Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dd0031d-c18c-32dc-a1fa-c4fbf78569ed.roa
File:                     4dd0031d-c18c-32dc-a1fa-c4fbf78569ed.roa (raw, json)
Hash identifier:          SYhkb83DVdIjtdmj7YvLoQj51LYAOUB2l3WSiyz5B1k=
Subject key identifier:   D4:AB:F8:64:21:87:AF:67:44:FB:0D:04:6A:00:3D:35:0D:D5:F2:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AB1C25C5CAA110758B680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dd0031d-c18c-32dc-a1fa-c4fbf78569ed.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33490
IP address blocks:        73.67.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:b1:c2:5c:5c:aa:11:07:58:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=5690ee14-8cfb-47d2-8a6c-2f07ec03b5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1b:02:03:43:96:16:bf:4e:a0:b6:76:78:3c:
                    72:2e:4c:1a:39:f7:be:a0:53:6d:3e:cd:09:1b:e6:
                    3c:f9:36:0a:97:ee:49:eb:49:1d:22:89:d4:d5:e2:
                    97:3b:1e:8f:a3:04:7f:64:50:2c:98:31:41:3e:66:
                    d7:0c:fd:cf:64:8a:e8:d6:3d:f6:51:ff:82:fa:cf:
                    35:7d:c7:17:9c:6c:78:85:49:e3:32:b4:f9:25:e3:
                    07:f5:ff:12:18:56:e0:5e:a5:00:08:59:bd:dc:52:
                    4b:ce:a6:f2:16:38:63:ec:ad:66:aa:fe:7a:00:fd:
                    03:51:08:e4:68:40:61:f7:66:6c:2b:44:8e:df:44:
                    4c:71:b4:ec:b7:11:fb:83:78:69:80:05:35:8d:e0:
                    00:2e:1c:f9:2b:4a:59:39:56:2a:13:2d:10:f3:02:
                    07:f5:a9:b2:e9:73:8e:1b:82:2a:d6:53:5b:69:06:
                    f8:ff:2c:57:14:73:ca:b6:42:63:6e:9c:52:b5:13:
                    d5:f2:dd:e8:f8:a7:7d:96:4b:5e:91:54:9d:c0:e8:
                    e7:16:3e:2e:85:b8:2c:f9:9b:c6:84:64:34:6a:a6:
                    69:9a:25:e4:b6:30:9d:d7:dd:9e:25:6f:f6:de:0a:
                    44:cf:34:cc:30:d5:35:ec:ed:3c:b5:04:a1:f7:94:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AB:F8:64:21:87:AF:67:44:FB:0D:04:6A:00:3D:35:0D:D5:F2:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dd0031d-c18c-32dc-a1fa-c4fbf78569ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.67.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f2:6a:e5:32:3f:10:bb:8b:c5:68:3d:36:57:40:dc:4d:1e:
         50:ca:a0:43:23:40:f1:ee:16:0b:68:22:5e:af:d7:c1:5c:1c:
         cd:dc:dd:ca:7c:a8:db:52:d6:7d:cc:ef:30:4f:36:4e:9d:c4:
         3c:f4:7a:79:21:c5:86:14:65:79:c7:d3:56:5d:36:e3:11:76:
         d5:6e:2f:c9:4e:4b:85:fd:8f:56:ec:f4:d6:c4:a3:ff:d2:1a:
         44:fe:77:40:17:22:22:3a:14:a7:28:ea:cd:fa:e0:8a:f9:1c:
         95:70:06:eb:c6:f2:63:4f:d8:96:02:9e:27:0e:7c:33:1b:d0:
         d8:92:54:d7:bd:09:27:5b:73:f7:f1:ee:0e:1c:dd:77:8e:3a:
         eb:e3:c1:0f:62:b1:5b:35:fd:0d:70:48:e5:ed:30:2a:4e:7b:
         e0:0b:87:7d:55:90:c1:d1:73:51:8b:de:68:09:c7:65:e9:6e:
         7c:07:7f:7b:9c:76:10:85:82:87:92:75:14:8e:d3:a4:3e:c3:
         2f:a5:5c:9b:1e:8c:9b:b0:03:4f:af:29:18:cd:68:9f:13:bb:
         08:c7:f3:b8:5e:93:b8:33:3f:c3:cb:cf:4b:33:c6:9d:44:ed:
         cd:a8:42:e8:92:2a:eb:af:4e:82:62:41:54:ed:c4:eb:e2:5e:
         18:18:f1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:03:50 2025 by rpki-client