsjBrNYr24fmOt1hWlIzKE=
Subject key identifier:   A8:F3:2C:A5:23:BB:35:47:43:45:21:45:BE:48:BA:58:0E:15:66:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C10A43CB95892F4DDFEC0E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1eeae8c0-197a-39c4-b279-2fa721e4d07a.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        73.30.162.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:a4:3c:b9:58:92:f4:dd:fe:c0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=a017549d-078f-407e-ac04-e1f44c0bea02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:07:46:b6:61:86:8b:7b:da:70:3f:c7:3c:8e:
                    ec:1c:a3:1e:06:56:2b:86:bf:2b:5b:5c:32:c1:15:
                    eb:69:96:1e:44:94:0d:bb:b7:f9:8b:da:43:e5:1b:
                    82:2d:8c:a8:fc:2f:98:f5:c0:6b:47:56:41:01:06:
                    25:a4:00:be:f7:48:b1:81:05:f1:43:80:f3:f0:ca:
                    79:57:a9:27:63:33:9d:c3:6b:f1:37:20:6b:32:df:
                    a3:fd:18:9a:b2:b5:63:17:81:0b:22:7f:eb:b9:9a:
                    24:59:e5:f5:c6:1d:16:5a:9b:cb:be:b8:a1:3e:af:
                    59:60:f3:a3:f5:a1:25:60:74:bc:fb:31:d5:6f:bc:
                    f0:90:a5:a4:0a:6c:82:fd:3f:dc:16:bb:ba:3e:e1:
                    5d:63:32:d8:2b:05:38:c3:2f:86:a5:14:d8:e1:42:
                    1a:08:d7:cf:1b:92:32:8c:a9:68:a5:3c:78:0b:c4:
                    58:ef:fb:ef:f8:d0:bb:0d:23:90:43:d6:94:72:3a:
                    1e:75:4c:14:9d:d7:47:d5:b4:ac:a1:6f:80:f2:6e:
                    58:11:bd:77:ea:0e:2f:36:c6:41:d8:be:12:59:35:
                    72:29:ab:e7:16:ad:b5:c9:50:79:a5:52:06:7e:a2:
                    0c:07:78:4e:22:0d:17:ba:c2:6f:7b:21:56:25:c6:
                    5a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F3:2C:A5:23:BB:35:47:43:45:21:45:BE:48:BA:58:0E:15:66:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1eeae8c0-197a-39c4-b279-2fa721e4d07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.30.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:c5:5a:05:a4:41:8c:25:18:91:da:35:ae:98:44:a9:0f:
         0e:f6:69:f2:68:25:bf:17:28:74:ad:38:34:73:e4:cb:47:60:
         ee:b1:df:1d:25:91:70:0c:85:f6:d8:41:8b:0c:e0:88:98:9c:
         ba:67:0a:80:35:84:7d:27:97:8a:31:5d:72:2c:19:94:0b:e8:
         98:a4:c3:ec:f0:7e:01:bf:2e:2c:41:44:5f:34:56:dd:5e:94:
         0e:d5:23:3d:db:7c:7c:c0:d8:40:d7:65:7d:94:2c:5b:a8:ec:
         d7:43:62:4d:c4:22:44:3a:01:1f:fd:46:fb:9f:90:17:57:26:
         94:de:c3:9c:2f:88:74:49:d9:60:20:0c:a1:da:e0:aa:dc:05:
         2d:7c:74:0e:5e:64:91:f4:e3:cf:5d:39:cc:56:2c:29:6f:2c:
         22:91:d4:38:94:c8:49:f1:64:9c:02:a6:06:ff:a7:8d:70:ac:
         03:d7:fa:96:83:2f:8c:a6:c2:44:f0:05:97:93:15:b3:ff:fe:
         96:94:26:c8:73:be:d9:e6:e7:73:56:68:4e:1b:49:43:a2:37:
         e6:31:5c:30:3d:de:56:72:1b:60:72:12:3e:1d:a4:f1:fe:3e:
         28:af:78:89:aa:05:cb:44:4f:b5:a1:d9:a2:46:d5:1f:a5:3b:
         67:41:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:21 2025 by rpki-client