Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/692644fe-e308-3e55-96b2-ea9c32b5dc20.roa
File:                     692644fe-e308-3e55-96b2-ea9c32b5dc20.roa (raw, json)
Hash identifier:          R+dDLtY+B/CRpF2FQoDlqdUhC2JmmqUgX92qIka/shI=
Subject key identifier:   FA:7B:B6:43:7E:98:69:75:9D:FD:F5:B1:51:0A:09:00:F7:E7:8E:7F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1086DBA4205F5A1A17F300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/692644fe-e308-3e55-96b2-ea9c32b5dc20.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33659
IP address blocks:        73.248.82.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:86:db:a4:20:5f:5a:1a:17:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=2dd86363-40cc-4620-8a18-138cbe84dbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:ef:f1:b3:23:82:c0:eb:e7:9e:19:ac:80:
                    2f:44:85:14:27:5e:04:4c:bc:2c:98:4b:d6:f6:b9:
                    be:fc:a7:49:99:2f:3e:ae:20:b4:49:33:37:dc:cb:
                    ef:40:3e:fe:cd:eb:8c:06:0b:1b:74:87:51:ab:8f:
                    8c:b0:b6:1f:14:46:9a:64:12:4c:46:0a:94:c1:af:
                    45:ed:90:78:78:92:d3:5c:81:b1:bd:0d:55:af:66:
                    fc:81:71:dc:a9:8c:26:ba:d1:cb:fe:b3:5b:11:5b:
                    96:46:41:09:f6:4e:96:8e:52:24:b4:d3:a0:7c:a9:
                    35:4a:d1:96:69:f9:86:47:37:3c:fe:7c:ce:f5:4b:
                    5f:de:de:f6:9b:ee:dc:76:88:1c:08:11:18:da:da:
                    7e:0b:69:6e:5b:60:7a:7e:0b:71:c5:9a:fc:7a:5f:
                    03:93:90:e2:62:d3:8b:f4:b4:55:ab:fe:3f:f1:7a:
                    e9:a9:97:c9:86:67:da:6d:99:8f:66:27:10:37:32:
                    08:2d:f2:47:54:06:1f:62:e3:c8:dc:5d:d1:e4:38:
                    32:de:10:c1:f8:53:64:7f:89:85:12:6c:50:e9:40:
                    8c:2c:a0:ce:d5:83:4c:fd:62:79:8f:3f:ec:07:82:
                    59:f5:38:f4:ca:45:c5:e3:fc:f6:66:1d:59:9b:2f:
                    ea:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7B:B6:43:7E:98:69:75:9D:FD:F5:B1:51:0A:09:00:F7:E7:8E:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/692644fe-e308-3e55-96b2-ea9c32b5dc20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.248.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:6c:15:4f:33:ae:1b:03:a4:41:c9:4d:a6:9f:3a:df:c2:d6:
         33:bc:2e:4d:5a:38:e5:e4:a3:15:df:d4:ff:98:b5:06:50:89:
         6c:ea:1a:87:0e:58:33:6f:12:56:d2:a3:2d:1a:fa:36:50:2e:
         e2:9f:8f:35:9c:3c:c4:df:c1:70:0b:1f:95:01:28:ba:90:21:
         7f:b7:23:5b:2c:75:21:16:b4:df:bf:23:6c:9e:a1:0e:63:88:
         40:00:25:e2:0c:5a:11:bd:3c:39:de:1d:f7:e8:8f:66:00:9e:
         33:f6:51:3d:90:4d:b9:6c:13:38:ba:56:17:2d:28:cf:2b:c7:
         88:9f:27:1e:c6:5a:d5:56:66:d8:f8:b6:a4:24:a9:ae:65:75:
         4d:2d:94:95:40:10:e3:cb:16:ed:1e:9b:60:98:e2:7e:1e:97:
         8b:5e:f6:47:74:3d:02:2c:ab:5f:17:6c:08:df:71:b0:af:0f:
         c4:39:b6:6d:b8:46:80:6b:1c:20:1b:7e:36:75:4e:0e:d4:22:
         95:3a:cc:c8:bb:02:6b:14:9d:e4:72:85:e2:3d:02:36:46:bd:
         2a:94:b9:c9:a5:64:1d:25:8f:2a:5e:19:8a:a0:fb:b1:5d:79:
         48:7a:14:c7:ad:81:8f:8e:4d:66:21:0a:9d:a2:46:d0:3b:5b:
         f4:d2:9f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----