Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f0efe6a-4201-3175-ab5b-a2324224ad3e.roa
File:                     7f0efe6a-4201-3175-ab5b-a2324224ad3e.roa (raw, json)
Hash identifier:          UqScjzV9ytfjQkGas97qC5n6r0gej8+iGDK2gJTHFJo=
Subject key identifier:   18:60:78:29:C9:25:06:B8:6E:56:2A:AA:01:12:44:D7:E0:1B:72:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1251F77CCA4BC818684C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f0efe6a-4201-3175-ab5b-a2324224ad3e.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        73.188.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:51:f7:7c:ca:4b:c8:18:68:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=d4ce16d2-b55e-42a1-808e-8873d4637488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:41:b7:43:7b:68:10:6b:4e:81:99:05:e7:f4:
                    cc:0e:c1:fe:9b:37:d0:92:f0:44:d1:4a:f6:0c:b1:
                    50:a7:f8:da:e0:25:71:67:b3:9a:2a:8f:7b:42:9e:
                    20:af:40:57:fb:83:af:d8:ee:a0:09:46:34:98:70:
                    50:a2:ef:17:40:a5:cc:fa:db:de:01:27:35:61:89:
                    50:ce:5c:c3:4f:ed:b2:83:c9:99:63:9e:cf:3f:0a:
                    a6:36:be:4b:26:e5:85:3e:b0:2b:df:27:c2:96:8e:
                    c5:ea:31:aa:4a:28:17:42:60:8b:5f:ad:0e:91:f6:
                    d6:99:d3:15:24:b3:a1:fc:aa:ad:14:a1:67:6e:de:
                    81:d0:cf:f5:af:61:30:f3:c0:5d:ec:3f:ec:f5:eb:
                    05:91:84:9d:b6:59:53:92:dc:e6:88:43:9d:ec:3e:
                    9e:a6:e9:8b:a6:f9:65:40:e5:c6:2e:ab:f8:56:70:
                    95:1a:75:35:cd:74:72:b9:b6:e7:89:6d:60:a5:44:
                    50:3c:8e:a8:d1:6c:b5:9f:67:47:77:2d:37:95:40:
                    d4:20:67:20:36:f9:2a:d4:63:1d:3f:d1:a2:b4:b7:
                    5e:1a:de:51:da:40:7c:9c:ca:2b:30:af:2f:fb:2c:
                    e2:35:e9:03:6f:1a:b6:03:5a:59:c4:6a:80:57:70:
                    6d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:60:78:29:C9:25:06:B8:6E:56:2A:AA:01:12:44:D7:E0:1B:72:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f0efe6a-4201-3175-ab5b-a2324224ad3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.188.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:75:c6:41:de:6b:07:bb:2a:e3:77:3c:49:0e:bd:fd:26:58:
         45:a7:ea:e1:6d:c6:99:0e:cb:cf:00:55:11:22:15:55:83:40:
         fd:86:78:9f:c8:91:fb:a2:62:7c:b3:a1:c3:9b:0a:20:ec:e9:
         cd:02:be:a2:8d:40:7a:fd:3b:a5:46:ac:0d:7e:46:b4:96:7e:
         30:e6:eb:f3:ab:8e:77:56:ed:df:1b:2b:53:f5:ba:a1:40:bc:
         bb:42:d1:f9:ce:30:43:b4:35:c9:39:74:ab:3d:4d:cb:3b:30:
         e9:da:15:c3:04:1a:fe:a7:3d:2c:b6:54:b7:57:90:d0:b6:0c:
         1e:be:ea:b7:95:54:3c:fa:80:37:51:3f:67:86:be:de:dd:ba:
         9e:db:b2:92:89:50:8b:a4:8c:e9:19:4e:51:1b:fd:78:bb:e3:
         bf:82:96:a9:b4:81:26:e9:cb:16:be:1f:89:27:dc:8a:a4:7f:
         12:7d:df:46:e7:2b:3f:e9:dd:e5:89:16:b5:1f:d0:b8:96:11:
         a7:2d:14:8e:72:26:d5:45:51:84:7b:26:92:ac:92:c9:f2:a0:
         a4:b7:05:7b:f2:db:0c:ae:06:66:e0:e8:35:b3:84:2b:de:ed:
         d6:52:93:b7:dd:6e:aa:c2:09:6a:74:64:d8:4b:5e:ba:af:88:
         11:d0:97:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:28 2025 by rpki-client