Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96ccb2de-8990-38cb-a0f1-b4f00e7b5368.roa
File:                     96ccb2de-8990-38cb-a0f1-b4f00e7b5368.roa (raw, json)
Hash identifier:          L5Po76gBA9iGNlcxtnzNJNX4zKh9zEQY4yOKt/Ml83c=
Subject key identifier:   BE:01:39:AE:7D:50:09:C2:E4:43:7D:AE:A9:06:94:11:9A:7F:A0:7F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C12AAC02A1DE3818D2B2080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96ccb2de-8990-38cb-a0f1-b4f00e7b5368.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        73.210.142.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:aa:c0:2a:1d:e3:81:8d:2b:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=e42ef59e-e54e-440a-b0dd-d97db0083c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:15:e0:fc:24:89:85:a1:e1:5a:c7:f0:7f:9b:
                    2f:4b:d3:2e:98:95:a5:f5:2d:53:4f:4f:52:51:82:
                    0f:4a:b8:99:85:72:98:73:7e:df:ad:96:52:7f:f9:
                    43:71:80:23:d0:b0:39:0c:59:0a:a0:ec:dc:0e:db:
                    eb:a7:6e:0b:06:6e:61:18:84:97:4a:4f:03:ff:88:
                    13:bd:d6:bf:b2:cb:cc:2e:f4:8c:99:d6:fc:0f:72:
                    aa:e9:6f:59:9b:59:c2:cc:05:ea:0b:fc:86:c3:e8:
                    66:0a:5b:eb:93:ae:43:18:1e:c3:80:8a:b9:d2:da:
                    83:37:f0:91:41:d5:d6:fa:17:ba:d0:25:fc:b9:84:
                    e7:25:89:0c:ef:a2:13:cb:73:6f:94:ee:40:ae:51:
                    5f:88:58:ad:11:2a:c7:89:72:3d:fc:1c:97:f6:44:
                    a0:32:01:10:0a:8d:d0:c6:72:3e:64:78:32:6f:77:
                    5b:14:f7:55:89:12:6b:73:f5:00:7f:5d:4d:aa:d6:
                    8b:21:05:c8:81:12:0f:fe:18:75:2f:87:a3:09:52:
                    1b:b9:c1:50:20:a7:ed:cb:7e:c2:a0:f0:88:8d:ba:
                    0a:77:0c:83:57:99:c3:5f:76:db:af:91:6a:37:c7:
                    ca:57:7a:77:5f:f5:aa:a9:9f:79:aa:41:20:44:e9:
                    f3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:01:39:AE:7D:50:09:C2:E4:43:7D:AE:A9:06:94:11:9A:7F:A0:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96ccb2de-8990-38cb-a0f1-b4f00e7b5368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.210.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:62:d4:36:0e:a7:7d:e3:70:67:60:e9:2a:e1:43:d5:4e:4f:
         93:55:6b:c3:77:ab:8f:12:14:d7:98:78:1b:7b:5d:bf:50:d7:
         1f:04:0f:e4:24:42:7b:7d:74:e0:a0:25:4c:1e:ad:60:37:4c:
         65:a1:ef:46:b4:d7:e5:b6:f9:02:85:f2:e8:45:7b:f1:55:e4:
         f5:49:4e:13:9a:01:be:6b:2c:22:42:4c:2e:9f:c0:ae:ab:2c:
         66:64:10:17:b3:05:cb:af:11:02:3a:97:37:2e:37:73:65:14:
         21:ad:7e:ae:0f:02:f3:e6:38:af:2c:52:ff:c1:ba:db:84:c7:
         ab:80:e4:b3:39:87:a2:d7:aa:ca:62:a1:f4:8b:df:6b:03:5e:
         3a:9f:2b:6e:f1:c3:fb:4a:a3:2c:27:fc:e0:fe:02:5a:c5:9b:
         92:3e:ff:51:a1:ac:3b:c3:52:ca:8f:00:dd:94:fc:61:a7:03:
         1c:db:97:78:5d:0c:32:30:ac:cb:4c:59:55:59:f0:f5:3e:80:
         5f:26:d5:3d:38:0d:50:a6:b9:e0:8a:12:a5:b5:4a:be:70:4a:
         79:7f:46:d6:9e:f8:52:8d:63:ba:e3:f0:35:5a:54:99:6f:37:
         b0:17:27:58:74:27:5d:03:27:97:d4:67:fb:98:98:ef:18:43:
         7f:bb:00:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEqrAKh3jgY0rIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZTQyZWY1OWUtZTU0ZS00NDBhLWIwZGQtZDk3ZGIwMDgzYzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BXg/CSJhaHhWsfwf5svS9MumJWl9S1TT09S
UYIPSriZhXKYc37frZZSf/lDcYAj0LA5DFkKoOzcDtvrp24LBm5hGISXSk8D/4gT
vda/ssvMLvSMmdb8D3Kq6W9Zm1nCzAXqC/yGw+hmClvrk65DGB7DgIq50tqDN/CR
QdXW+he60CX8uYTnJYkM76ITy3NvlO5ArlFfiFitESrHiXI9/ByX9kSgMgEQCo3Q
xnI+ZHgyb3dbFPdViRJrc/UAf11NqtaLIQXIgRIP/hh1L4ejCVIbucFQIKfty37C
oPCIjboKdwyDV5nDX3bbr5FqN8fKV3p3X/WqqZ95qkEgROnzCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL4BOa59UAnC5EN9rqkGlBGaf6B/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTZjY2IyZGUtODk5MC0z
OGNiLWEwZjEtYjRmMDBlN2I1MzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdKOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANVi1DYOp33jcGdg6SrhQ9VOT5NVa8N3q48SFNeYeBt7Xb9Q1x8ED+Qk
Qnt9dOCgJUwerWA3TGWh70a01+W2+QKF8uhFe/FV5PVJThOaAb5rLCJCTC6fwK6r
LGZkEBezBcuvEQI6lzcuN3NlFCGtfq4PAvPmOK8sUv/ButuEx6uA5LM5h6LXqspi
ofSL32sDXjqfK27xw/tKoywn/OD+AlrFm5I+/1GhrDvDUsqPAN2U/GGnAxzbl3hd
DDIwrMtMWVVZ8PU+gF8m1T04DVCmueCKEqW1Sr5wSnl/Rtae+FKNY7rj8DVaVJlv
N7AXJ1h0J10DJ5fUZ/uYmO8YQ3+7ABk=
-----END CERTIFICATE-----