Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48d3606d-9868-3ef9-83be-96af5d438665.roa
File:                     48d3606d-9868-3ef9-83be-96af5d438665.roa (raw, json)
Hash identifier:          tJyUCiVyMIDNmANZ+25eskBLR4vd8Egaj871UmaZM8g=
Subject key identifier:   AA:3F:BC:63:E4:3C:80:7B:A8:55:00:93:29:A1:A9:30:1E:E8:03:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143E98608AAA99AE9E32C4E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48d3606d-9868-3ef9-83be-96af5d438665.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.4.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3e:98:60:8a:aa:99:ae:9e:32:c4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=159760b1-d48f-4d53-be64-7a88a9318741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a3:85:ab:2e:26:4c:a2:85:6f:6b:58:20:55:
                    1e:db:f1:60:e0:4c:7f:07:1f:79:6d:15:52:46:33:
                    b7:eb:d6:16:9c:50:70:d0:a2:0e:08:85:78:33:2e:
                    85:df:fc:14:96:4a:bf:ca:87:b1:4a:80:00:2e:a1:
                    da:6c:b2:3a:ed:97:96:06:d6:5e:8e:34:a8:2a:a5:
                    57:23:9f:4d:04:d3:b0:cd:a9:68:26:a1:9f:74:56:
                    05:d9:ca:38:cd:53:92:16:5b:20:b9:ca:3e:0d:8c:
                    d2:5e:82:16:e1:47:ce:8a:cc:76:40:9b:9e:09:85:
                    75:cd:c3:17:18:28:70:02:88:37:97:b6:93:4a:b7:
                    79:c9:9a:d9:a3:28:7e:90:b3:af:ca:0e:27:f1:c4:
                    75:36:80:0f:6f:60:95:25:fd:60:2a:b5:4e:be:4a:
                    0e:75:5f:2f:73:fb:15:4d:0c:48:e3:3b:a3:40:1c:
                    09:57:21:f0:c4:24:c6:7a:cc:1b:63:55:0d:d9:2c:
                    6f:eb:55:63:28:4e:a0:86:2b:04:a6:00:05:c7:2c:
                    28:ba:f4:2f:c1:bb:45:15:27:f4:29:ac:a6:6e:f2:
                    fc:cb:49:7c:ec:80:d3:15:91:e1:72:ff:c2:0c:23:
                    82:76:28:93:00:c7:68:7e:4e:d2:b7:8c:e7:a1:23:
                    36:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3F:BC:63:E4:3C:80:7B:A8:55:00:93:29:A1:A9:30:1E:E8:03:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48d3606d-9868-3ef9-83be-96af5d438665.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.4.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:13:7b:1c:ea:40:3f:40:62:8d:c1:5a:2c:56:69:d8:8d:6b:
         86:3d:55:48:34:1a:58:b0:fe:f4:8f:ce:72:94:47:89:90:b6:
         b6:42:2f:bd:70:1b:75:04:c7:bc:cb:f5:b4:ba:f1:13:bf:9b:
         01:bc:bb:af:8e:cd:3f:72:eb:1c:ba:d7:da:4f:8b:c6:a4:01:
         5f:fa:85:81:93:93:cf:d7:e1:42:ef:d1:73:83:a0:32:db:b8:
         7a:c2:50:5c:0c:1a:1e:dc:73:f6:9a:68:12:83:62:2a:fe:49:
         79:ca:61:62:41:62:7c:65:ba:b3:48:53:ca:37:61:7c:ee:62:
         d0:34:44:cf:cf:0d:47:01:8b:9b:ce:d6:b7:73:41:a0:61:25:
         3a:d0:bc:2e:16:c9:b3:6c:76:b0:2a:c7:61:ab:d7:fe:e8:04:
         f7:b7:03:8d:fa:7d:00:37:e8:7e:5e:6d:96:af:f4:85:e9:b4:
         32:0e:dd:dd:df:f1:fe:06:5a:2c:33:4d:1c:61:d8:55:90:69:
         55:ab:90:24:91:e5:63:f1:3d:07:ef:54:e7:fa:dc:a1:58:d7:
         0f:7d:da:71:25:c4:f5:60:8e:a0:2a:a6:5d:e9:18:7d:50:a6:
         9d:a2:fd:76:4c:6c:cd:be:af:20:8c:12:bc:8e:c5:1c:80:73:
         ab:4f:6d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:12:04 2025 by rpki-client