Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6ab6cc9-9fda-31f1-8efb-049e67844cdb.roa
File:                     b6ab6cc9-9fda-31f1-8efb-049e67844cdb.roa (raw, json)
Hash identifier:          nnGqSo/gYx23B7tCkaZIqaXT9JXhPLThKACFXKWVNu0=
Subject key identifier:   49:D3:6A:9C:A0:E3:C2:C5:EE:24:25:5B:52:62:63:57:4E:CF:08:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B73967D5EC045E25EF900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6ab6cc9-9fda-31f1-8efb-049e67844cdb.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33668
IP address blocks:        73.161.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:73:96:7d:5e:c0:45:e2:5e:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=2681fbc1-93a0-4170-95fb-7881b06767c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:96:42:fd:ef:dc:1b:23:e4:0d:57:a0:65:b2:
                    41:84:1f:eb:5a:4a:e3:ce:46:61:8e:1a:1a:94:73:
                    94:5e:67:39:08:e6:a9:96:80:49:88:d6:0c:ac:71:
                    67:b6:4b:1b:cb:50:b7:20:01:8f:db:ce:71:30:32:
                    dc:89:a2:32:97:a5:2b:4a:91:36:86:15:10:f8:ef:
                    5d:ac:2a:62:76:89:39:cd:aa:5b:4f:ed:b7:bd:a6:
                    b7:08:18:b8:be:0e:9b:b2:b7:32:91:51:69:63:be:
                    ca:a9:1e:2a:b7:dc:54:5c:6c:a7:1b:dc:76:68:53:
                    44:0d:f1:9a:23:db:c1:43:e2:f2:8d:48:b6:4f:d2:
                    24:25:10:a8:cb:81:b6:7f:ce:62:e4:bb:b9:d5:0c:
                    54:32:63:3d:75:2d:3e:96:0b:01:f7:6a:57:b0:62:
                    1b:92:f7:72:2f:09:20:1c:04:91:64:27:bc:d6:0d:
                    c1:da:78:f9:1c:2b:b1:94:f7:bb:cb:92:e6:01:cb:
                    70:2c:65:85:8b:17:43:57:44:dc:cc:4a:43:33:46:
                    b9:43:8d:59:f9:eb:23:ab:2a:f5:7e:f1:59:4c:5a:
                    ab:7a:29:03:b3:00:e4:80:39:70:24:61:e4:64:87:
                    98:8e:89:7c:d1:a0:12:7b:40:91:61:b6:4d:cf:9c:
                    da:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D3:6A:9C:A0:E3:C2:C5:EE:24:25:5B:52:62:63:57:4E:CF:08:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6ab6cc9-9fda-31f1-8efb-049e67844cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.161.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:78:f2:5f:dc:9b:7e:76:24:e5:50:39:23:4d:97:ca:33:bf:
         3a:3c:cb:b0:d5:f0:7c:01:09:3a:1d:84:bf:0c:eb:96:4f:81:
         47:1a:dc:bd:86:6d:12:9a:5c:ed:51:49:d0:6f:cd:26:62:88:
         ab:c2:30:ac:30:75:b6:f2:d8:19:63:1e:3d:9f:e3:1d:b3:36:
         9c:36:cc:fd:98:a5:51:30:42:2f:c2:4b:e0:e8:e3:7f:ad:52:
         b9:6c:8c:2c:7e:8e:a0:24:6a:c5:9f:4f:25:ef:30:95:1e:d8:
         af:2c:8e:dd:ee:b9:c0:ce:6e:26:c2:f7:d7:a0:e7:51:07:9c:
         dc:b8:7e:6e:5f:6b:10:0f:46:2e:fb:a8:d1:2f:ab:2e:d3:37:
         56:df:f6:c6:29:ae:bc:3f:d1:3c:39:ca:74:07:0e:b2:98:b8:
         29:4b:2d:df:f4:17:8d:5a:d9:43:ed:72:af:7e:5f:17:de:d9:
         15:76:e4:41:5a:1f:36:3f:f9:b4:36:2a:d2:13:57:48:81:2e:
         5d:eb:2a:0e:9c:fb:b8:7c:75:74:9f:78:8e:03:53:62:d0:09:
         a7:91:22:a4:e7:e5:b0:36:8c:e2:91:ae:6d:e7:e7:39:b7:88:
         ef:b3:af:7e:33:cf:7e:14:2a:ec:0e:1a:9c:32:7d:23:0c:7a:
         ba:67:6b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:13:55 2025 by rpki-client