Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e411473-6ebf-3af0-8853-7b81e7467437.roa
File:                     4e411473-6ebf-3af0-8853-7b81e7467437.roa (raw, json)
Hash identifier:          tXP4Y0mH3lcnbF75NO9SSufyuAb/EjOFDR9hp4tNtQA=
Subject key identifier:   C2:0E:4A:38:49:51:C3:EE:18:09:F1:7C:42:84:6C:9E:E0:C7:C4:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C11996C724A2D601F1922C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e411473-6ebf-3af0-8853-7b81e7467437.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        73.202.68.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:99:6c:72:4a:2d:60:1f:19:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=57f503e5-920b-4ca9-ad9a-2faad3287781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:64:d7:57:20:88:0d:a5:66:f0:35:10:d8:
                    3f:5c:ab:e4:6a:1f:9a:88:32:2d:e3:42:d3:8f:ec:
                    c5:67:11:6b:58:99:3b:78:8b:7b:72:ac:08:e3:c7:
                    25:9c:d2:3b:bc:17:08:b0:e7:f4:50:74:04:c3:5a:
                    98:59:7a:cd:10:17:52:f8:f3:7e:cc:71:e4:aa:56:
                    43:cc:86:f6:e2:a8:db:26:47:44:48:09:5b:94:08:
                    1c:55:6c:c2:aa:56:7a:55:f3:74:7f:40:11:8d:52:
                    01:7c:03:24:2b:48:44:9e:2b:93:99:eb:d1:64:fa:
                    aa:47:3d:3a:10:d7:aa:1b:56:76:e7:e2:91:35:36:
                    ec:03:20:7a:dc:a8:5b:80:d7:21:e3:7d:dd:4f:bc:
                    bc:bd:a7:b9:bb:17:93:07:f8:0b:34:ce:87:d0:e9:
                    f7:18:62:de:89:6c:12:44:f5:39:52:7e:54:d6:52:
                    bb:99:c5:3b:4a:2c:97:66:64:88:72:d9:38:41:0a:
                    fb:d7:83:6e:39:65:dc:de:79:9a:3f:73:1d:2b:83:
                    c8:d3:ee:59:a8:3e:d3:eb:69:91:ea:da:9f:f8:5e:
                    84:f6:04:34:cf:7a:10:40:dc:2b:b1:53:7e:33:1b:
                    19:ed:66:0d:ed:c6:f0:5b:36:9e:d3:0c:0f:9c:5a:
                    3a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0E:4A:38:49:51:C3:EE:18:09:F1:7C:42:84:6C:9E:E0:C7:C4:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e411473-6ebf-3af0-8853-7b81e7467437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.202.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:1e:57:d8:e2:5a:58:60:fb:85:da:eb:a2:13:80:45:f1:e8:
         e9:66:72:0b:3e:91:6a:66:66:c6:73:a9:fc:96:4e:1e:89:21:
         bb:46:73:9a:29:0c:a4:47:76:99:63:72:62:e4:ca:1e:2b:bb:
         01:52:54:0b:a4:12:91:46:35:09:f7:5e:18:e8:46:5b:a5:4a:
         f2:93:28:4d:c9:5d:d5:0a:08:6e:8e:95:ff:aa:9f:a2:2a:a2:
         db:90:16:96:ba:11:12:b4:7c:97:24:9a:a3:64:d0:b7:92:c9:
         14:d8:29:60:f1:61:3c:02:cb:64:13:cd:71:9f:1e:b5:67:3e:
         ec:01:76:35:dc:75:5c:8a:19:b1:90:05:59:04:8e:b0:d9:e3:
         17:49:fe:ca:56:cb:f9:79:90:d5:b3:cb:d4:b8:ef:bf:be:c3:
         f7:8a:d5:49:a7:70:27:c7:3f:2c:1f:fb:b4:52:e9:f5:4d:72:
         1f:5d:f5:84:4d:a0:7d:a4:6f:ce:d1:1e:ee:75:64:67:f4:01:
         36:99:3c:38:ae:0f:15:db:65:48:27:ba:08:cb:af:0a:58:89:
         52:fa:49:51:44:34:1e:59:aa:b6:56:d8:c4:19:17:68:4f:4b:
         ef:ab:15:7f:39:97:c0:17:e8:c2:67:0f:79:5c:52:64:f9:2e:
         8e:11:eb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----