Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2f8ba0f-de9d-3cee-acc6-20d42e95d3a5.roa
File:                     a2f8ba0f-de9d-3cee-acc6-20d42e95d3a5.roa (raw, json)
Hash identifier:          p7ax1PMxZB3Z8hP1g5XpE9RpHVxWSyFwxYzENyEekmA=
Subject key identifier:   1C:1A:36:99:00:F5:D2:79:6E:2D:02:34:80:62:08:55:2A:EE:E0:71
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C11228F4334FC6A8F064580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2f8ba0f-de9d-3cee-acc6-20d42e95d3a5.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        73.58.118.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:22:8f:43:34:fc:6a:8f:06:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=f89155b9-0909-48da-948f-ab984a5b12f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:71:d5:b7:86:ef:23:c4:31:d4:76:bc:67:
                    42:69:4a:06:93:3c:d8:a9:77:d9:a5:53:7b:18:0e:
                    b9:bc:d3:c6:b0:1f:bc:5c:70:a0:35:99:f4:53:f5:
                    9f:0d:e3:33:06:9b:a2:a9:a6:05:be:22:05:42:ae:
                    dc:6d:b0:5c:06:96:c2:a1:bc:a4:22:10:07:07:5c:
                    3a:f4:be:39:5f:84:6c:47:d2:c7:db:e3:73:14:ed:
                    4b:27:11:7a:69:f2:e3:e5:17:0c:39:b9:5a:dc:b5:
                    ae:3f:e7:f3:bf:cd:ec:6d:7d:07:c3:e7:e6:45:a7:
                    97:58:2e:d8:fd:48:04:a6:2e:19:cc:55:5c:1a:78:
                    86:1b:bc:db:8f:14:35:3b:5a:fc:a1:21:87:3e:a1:
                    ae:a9:0f:a8:4a:0a:f3:17:77:9a:95:b5:6a:25:ea:
                    c9:8e:18:17:42:bf:3f:27:bb:87:d3:10:90:89:a3:
                    72:57:b2:ff:21:08:e4:28:9c:a7:bd:2f:32:1e:05:
                    ef:09:a6:98:dc:28:5e:3a:80:aa:97:0b:fb:c5:55:
                    16:ac:94:fe:f1:29:d0:fc:45:da:f0:ab:6d:82:69:
                    d8:ff:c5:98:17:a7:02:b2:0e:75:d7:d0:9b:67:e2:
                    ef:ba:29:83:da:6d:18:8e:4f:bc:3e:96:a8:81:9e:
                    17:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1A:36:99:00:F5:D2:79:6E:2D:02:34:80:62:08:55:2A:EE:E0:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2f8ba0f-de9d-3cee-acc6-20d42e95d3a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.58.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:50:74:85:f6:4e:63:b1:4b:0a:47:5e:81:7e:60:26:80:ff:
         17:2b:49:e2:19:d1:4a:c1:8d:f8:95:ee:04:1b:78:a2:5d:cb:
         3d:f1:c0:c5:34:97:9d:1e:b8:65:31:c2:7a:fb:27:6e:dd:48:
         b4:55:03:32:9c:b3:1b:1b:d9:d3:6e:fc:0a:a1:57:7f:69:52:
         2c:87:62:aa:22:82:6f:43:60:0a:f8:13:5b:9f:45:cf:48:67:
         81:34:52:75:ab:a9:48:1b:f1:fb:9d:b5:95:48:13:43:aa:7b:
         a9:f1:5a:f8:e6:87:12:86:b0:d6:2f:dc:57:7c:51:bd:e9:1e:
         18:68:39:45:df:59:8a:fb:fc:3f:dd:90:19:06:9e:cc:88:2f:
         e3:02:82:b1:86:5d:a9:ce:a7:03:68:87:a2:1b:72:f3:1a:93:
         15:8e:3d:7a:eb:1e:0b:89:f9:99:de:04:3b:8f:47:5d:2a:e3:
         a9:bb:6d:30:ff:d3:fd:60:e1:4a:90:d6:d0:bf:0f:e9:d4:f6:
         ba:2c:4e:4f:61:8b:86:80:9e:5c:32:af:d2:e3:c1:06:89:3a:
         8b:d5:fb:2e:9f:06:4f:35:a1:70:1f:28:31:02:9f:ae:be:fc:
         40:43:45:ff:47:49:9d:2f:ae:ca:88:61:c0:36:ee:81:c1:ce:
         3c:fd:f5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:22 2025 by rpki-client