Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/351d837f-9561-3dbf-bb69-1863c2c5e162.roa
File:                     351d837f-9561-3dbf-bb69-1863c2c5e162.roa (raw, json)
Hash identifier:          eWOoYLEhsp64MvX2njcwYInn64o7/f1u0hcb/+JYrcg=
Subject key identifier:   BE:96:94:86:A6:50:D7:B9:35:86:A8:96:23:A1:9D:61:0A:00:51:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B18868C3A5E3DFE16B480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/351d837f-9561-3dbf-bb69-1863c2c5e162.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.253.8.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:18:86:8c:3a:5e:3d:fe:16:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=d7e333ac-0325-461b-b7df-6be439984af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:97:98:86:b1:d3:09:23:37:ec:f7:e6:75:
                    5d:18:af:bb:ac:14:7b:31:a2:0c:f4:77:bd:6f:62:
                    3a:03:bd:6e:f5:ae:63:6a:01:17:ec:92:59:fe:f1:
                    53:a2:6c:2e:74:1e:5f:63:15:47:ae:88:65:93:08:
                    0a:e8:fb:40:16:1f:44:92:e7:3b:1e:49:14:04:82:
                    10:31:3d:ab:3a:11:d3:10:44:d1:00:3c:eb:57:80:
                    c8:3e:e7:7c:e1:01:cb:d7:4b:cf:87:94:bf:9d:66:
                    29:a7:be:7b:9a:d6:be:da:8d:cc:7f:92:3a:50:ac:
                    5b:0f:07:ae:64:09:13:8e:a9:b5:38:16:7c:49:e9:
                    f6:6a:77:b2:42:2f:c5:ea:8b:ca:7e:80:5f:41:8d:
                    07:37:76:e7:f0:36:44:df:eb:54:3f:5c:f3:1b:fd:
                    25:c1:b5:5d:2f:f1:b7:2f:ed:2e:24:3e:90:e8:8a:
                    c7:4c:f7:e8:64:1f:16:d2:50:b1:26:e7:7e:c7:bb:
                    7c:bc:a7:fc:ee:83:34:be:55:0f:72:ee:9d:56:d3:
                    65:9d:12:42:4c:51:b8:00:d0:95:e3:86:7a:d5:ee:
                    c3:a7:7d:df:a2:57:f7:ac:db:6e:5b:94:e9:5a:fb:
                    2e:ff:4a:cc:8b:4c:8d:a0:2f:88:c1:50:2e:41:23:
                    67:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:96:94:86:A6:50:D7:B9:35:86:A8:96:23:A1:9D:61:0A:00:51:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/351d837f-9561-3dbf-bb69-1863c2c5e162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.253.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:74:4f:5f:5b:fc:cf:d3:93:7c:5c:3b:d0:f8:8d:f0:05:bf:
         f7:51:5d:1d:5e:3e:1e:8b:f4:c9:49:e1:58:06:53:83:15:e4:
         55:c4:84:0b:9f:f9:09:07:b7:75:ae:ce:a0:41:13:eb:dc:ec:
         d5:50:3b:8d:cc:6a:94:bf:d6:91:45:50:e4:a6:2c:07:73:cd:
         88:9a:ea:bf:58:5a:5f:05:09:3b:5f:ee:df:16:09:ce:91:e5:
         39:a3:06:3e:2d:2e:2b:eb:96:26:88:be:f7:96:16:fc:92:be:
         f2:cd:de:99:8b:9e:9f:a1:34:d9:13:ff:23:87:49:91:6f:1b:
         4f:73:dc:5e:02:c0:7c:88:7a:91:ee:d8:ad:51:fc:76:6b:bc:
         b2:73:43:2b:bf:08:6e:98:83:c3:31:1a:e8:e0:2f:4b:54:15:
         47:19:65:0b:ba:d2:51:ba:54:a8:0b:ea:df:da:d6:01:0e:b4:
         ce:ec:75:5c:16:d7:38:a5:3d:a5:16:5d:6a:d4:1c:72:62:8c:
         72:73:89:64:76:e1:ff:34:d6:44:bb:c8:94:24:b0:46:40:ee:
         6d:0d:8f:e1:4f:c4:c2:50:76:c0:50:9b:61:60:d3:57:cd:0a:
         3f:19:00:5a:66:5e:61:dd:8e:63:d5:ac:0e:5c:04:e2:55:9f:
         c4:0d:ca:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOxiGjDpePf4WtIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZDdlMzMzYWMtMDMyNS00NjFiLWI3ZGYtNmJlNDM5OTg0YWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22OXmIax0wkjN+z35nVdGK+7rBR7MaIM9He9
b2I6A71u9a5jagEX7JJZ/vFTomwudB5fYxVHrohlkwgK6PtAFh9Ekuc7HkkUBIIQ
MT2rOhHTEETRADzrV4DIPud84QHL10vPh5S/nWYpp757mta+2o3Mf5I6UKxbDweu
ZAkTjqm1OBZ8Sen2aneyQi/F6ovKfoBfQY0HN3bn8DZE3+tUP1zzG/0lwbVdL/G3
L+0uJD6Q6IrHTPfoZB8W0lCxJud+x7t8vKf87oM0vlUPcu6dVtNlnRJCTFG4ANCV
44Z61e7Dp33folf3rNtuW5TpWvsu/0rMi0yNoC+IwVAuQSNnlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6WlIamUNe5NYaoliOhnWEKAFE2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzUxZDgzN2YtOTU2MS0z
ZGJmLWJiNjktMTg2M2MyYzVlMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSf0IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANV0T19b/M/Tk3xcO9D4jfAFv/dRXR1ePh6L9MlJ4VgGU4MV5FXEhAuf
+QkHt3WuzqBBE+vc7NVQO43MapS/1pFFUOSmLAdzzYia6r9YWl8FCTtf7t8WCc6R
5TmjBj4tLivrliaIvveWFvySvvLN3pmLnp+hNNkT/yOHSZFvG09z3F4CwHyIepHu
2K1R/HZrvLJzQyu/CG6Yg8MxGujgL0tUFUcZZQu60lG6VKgL6t/a1gEOtM7sdVwW
1zilPaUWXWrUHHJijHJziWR24f801kS7yJQksEZA7m0Nj+FPxMJQdsBQm2Fg01fN
Cj8ZAFpmXmHdjmPVrA5cBOJVn8QNyrg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:05:57 2025 by rpki-client