Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/627d7bb0-a2ef-39ee-a007-dac5084af03c.roa
File:                     627d7bb0-a2ef-39ee-a007-dac5084af03c.roa (raw, json)
Hash identifier:          of6kT8+0ZFTtzBG7bUYVJfaoxAus5LTwMMlcdsP8ql4=
Subject key identifier:   27:D9:0D:76:90:92:1B:0F:03:D5:3C:5F:4E:AF:E6:4A:E4:5E:4B:5F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143D3E22231DEE11A76B47C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/627d7bb0-a2ef-39ee-a007-dac5084af03c.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33490
IP address blocks:        73.240.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3d:3e:22:23:1d:ee:11:a7:6b:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=e1680706-8989-4df1-8732-f378741eda74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e2:20:b4:74:fa:c8:8c:93:8d:2f:8e:8d:d6:
                    d4:e2:5b:50:74:1f:2e:0c:36:17:0e:53:bf:cd:ac:
                    d6:51:0b:a0:f4:fb:43:ec:e0:69:1b:1e:48:60:57:
                    83:53:cc:03:6f:30:ea:dc:97:83:3f:eb:30:d4:35:
                    0b:29:da:34:49:d5:0c:33:1b:57:eb:a4:0d:9d:53:
                    03:9a:ae:b5:97:da:1e:e1:4d:60:67:b1:27:11:9c:
                    47:6f:76:6d:14:c0:d4:b8:a5:ec:ed:4b:55:c2:d0:
                    f1:eb:92:91:c8:9c:3b:1a:bd:52:5d:dd:01:69:8b:
                    1d:45:72:d8:56:d1:7b:00:50:1a:7a:11:fd:df:98:
                    22:aa:40:10:9f:bb:c6:ab:c3:a1:b2:cd:20:4a:d0:
                    82:94:56:c1:9b:b0:ad:ac:b1:95:f2:45:4d:0c:dd:
                    fb:ad:5d:2e:11:e1:58:e9:42:fe:0b:4e:cd:47:26:
                    e7:16:c4:09:0d:40:e0:8c:e2:1e:42:4e:17:e0:0e:
                    a9:c0:3d:10:58:63:c5:3b:7d:37:56:3e:4d:8b:c6:
                    5f:45:af:db:9f:28:62:16:29:53:8a:de:7b:c7:ce:
                    cd:63:de:7d:10:aa:a7:ac:95:0b:00:b8:ca:50:34:
                    fb:f0:25:e5:43:03:42:aa:77:65:0b:b8:33:e4:84:
                    3e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D9:0D:76:90:92:1B:0F:03:D5:3C:5F:4E:AF:E6:4A:E4:5E:4B:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/627d7bb0-a2ef-39ee-a007-dac5084af03c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.240.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7d:ef:3b:94:50:24:fe:e3:ea:dc:3f:0b:89:c2:1f:65:3b:
         bc:78:65:47:67:be:aa:51:cd:8e:8e:fc:50:7c:45:68:44:6d:
         e8:79:0b:cb:4b:29:99:7b:59:6f:d0:62:74:b3:ad:dc:e3:f7:
         26:b9:37:0a:10:e4:14:06:9f:7d:56:92:e3:58:61:f2:79:51:
         1a:05:46:b5:8e:ad:fc:bd:f8:4a:ea:02:fe:af:71:3d:88:df:
         fa:87:a5:d4:f0:22:60:8c:95:ba:da:ba:6b:91:7a:0d:8f:6d:
         e2:67:d9:47:0f:bf:3b:ed:2d:59:e2:2d:df:59:59:c2:3d:68:
         28:6b:2f:da:29:bb:99:47:6a:fe:64:72:ab:e1:9b:d7:89:55:
         14:f9:3e:93:cb:5b:66:8b:55:18:40:6e:cb:52:eb:76:f4:08:
         5d:2c:32:7c:ee:ad:70:20:5a:24:b2:78:49:ce:ab:9b:b6:7c:
         30:e2:88:da:29:59:fe:df:fa:4c:62:29:b9:1d:1a:3b:a0:6d:
         7e:86:51:de:af:f0:90:1b:e7:8b:30:49:e0:78:6c:10:ec:d9:
         19:14:8e:7d:e7:56:eb:67:e2:83:49:e4:63:6c:5f:ef:6a:41:
         45:e1:dd:ed:fb:da:24:eb:c2:2c:3b:63:24:09:e7:bf:79:33:
         56:c9:1a:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPT4iIx3uEadrR8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZTE2ODA3MDYtODk4OS00ZGYxLTg3MzItZjM3ODc0MWVkYTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOIgtHT6yIyTjS+OjdbU4ltQdB8uDDYXDlO/
zazWUQug9PtD7OBpGx5IYFeDU8wDbzDq3JeDP+sw1DULKdo0SdUMMxtX66QNnVMD
mq61l9oe4U1gZ7EnEZxHb3ZtFMDUuKXs7UtVwtDx65KRyJw7Gr1SXd0BaYsdRXLY
VtF7AFAaehH935giqkAQn7vGq8Ohss0gStCClFbBm7CtrLGV8kVNDN37rV0uEeFY
6UL+C07NRybnFsQJDUDgjOIeQk4X4A6pwD0QWGPFO303Vj5Ni8ZfRa/bnyhiFilT
it57x87NY959EKqnrJULALjKUDT78CXlQwNCqndlC7gz5IQ+AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCfZDXaQkhsPA9U8X06v5krkXktfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjI3ZDdiYjAtYTJlZi0z
OWVlLWEwMDctZGFjNTA4NGFmMDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASfAJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHx97zuUUCT+4+rcPwuJwh9lO7x4ZUdnvqpRzY6O/FB8RWhEbeh5C8tL
KZl7WW/QYnSzrdzj9ya5NwoQ5BQGn31WkuNYYfJ5URoFRrWOrfy9+ErqAv6vcT2I
3/qHpdTwImCMlbraumuReg2PbeJn2UcPvzvtLVniLd9ZWcI9aChrL9opu5lHav5k
cqvhm9eJVRT5PpPLW2aLVRhAbstS63b0CF0sMnzurXAgWiSyeEnOq5u2fDDiiNop
Wf7f+kxiKbkdGjugbX6GUd6v8JAb54swSeB4bBDs2RkUjn3nVutn4oNJ5GNsX+9q
QUXh3e372iTrwiw7YyQJ5795M1bJGtY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:21:56 2025 by rpki-client