Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62d3691b-d295-3d4a-83a4-7b1b6f2d1ebe.roa
File:                     62d3691b-d295-3d4a-83a4-7b1b6f2d1ebe.roa (raw, json)
Hash identifier:          C+ySvkT2FeEcSugyXtSzrI/FLHEolDHc9IiIYhSmxpo=
Subject key identifier:   60:CA:C0:B3:D5:71:0A:76:D0:D4:A0:D0:82:9F:BC:B3:E9:1E:31:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C12E84295567D5330699E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62d3691b-d295-3d4a-83a4-7b1b6f2d1ebe.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        73.75.224.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:e8:42:95:56:7d:53:30:69:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=c7275786-eaeb-489c-b0fc-798ff3ed7c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:52:85:97:bc:39:93:99:05:9a:6f:7f:f1:
                    a4:df:0d:b2:88:4c:13:6f:ad:61:c4:5e:86:81:da:
                    61:47:53:d6:62:a8:73:31:bd:7b:13:bf:12:be:19:
                    7e:aa:81:a3:5d:ca:1f:4b:36:1a:33:d2:d6:e6:93:
                    04:62:73:e5:4f:99:5f:c9:77:44:e1:33:53:a0:90:
                    72:87:1a:16:f2:67:b4:26:03:1f:db:04:7f:b2:de:
                    72:de:25:f7:ed:64:92:e3:e8:58:3b:1d:42:6d:fc:
                    f6:3c:90:5e:12:81:57:66:e1:47:0e:dc:97:6d:05:
                    6c:d4:a6:41:e2:45:49:b7:f2:a1:b8:07:65:5d:dd:
                    9d:0c:85:cb:ec:9f:0f:dc:48:57:88:bf:38:78:53:
                    eb:57:49:90:6f:3a:11:5e:aa:56:e8:7e:46:f7:96:
                    5f:13:99:28:71:bc:7d:7f:3a:46:7c:8c:e8:a1:67:
                    89:25:17:77:22:2a:b3:77:84:15:7a:f5:ce:f2:41:
                    6c:76:4d:9d:5e:d4:0e:cf:97:46:9e:6f:cf:f0:38:
                    68:75:fd:58:95:a7:3d:b7:7e:40:30:9c:33:1a:78:
                    58:18:07:be:7f:17:bd:3e:48:84:16:22:6f:e5:d0:
                    e2:d6:a1:b1:ac:04:51:b9:3b:9b:58:e1:fa:6d:f9:
                    c2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CA:C0:B3:D5:71:0A:76:D0:D4:A0:D0:82:9F:BC:B3:E9:1E:31:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62d3691b-d295-3d4a-83a4-7b1b6f2d1ebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.75.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:4a:1e:8a:db:8e:ef:d8:02:0b:2a:54:7d:c9:75:21:90:42:
         c2:2e:cc:03:cb:65:a1:7d:9e:53:71:b9:4a:26:02:ce:87:95:
         ba:e6:3a:d4:8a:30:4c:a9:13:45:b0:03:92:e6:97:44:35:b8:
         32:ec:65:dd:14:53:82:16:fb:5c:c1:b2:ee:1f:de:0a:77:cd:
         d3:ca:7f:d1:4f:37:be:8c:2d:24:38:4c:b4:01:c8:84:76:86:
         f5:a8:5a:d5:d1:8d:06:60:1a:82:94:94:fc:73:5e:7c:82:fb:
         09:05:10:9e:9f:b7:f8:8c:cb:b6:30:eb:7c:aa:90:3e:a1:1c:
         66:38:44:c4:d0:19:37:38:1e:3b:af:d3:ab:a0:78:f5:86:b7:
         4c:9b:55:5a:dc:1f:c7:41:90:59:37:f7:e4:b9:bf:47:60:df:
         3d:d3:d0:33:94:ba:5f:b7:e3:a8:0a:72:4b:f9:60:83:1a:cb:
         b9:09:da:c7:11:38:c6:9b:00:1c:ad:e7:9f:18:19:35:52:98:
         1a:94:5f:0e:49:bf:f8:68:1d:b5:b4:71:a0:cc:d1:8a:d9:07:
         d0:1e:4b:9f:9d:37:b5:45:66:ce:76:d3:11:d5:ea:8c:fd:85:
         5c:7d:da:da:a9:a9:93:5d:2b:62:41:89:3c:65:d7:1b:c1:8d:
         a3:e5:3f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:49:22 2025 by rpki-client