Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b975d7ae-f662-3d36-9804-de854e675b0b.roa
File:                     b975d7ae-f662-3d36-9804-de854e675b0b.roa (raw, json)
Hash identifier:          X2DnEAhRQV5zpBZ4zpxgRaY2ChKplkTIjnroQTeZ0JY=
Subject key identifier:   16:01:8A:C3:37:CE:4A:67:A7:0D:1E:03:D1:F6:F3:D1:C8:28:FA:45
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AE51F9549404B7CAF1800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b975d7ae-f662-3d36-9804-de854e675b0b.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.100.140.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:e5:1f:95:49:40:4b:7c:af:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=ca9994c9-c66b-4f8d-83a1-fd11dc42ffdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:d2:1b:e3:cf:bb:ca:1a:f9:a0:e3:ef:85:
                    5c:64:53:94:18:e2:79:6d:16:57:a2:ce:66:74:57:
                    58:03:4e:d1:5d:7c:c9:32:8e:c0:b5:3a:41:2f:0b:
                    ca:fb:9d:b4:d6:79:46:41:92:cd:e9:a6:b0:8e:fd:
                    9f:15:a6:44:06:10:f7:90:19:6e:61:20:cf:9e:16:
                    8b:32:ba:d1:43:81:0c:d9:e0:09:cf:c5:0d:af:4a:
                    cf:75:fe:5d:3a:93:c6:44:d0:06:d6:c0:c5:aa:34:
                    5a:27:25:06:75:4f:e8:ff:6e:f9:d4:6f:82:95:8a:
                    0a:cb:5c:96:1c:b8:06:16:d3:47:22:d0:6c:cb:6d:
                    96:8d:42:3b:e6:f5:78:52:1d:ca:6c:ad:75:88:a1:
                    77:86:e3:b8:36:29:52:1e:9b:04:21:1d:1b:46:26:
                    27:80:93:a3:93:33:70:e7:41:bf:e5:3f:4e:45:44:
                    da:79:17:bb:b6:fc:3a:f2:1d:bc:f0:48:ef:fe:e8:
                    cf:40:2c:94:0d:05:02:a9:e3:d0:67:ad:4b:fe:41:
                    86:5e:43:ab:95:7d:b1:e9:7a:cb:9a:d6:94:ea:25:
                    65:cc:67:32:32:da:37:3d:de:7f:d0:00:32:43:bb:
                    bc:8e:36:df:e5:4b:d7:4b:76:2b:c7:23:8d:09:bf:
                    d7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:01:8A:C3:37:CE:4A:67:A7:0D:1E:03:D1:F6:F3:D1:C8:28:FA:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b975d7ae-f662-3d36-9804-de854e675b0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.100.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:be:4e:3e:09:b2:91:a2:5d:d6:cc:2f:08:50:f5:87:38:da:
         81:ab:be:00:2c:49:f4:53:82:4e:6e:bb:19:d4:ae:90:a6:76:
         be:4c:93:81:ab:95:87:b1:a5:c0:6a:fa:8b:67:2c:a5:da:64:
         60:aa:5d:78:05:6f:24:fb:8f:0d:57:6f:18:0b:4b:e1:74:91:
         4a:3b:a4:5e:80:02:69:30:05:ae:ef:aa:fc:15:9e:54:95:3c:
         bc:e5:4f:9b:9a:b3:c9:49:1a:52:90:72:82:67:41:0c:61:f9:
         0a:9c:7f:80:44:a4:20:44:c0:20:fa:94:cb:58:b4:3a:31:37:
         26:c3:47:56:cc:f9:29:82:a4:9a:a7:aa:60:14:ed:fd:b8:38:
         48:54:d8:c5:00:6d:58:9c:0c:15:1a:8d:c6:ee:f5:ef:39:b3:
         4b:66:a0:22:b4:8b:29:19:af:26:fd:78:59:0a:ff:dd:c1:9b:
         61:b2:9f:54:f6:4d:a4:74:59:a8:de:31:98:d0:c2:01:ef:01:
         51:9f:6f:9b:45:d5:dd:80:a4:39:ff:f5:dc:97:7e:ba:80:4e:
         ad:ae:6f:18:5a:4e:8d:0a:93:32:0b:16:c8:42:17:b5:b5:a2:
         07:5c:06:e1:f4:1e:e4:5b:33:42:5b:8c:8e:02:1c:51:03:eb:
         4b:12:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:06 2025 by rpki-client