Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f1419a5-47e6-30e9-a7ff-43962f34cca1.roa
File:                     6f1419a5-47e6-30e9-a7ff-43962f34cca1.roa (raw, json)
Hash identifier:          htOCbu/skUDuWXGfYin0CX2bq+H4tPGuy+PgCjr98WI=
Subject key identifier:   02:A4:DF:B6:8F:1E:EC:91:FB:AD:6F:D4:4F:99:D1:E2:CF:98:9D:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143E8DCEF387305AC3CF2080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f1419a5-47e6-30e9-a7ff-43962f34cca1.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.4.188.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3e:8d:ce:f3:87:30:5a:c3:cf:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=cd8e6d1e-0d25-4b2b-86a9-fc28baf4722c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:2b:9d:11:8d:b7:cd:f5:f5:55:f8:6c:41:
                    f9:53:de:68:44:74:54:05:7a:f1:57:6a:83:d5:ac:
                    d3:9c:28:8c:50:73:fc:f0:29:93:78:70:a8:8c:5e:
                    78:20:d6:c6:f8:f1:66:e3:b0:40:83:e6:cd:7a:97:
                    95:51:7d:1b:31:d1:50:19:b0:ba:d8:15:64:b4:e4:
                    5b:d9:7e:40:b0:1a:fa:33:a3:f5:9f:fc:ff:84:7f:
                    07:5e:b0:4d:43:b1:f8:61:dd:34:f0:08:dc:85:1d:
                    77:d7:08:4c:f0:73:5c:dd:1e:48:51:4b:e4:ce:fd:
                    9e:3a:56:60:b6:1d:81:be:7b:19:ad:fd:af:3f:df:
                    ed:b2:37:73:05:f2:25:72:53:e7:63:8a:9f:ce:b7:
                    5f:dc:79:3a:01:27:87:8f:76:53:a0:0a:91:1d:3e:
                    5d:cb:6c:df:af:26:4a:4c:58:3a:2a:2c:34:07:9d:
                    ae:bf:ec:0c:81:9a:f7:b4:46:05:d4:b9:9e:41:bd:
                    9e:14:48:4c:cb:7a:6d:10:77:a1:ac:26:79:c6:a5:
                    bf:c6:89:ce:1f:74:99:3e:4f:4a:9f:f0:8a:12:05:
                    93:34:34:67:bd:12:6d:01:ba:42:ae:0b:60:ad:fd:
                    73:d2:5b:6d:a0:58:c8:c3:17:97:f0:a5:20:e4:4c:
                    f2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A4:DF:B6:8F:1E:EC:91:FB:AD:6F:D4:4F:99:D1:E2:CF:98:9D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f1419a5-47e6-30e9-a7ff-43962f34cca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.4.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:e6:1c:aa:bf:10:53:8a:11:27:dc:eb:d1:72:0c:b3:21:bf:
         55:54:6e:bb:6e:6e:93:f7:2a:e7:17:49:9a:e2:c8:5a:52:f6:
         13:4f:87:85:4a:1e:70:2d:6b:ce:a5:2d:78:5b:30:86:95:f9:
         84:a2:13:a7:ce:a0:99:14:ee:24:23:59:fb:90:18:26:16:83:
         1f:c3:1b:9f:d5:7b:d2:1d:61:13:36:1b:90:d0:7c:de:75:e0:
         ed:7e:57:f8:86:48:5b:44:4a:45:84:90:c1:9f:15:97:45:c9:
         14:36:31:22:e5:51:a4:1f:44:60:20:f4:ff:42:a2:7e:94:9d:
         f7:59:51:d8:be:9e:b3:5b:70:63:07:03:d0:d6:5b:49:ac:8f:
         21:02:77:67:11:fe:ff:13:e1:ce:d7:5e:43:46:02:3d:cb:e7:
         0c:10:40:b5:b5:75:8b:59:ec:e4:86:b6:9f:0b:ad:bf:bb:e9:
         7e:e9:2b:30:ad:d8:56:8d:7a:e2:69:a5:da:09:6d:c1:fc:aa:
         96:c2:10:43:7e:5b:88:8a:57:7c:e2:e1:11:c4:05:1c:2c:01:
         ba:82:71:37:b9:bd:ae:d7:96:67:f7:f3:08:1c:98:cc:e3:0c:
         2c:b2:42:fd:03:a8:79:33:dc:61:63:d5:ee:ef:27:90:be:54:
         b4:24:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:00:50 2025 by rpki-client