Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61434fae-67c0-38e8-b657-93c89e68e646.roa
File:                     61434fae-67c0-38e8-b657-93c89e68e646.roa (raw, json)
Hash identifier:          3nPF+YXONw3ufKcS6N/ACsyQYuZH4UPT1wjuka3hv94=
Subject key identifier:   9D:0C:D8:2A:72:F4:68:6D:A7:A0:46:82:E6:68:F6:31:EE:3D:BE:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AF5DF087579E662F2DC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61434fae-67c0-38e8-b657-93c89e68e646.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.159.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:f5:df:08:75:79:e6:62:f2:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=9cc48b17-469d-4615-928b-c39e1c7304be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:3f:df:88:51:1e:1c:18:9a:74:e3:21:b3:
                    8d:50:5b:19:58:a5:61:da:c5:e3:11:9c:37:a5:4b:
                    65:9f:2b:8c:e7:32:78:cd:ce:cc:82:79:30:2e:95:
                    7f:9c:63:de:bb:64:c3:e8:75:ed:86:d1:0b:b6:8c:
                    02:3f:01:4c:59:be:6f:11:57:d4:5f:7d:88:da:f2:
                    7a:64:70:e6:60:76:0b:83:2b:36:fe:08:12:bf:3c:
                    a3:a1:f5:42:33:29:c8:df:cb:94:7a:a7:fa:29:6d:
                    49:fd:68:49:df:b7:0a:c9:cc:fd:d2:87:18:0d:07:
                    9c:a7:84:43:99:3d:2e:b8:8c:e1:05:c4:e0:ec:19:
                    e4:6c:34:73:96:f4:d4:56:2b:95:66:53:f9:7a:d4:
                    c9:e9:7f:67:50:89:7a:b4:20:48:3c:da:12:e9:4f:
                    cc:da:fe:09:ae:f4:56:7f:0a:e2:f8:01:61:7c:6b:
                    e1:a2:fb:c7:1f:f2:4a:a3:e1:df:a0:86:73:41:70:
                    bc:ff:1f:3f:b0:54:4f:24:6f:11:69:4d:5e:64:9f:
                    85:5f:52:a1:2a:4e:55:6f:e3:88:4d:17:8c:d6:85:
                    98:6e:68:91:c6:a2:73:51:bb:b6:34:eb:5e:68:c8:
                    c1:72:70:c3:b6:73:9c:b0:42:56:6b:71:9e:8a:69:
                    2e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0C:D8:2A:72:F4:68:6D:A7:A0:46:82:E6:68:F6:31:EE:3D:BE:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61434fae-67c0-38e8-b657-93c89e68e646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.159.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:4a:e3:a3:7c:b6:60:b9:e6:ee:e6:f8:1b:f0:b5:9c:3d:59:
         25:42:39:a2:b4:c1:17:24:2a:dc:ca:56:4e:bf:f3:35:76:ea:
         16:96:71:ca:1a:b4:40:54:0d:0d:f1:13:08:86:60:f3:21:9f:
         93:7d:91:ea:94:60:c3:4b:ae:55:e2:c1:58:2b:ee:14:bd:31:
         c5:08:be:75:96:6a:9d:a8:0a:ea:23:4c:7f:96:74:39:84:05:
         23:ae:87:a6:3c:c4:47:dc:b6:78:51:f9:31:d0:86:b1:2d:13:
         c5:da:b6:64:f6:25:40:1b:35:ce:1a:58:27:ac:60:1b:91:e2:
         12:19:f9:39:1c:68:a5:9b:e2:cb:25:4b:5f:1f:3c:42:45:c8:
         8d:27:ba:84:cd:48:8f:b3:45:72:4c:90:70:a4:44:6f:0c:88:
         8e:f8:8b:36:f1:e1:e5:f8:fa:a0:f1:ac:37:74:09:c5:51:12:
         3d:41:48:a1:dc:07:0a:a4:e4:e7:00:61:90:01:55:39:bb:15:
         fa:a8:a3:7c:ba:de:fd:60:b5:13:ec:4d:20:7b:8e:ab:44:9f:
         ad:4c:ef:0b:6a:86:a3:0c:94:91:44:51:29:44:0b:7a:41:b1:
         e8:73:62:06:9b:ef:1a:84:50:06:08:68:77:08:56:f8:8a:9e:
         f3:41:4b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:03:24 2025 by rpki-client