Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b99629d-14b5-3211-98b4-72d10c8bcd27.roa
File:                     2b99629d-14b5-3211-98b4-72d10c8bcd27.roa (raw, json)
Hash identifier:          aZ58cJqMU1nB33BVOw9YI2b/z4AgSfJootDavtua2i4=
Subject key identifier:   8D:80:4D:42:1D:84:0B:E6:77:AC:8A:20:14:62:96:3D:18:FE:48:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C12BD4562667DCF88514600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b99629d-14b5-3211-98b4-72d10c8bcd27.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        73.36.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:bd:45:62:66:7d:cf:88:51:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=ae73ae6b-7628-42b8-af59-47f76ee258b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:40:98:e0:ee:ac:fd:7b:76:e5:e6:e2:a4:2a:
                    be:ad:34:7c:1d:26:39:6e:d9:08:71:3f:e8:93:3f:
                    8c:e5:42:b5:9f:ee:5e:6a:96:50:30:f5:63:78:87:
                    fe:b2:e3:e9:d6:1e:ba:62:c1:af:86:64:96:38:d4:
                    c4:84:c8:42:4b:8b:1a:40:f1:7f:b0:3b:38:fe:4d:
                    60:45:d4:e2:75:92:07:af:8c:e6:c4:79:11:41:cd:
                    24:4e:c0:f5:55:96:aa:83:74:a7:cb:70:8a:41:1a:
                    51:7f:17:d0:c7:27:67:dc:75:c1:0b:db:fa:39:d8:
                    1e:28:56:6e:46:91:2a:d3:03:c9:72:89:be:20:b9:
                    d5:a1:e8:67:d0:fd:6d:68:06:df:09:de:97:2f:80:
                    a1:65:57:57:b8:cd:89:d8:a0:0f:ff:cc:91:78:52:
                    48:5b:71:4c:8f:49:41:e1:73:79:6c:bf:6a:17:65:
                    5a:03:53:1d:88:c3:99:b9:2f:0f:72:28:e4:b2:51:
                    fb:a4:36:09:0d:ba:a7:27:46:8a:4c:e3:7c:1a:38:
                    2c:c6:9b:72:31:82:88:a8:2c:83:9e:e5:36:ed:19:
                    6b:14:a2:ce:d0:82:27:6c:73:da:d0:55:a4:f1:c3:
                    6f:c0:e4:41:06:c9:2d:37:8c:93:80:0e:e8:58:99:
                    0c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:80:4D:42:1D:84:0B:E6:77:AC:8A:20:14:62:96:3D:18:FE:48:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b99629d-14b5-3211-98b4-72d10c8bcd27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.36.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:c1:48:cc:b0:00:ba:9a:98:cd:2c:c3:79:9f:83:50:78:7f:
         9b:d9:a4:2d:f1:98:62:d7:f4:97:74:35:9a:8a:25:f0:70:c1:
         3b:a6:7d:f8:79:af:6c:a6:d6:61:52:ae:49:8a:48:e4:a9:cd:
         80:f9:02:76:e4:e7:b3:83:71:83:61:8d:e4:6f:41:2d:7a:68:
         d3:0b:4c:b8:62:c0:b9:6f:ac:61:fd:1e:aa:d9:a0:e6:79:c8:
         e5:a0:c9:27:fe:50:17:fc:6e:b5:3c:1b:df:b2:3d:48:8f:09:
         f5:67:b8:55:22:32:12:94:3c:e0:53:bf:95:0c:a7:0b:33:f6:
         79:08:f4:2e:85:4c:6f:de:15:14:30:53:50:2c:ef:5c:78:76:
         29:4f:22:a8:63:93:7d:54:d8:5f:b6:e9:2c:8e:d3:67:85:b9:
         81:6c:8c:df:4e:e6:a8:6d:66:9e:e3:f3:50:61:1a:56:3c:6c:
         91:f3:a9:12:3b:07:98:c8:09:51:ff:74:66:be:dd:f5:1f:b3:
         cd:65:54:46:ca:25:b4:51:bb:7d:e0:96:c6:87:2a:38:04:e5:
         c5:80:86:3b:d1:ed:14:16:18:34:8b:77:c6:f4:d2:7b:56:a9:
         78:0b:91:b7:4c:6e:23:f0:26:52:53:32:2d:cc:7d:b8:0c:3e:
         fe:c0:36:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----