Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57830bfa-e795-3201-90b3-935bdccf60b9.roa
File:                     57830bfa-e795-3201-90b3-935bdccf60b9.roa (raw, json)
Hash identifier:          j6ewizLWt3FXQTZ1mzl9jO8eBOhI6n0VlmhjA5svS/4=
Subject key identifier:   28:77:6A:C9:2C:A1:B6:69:BD:C0:85:EA:5F:63:71:3F:05:25:5C:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1242FC1E82629B813F6240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57830bfa-e795-3201-90b3-935bdccf60b9.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        73.13.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:42:fc:1e:82:62:9b:81:3f:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=2dbf21fa-8539-4e52-9320-70379202f357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:8b:79:18:f3:47:1f:4f:f6:11:a3:4b:48:
                    23:99:47:91:df:dd:9f:bc:e7:a9:b0:03:e0:b6:52:
                    9a:66:9a:b1:46:31:96:6e:30:fa:c5:e3:74:bd:c9:
                    ef:78:df:d7:ed:67:5e:e0:4b:47:d1:61:cf:79:9f:
                    d1:7d:a8:08:1b:1b:fc:6b:d4:d6:9e:5a:56:80:7d:
                    97:d4:52:07:f0:08:16:61:fa:3d:a5:92:05:d2:c8:
                    bf:af:85:df:6f:3c:da:a4:aa:5c:7f:cb:53:35:50:
                    ad:12:5d:2e:08:7f:3b:22:d5:ce:43:03:bd:16:d9:
                    38:b2:19:08:7b:74:96:15:2e:3e:36:11:9f:d9:30:
                    3e:b1:f8:b8:81:51:2b:4c:70:b1:a5:48:8c:e5:cf:
                    42:c0:ff:95:d8:b4:85:ca:31:bc:41:cb:6c:cb:a6:
                    ca:bd:bf:73:fd:09:cb:2c:5b:dd:17:57:7b:af:4d:
                    ac:c4:45:97:ae:54:20:97:8c:91:7b:e9:19:4e:dc:
                    65:ee:a4:52:18:9d:17:39:e6:15:ed:dd:6d:55:d4:
                    81:62:64:24:f9:8d:d6:28:cd:27:a7:e7:59:ba:25:
                    11:69:e4:ac:8c:7f:26:67:7f:8e:2d:97:eb:c3:57:
                    0a:05:dd:29:51:da:17:bf:79:31:02:46:4d:66:93:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:77:6A:C9:2C:A1:B6:69:BD:C0:85:EA:5F:63:71:3F:05:25:5C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57830bfa-e795-3201-90b3-935bdccf60b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.13.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:57:03:91:5c:12:8f:2a:69:8f:82:d7:c8:35:2b:d3:38:e7:
         42:c1:7d:15:98:e4:26:d6:4f:22:b8:d6:ae:14:ef:99:a6:48:
         22:5f:70:4d:1b:bf:a5:87:ed:a9:45:e8:0b:11:77:ef:c2:1c:
         51:73:c0:dd:8d:20:d9:08:9c:de:1e:b6:05:15:1d:9f:69:f9:
         ed:70:74:fa:27:75:74:6b:a0:63:06:f3:44:e7:45:9f:25:7d:
         fe:d1:af:8e:80:05:e0:84:b4:c2:d5:53:8a:28:f2:aa:82:15:
         d4:85:4e:5d:c3:2c:a0:f9:e1:46:b9:75:ef:57:70:4b:64:14:
         1d:51:7f:99:ad:1d:ff:51:bf:5d:9b:aa:93:5d:7e:94:3c:24:
         58:2f:14:18:3a:2c:db:ca:a4:a2:d5:7f:79:d4:05:14:71:21:
         7f:68:ec:88:6e:a4:d9:0d:2c:47:3a:4d:45:64:74:df:bd:99:
         9e:31:a4:d6:ef:af:24:47:e0:f1:26:94:12:e7:a8:52:95:35:
         12:10:d0:e5:22:c3:c1:8e:12:ab:9e:e6:5d:5f:fe:56:32:0a:
         6e:f1:fc:34:61:55:39:14:ce:18:d5:f1:53:67:c2:d2:e9:f7:
         ea:d4:df:c7:a2:59:6f:6a:1f:08:f7:c8:34:0a:87:40:c2:08:
         a4:b1:b0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:55:24 2025 by rpki-client