Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416d3be8-534f-302a-8872-651f1cf4f5e4.roa
File:                     416d3be8-534f-302a-8872-651f1cf4f5e4.roa (raw, json)
Hash identifier:          jCMqvzXXrB093U38zgpY3K/NkApce3D0nNNEiFrEh+Y=
Subject key identifier:   9C:36:C5:F9:87:C3:E1:37:B3:44:3D:F8:26:B6:8F:F9:6C:46:4F:41
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DA19EE5E26E35D3658D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416d3be8-534f-302a-8872-651f1cf4f5e4.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     7015
IP address blocks:        73.227.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:a1:9e:e5:e2:6e:35:d3:65:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=e9eb7737-8784-40c6-b6c7-11836aca92bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:07:91:ef:1c:78:6a:b6:f8:5d:9a:d4:49:
                    99:0c:b2:c3:88:50:28:f3:2e:73:d4:fe:c2:7e:4a:
                    04:22:1b:1a:1d:d6:0b:34:7d:30:f9:5b:83:ca:c0:
                    c2:1b:69:cf:2d:e0:e5:a3:be:49:85:04:65:2b:3c:
                    94:4d:88:e2:88:52:fc:69:e8:60:d8:c3:93:5f:4b:
                    0a:8f:78:e0:10:8b:f7:9f:39:5e:35:e0:1d:eb:dd:
                    08:2a:e5:4f:99:96:77:90:0e:77:8e:93:91:48:e5:
                    2a:23:6d:70:2e:6e:01:be:6f:2c:9b:5d:15:0b:ef:
                    8c:69:f5:2b:98:ef:d8:10:3c:95:93:0e:f4:56:85:
                    b0:4a:a1:78:df:ed:aa:00:da:47:22:45:9b:15:af:
                    f6:8a:5e:0e:8e:58:c9:f1:41:c7:92:c0:30:9b:ff:
                    6c:fc:69:5b:0b:13:65:40:4a:c3:ea:9f:94:14:2b:
                    85:9f:43:a4:8c:86:69:11:8c:67:ff:ae:24:29:db:
                    87:3f:d5:29:fa:f2:bd:39:8c:8c:f4:67:99:d8:a6:
                    ea:10:64:88:99:ab:db:93:86:64:06:53:75:cb:32:
                    ec:b2:d5:e0:07:f7:e0:fe:a4:45:8e:08:dc:f1:6c:
                    e0:e2:c3:f2:58:a5:74:1e:b0:2e:57:50:88:71:6e:
                    73:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:36:C5:F9:87:C3:E1:37:B3:44:3D:F8:26:B6:8F:F9:6C:46:4F:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416d3be8-534f-302a-8872-651f1cf4f5e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.227.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:86:cc:ce:85:ed:13:3c:4c:bb:25:93:4b:62:b6:49:03:9c:
         b0:92:53:16:60:b5:47:81:eb:4b:96:1e:cd:16:cb:35:a9:fb:
         16:9f:eb:76:1d:4d:31:73:cc:a3:56:6b:e4:04:b4:dc:f2:a2:
         f8:79:9c:75:d4:03:71:7e:ad:8b:87:e5:80:1a:8a:e5:28:e5:
         7d:0e:12:b2:b0:a5:28:b1:9d:ae:34:39:14:50:5a:8c:74:19:
         c4:0d:06:9c:ef:dc:a0:ad:3b:70:b5:ea:ec:97:ca:83:cf:83:
         1f:8f:b7:4d:0d:f3:65:cd:98:74:0d:f2:52:2c:f7:9f:fa:df:
         1a:b0:e1:ee:27:d1:05:20:51:73:8e:22:e0:51:d0:de:a0:c7:
         c9:3a:02:8a:52:13:51:85:4b:03:74:e6:98:f8:62:11:07:ce:
         45:de:eb:f4:a7:02:13:84:06:72:3e:69:cf:20:dc:46:c8:be:
         a8:2b:02:96:ea:c4:db:a8:94:f9:d7:73:bc:f8:d8:bb:f4:d1:
         37:6e:73:a8:31:96:65:23:b8:04:cb:7b:56:45:ed:c2:e4:cb:
         e4:b2:27:0a:48:e2:ab:7d:29:d4:4c:9d:72:f6:64:31:05:76:
         9c:5d:ef:e3:73:f7:8b:57:0f:7d:92:fe:11:20:93:e2:3a:a7:
         8a:f0:f8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----