Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b3527b4-4365-3951-b7b4-74e421fa14a5.roa
File:                     5b3527b4-4365-3951-b7b4-74e421fa14a5.roa (raw, json)
Hash identifier:          Fe8DW7FFAmJSuclWegmTaSsENdc7WuGFzBHlXaziQbo=
Subject key identifier:   4B:06:8D:A7:0E:4A:7A:23:FE:BF:C8:68:9B:81:55:6F:9A:2D:2F:03
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C129C3500EDC624FC91B400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b3527b4-4365-3951-b7b4-74e421fa14a5.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        73.146.236.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:9c:35:00:ed:c6:24:fc:91:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=d42eea3a-4f2d-4a76-a276-ca8e96548a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fd:96:c7:ec:17:33:26:89:49:4e:d2:dc:7c:
                    0a:21:25:b7:04:1d:c1:10:e5:10:3a:07:3a:53:0f:
                    69:4b:0b:2c:43:38:12:24:18:61:b9:4b:a7:76:34:
                    25:0a:1c:e2:93:a2:c8:ac:c2:56:27:26:9c:f0:48:
                    29:9e:37:b4:71:82:86:51:50:f4:06:a2:ee:4d:61:
                    ce:74:08:7f:58:81:82:0d:4d:a3:78:69:50:65:19:
                    8f:b7:aa:be:4e:06:00:9c:11:ba:f3:aa:e6:19:6e:
                    b6:77:8e:a1:ec:46:f1:fb:70:57:27:80:80:f8:d8:
                    0c:55:83:50:22:7d:76:0a:d9:24:ce:44:cc:56:fb:
                    70:00:73:37:34:52:16:bc:61:be:c2:cb:32:91:2b:
                    23:4f:63:46:52:7f:31:a7:c8:bf:93:cc:ed:f2:c5:
                    75:e4:2d:8d:c5:da:1e:de:31:de:dd:4e:19:36:c7:
                    28:37:5f:e1:45:78:0b:f2:08:47:a5:c4:95:d9:ba:
                    76:64:d3:29:19:32:03:01:ac:f1:ab:ac:b2:3f:64:
                    db:be:c6:4c:6f:97:8d:15:e7:4e:02:fa:66:18:67:
                    35:11:9b:38:93:32:12:6d:8f:67:70:6f:3c:12:c9:
                    ef:7f:35:5e:56:66:37:00:22:de:0f:54:3f:0a:03:
                    1a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:06:8D:A7:0E:4A:7A:23:FE:BF:C8:68:9B:81:55:6F:9A:2D:2F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b3527b4-4365-3951-b7b4-74e421fa14a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.146.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:61:97:ae:12:b9:d7:4d:e0:24:71:4d:0d:fe:8d:e5:c4:a3:
         8d:6c:fd:72:fc:ab:ae:24:63:49:a4:44:ba:de:9a:f7:1e:24:
         e2:a2:5a:10:d6:16:e7:4d:19:89:f8:c8:c1:61:e3:d0:61:d8:
         ef:fe:91:da:d1:e2:90:a5:cc:fa:ec:5c:a4:bc:c1:43:56:11:
         f0:1b:6c:95:31:e2:15:bb:b3:ee:28:98:e1:4b:13:62:af:ae:
         d4:6d:38:8f:4d:79:0d:ab:2c:50:f6:03:c1:0d:06:ec:a2:ab:
         6b:61:32:9b:c3:e7:e1:10:b5:aa:9b:38:99:ca:34:2e:bb:ae:
         6e:31:02:fb:77:aa:8a:ec:18:8a:5a:d2:6e:86:3d:81:a5:fc:
         ce:0c:01:8b:60:0b:a7:65:e7:60:57:6a:f1:41:b9:68:72:f2:
         21:4d:87:8a:39:25:2e:1b:5f:3c:9e:1a:15:69:30:f6:40:8d:
         0b:d1:5b:28:50:c6:85:ab:ac:81:5d:21:75:15:f2:ec:07:70:
         3d:2c:b2:21:58:18:cb:3b:de:d8:52:dc:a7:80:78:42:4f:49:
         ff:bf:d2:bb:5a:21:6a:d8:25:df:76:26:ca:83:36:77:f3:6a:
         e2:ea:7c:77:ce:a0:2c:e7:9f:7e:e2:a9:71:8e:7a:4b:f2:ba:
         bf:c7:14:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:10:19 2025 by rpki-client