Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ba57399-ab29-370d-a783-364519118958.roa
File:                     6ba57399-ab29-370d-a783-364519118958.roa (raw, json)
Hash identifier:          NDE72iyNtekTL9D+g7Fxb5d7c87hvkyFWZV/1u1jq0E=
Subject key identifier:   25:87:26:A1:77:CD:11:5C:50:14:F5:1F:76:8D:46:2A:46:E6:EF:30
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C10A7B396F1056D6507DF05
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ba57399-ab29-370d-a783-364519118958.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        73.81.162.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:a7:b3:96:f1:05:6d:65:07:df:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=37305f04-7366-40c0-99c8-1ec209465899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:71:fa:80:9c:05:02:4e:0f:fd:4f:b5:dc:3d:
                    d3:b7:99:ec:18:47:69:25:6d:34:58:a4:56:a8:b7:
                    34:6e:01:f9:b8:bd:8c:c9:06:46:a5:90:b6:1e:47:
                    73:58:d4:d3:ad:a1:d3:6a:41:de:28:b6:b4:3a:4d:
                    19:40:b3:2a:44:f4:27:3b:e8:38:3a:76:7a:92:10:
                    cc:da:ee:6b:5a:ae:e3:99:10:8f:35:06:10:26:63:
                    29:f4:23:33:b3:de:a4:2c:d3:1f:19:b8:de:7d:61:
                    c0:18:d6:6a:0b:71:8e:41:a1:36:8d:8c:8f:51:dc:
                    29:09:44:71:d6:cb:60:e9:8f:e2:ae:9f:75:af:58:
                    b0:d3:53:a7:fe:4e:9f:8b:aa:0e:6c:67:df:a0:84:
                    d0:70:85:0f:d8:a5:d2:6c:07:a9:f2:1d:75:1d:e4:
                    ac:b6:fe:3e:5d:51:63:d5:c1:c1:23:89:51:60:90:
                    d1:20:70:8e:8a:da:53:82:1a:0e:90:31:db:4f:25:
                    66:05:72:53:9d:a2:45:ee:63:f1:fc:31:3f:d8:86:
                    5d:4c:2d:2d:f6:d7:78:e4:42:2e:15:d8:fc:3f:37:
                    f5:a9:b9:ac:35:4d:a8:d5:53:e7:79:d1:04:29:2b:
                    02:44:ca:1a:a2:c9:86:00:5b:4e:f3:5a:2d:0d:91:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:87:26:A1:77:CD:11:5C:50:14:F5:1F:76:8D:46:2A:46:E6:EF:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ba57399-ab29-370d-a783-364519118958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.81.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:48:b8:42:c1:f8:6f:7e:f3:79:ae:b7:4b:f4:19:2f:3a:bf:
         7a:62:67:e4:1d:bf:0f:c3:f5:2b:a9:4b:7c:08:c2:de:28:a0:
         49:0d:43:d9:9d:4e:bc:b4:a7:39:40:92:8d:77:8e:08:91:b6:
         66:81:a0:e8:ae:02:86:0c:67:8f:5b:b3:86:35:b9:6a:d4:4e:
         3d:be:57:e6:58:63:c1:67:62:50:51:e7:3f:c2:17:e0:95:bc:
         dc:59:0a:7d:1f:0e:61:a3:54:39:5a:ac:73:77:e2:06:0f:de:
         0f:fb:ce:16:ec:fd:e0:b0:6b:ab:71:9e:3e:3a:f7:43:b7:45:
         69:3b:27:82:dd:67:5e:b8:57:72:fb:8c:c1:d7:04:4a:88:ff:
         e5:d8:37:ac:3f:5f:c9:34:63:8b:f5:76:da:48:33:d1:ad:be:
         f2:79:8a:b6:b0:99:ff:51:44:e1:b7:43:8c:41:9a:f2:5c:65:
         a9:19:90:7d:49:d8:8b:bc:42:37:b1:92:f7:bf:72:0e:dc:01:
         a4:b0:9d:80:7b:16:98:20:c9:4c:02:c8:2d:90:8b:bb:6b:c9:
         2c:b8:88:3a:7b:ea:a8:c5:a6:7b:75:d1:d6:cd:11:05:c5:45:
         c5:9b:f8:65:71:f8:d1:97:29:0f:cf:29:6e:70:32:d2:27:a2:
         29:ae:31:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----