Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ca73e48-f395-39cb-bb3c-dce15d9ba165.roa
File:                     8ca73e48-f395-39cb-bb3c-dce15d9ba165.roa (raw, json)
Hash identifier:          sVolZIX1/DMiBSCoQkdf0jw3ghDtbI9nu6oR2z7a12c=
Subject key identifier:   5C:7D:09:40:A3:B4:31:6D:21:EB:36:FC:24:1C:02:DB:71:24:86:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C11E2D832AF6210383D8100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ca73e48-f395-39cb-bb3c-dce15d9ba165.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33660
IP address blocks:        73.228.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:e2:d8:32:af:62:10:38:3d:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=7978b242-ed7d-4c71-af1d-bcaebe426796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0d:85:9b:6b:13:e4:58:31:7c:7f:3f:f2:f0:
                    7c:86:f4:93:a3:5e:cb:f2:e3:8b:99:8c:1a:58:68:
                    49:fd:b1:ae:dc:77:d1:ee:e7:63:19:8a:60:0d:37:
                    94:46:8d:c5:5a:52:0d:a9:0e:7b:2f:1c:9c:67:6c:
                    6d:ff:e7:99:55:f0:54:3f:a1:95:49:e9:b0:7a:ea:
                    f2:9d:90:0b:29:9f:42:eb:f0:4f:00:54:94:0a:2c:
                    67:28:0e:0e:4e:ad:4e:d5:8c:14:6a:d1:9f:bb:79:
                    82:b4:71:ed:37:73:82:4d:c9:4c:21:aa:30:67:14:
                    a4:6e:88:6b:36:66:5b:08:11:2b:09:b1:de:16:d3:
                    bc:41:0a:95:6f:16:ea:3f:59:e8:e4:8a:2a:44:cc:
                    57:23:10:ee:e2:3a:98:18:8c:74:54:e3:ce:35:ad:
                    6e:36:c2:3d:ac:74:18:90:8e:a1:ef:fc:c9:f5:08:
                    27:63:c2:62:90:7c:37:e1:c8:d7:68:64:7f:e5:44:
                    ec:b4:2a:bd:37:d1:2c:fb:df:d9:42:85:be:35:a1:
                    45:3b:be:e5:bc:05:12:cd:f4:78:11:e4:ef:08:3b:
                    b1:83:ce:a6:a2:d7:6e:cf:08:37:9f:00:45:d1:2d:
                    1d:ae:b5:fa:4f:da:6e:a9:e9:63:df:91:97:77:e6:
                    11:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7D:09:40:A3:B4:31:6D:21:EB:36:FC:24:1C:02:DB:71:24:86:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ca73e48-f395-39cb-bb3c-dce15d9ba165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.228.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:4e:4d:b1:ca:7e:88:70:7b:50:2a:a4:67:5b:fe:bb:c7:08:
         61:d8:4d:80:3c:b2:b8:4d:ac:c8:f4:fd:5e:ba:73:37:ee:79:
         d8:96:42:f7:8a:7b:ee:f9:b4:36:f1:35:aa:da:d7:02:1b:38:
         40:8e:c1:2b:f1:16:ed:f5:82:21:3f:cd:b4:f5:f8:04:27:54:
         5d:5f:bc:d9:24:34:8d:0d:67:0a:6c:1a:b5:c5:66:4a:09:e1:
         3a:6e:ba:8f:f5:ab:1e:10:3f:ea:0e:41:4f:14:1a:a5:0a:ae:
         cf:ab:60:29:b6:f6:63:e9:a2:f7:51:34:9e:90:b6:74:9f:e6:
         ff:26:be:6b:7d:76:b2:4d:1c:f1:8e:77:a8:a3:6b:79:6c:9c:
         7a:0e:ae:f8:aa:f7:d4:b1:05:77:c6:8a:0a:c8:45:0c:f9:d3:
         21:56:18:13:5d:de:a4:bf:e0:e1:01:e7:47:5d:d0:b5:27:9a:
         ee:03:36:05:b7:49:7a:93:46:c2:60:40:48:16:7e:ad:54:15:
         00:ba:57:a7:df:12:a3:8c:4d:2b:aa:06:1a:3b:4b:8b:4b:c6:
         5f:d0:a0:15:45:64:8e:75:3c:5f:15:65:d5:f8:72:7b:e6:36:
         6d:bc:44:3c:af:12:f2:c9:55:0c:e2:e4:e7:3b:41:b2:19:30:
         23:92:8e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:19 2025 by rpki-client