Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0324110-2028-371e-84ef-ffcc990e79bf.roa
File:                     c0324110-2028-371e-84ef-ffcc990e79bf.roa (raw, json)
Hash identifier:          Fc3vgbQOqT3jnz4fW6JwlDRIHfK5WJaF0p3ezTKgjt4=
Subject key identifier:   D5:94:CB:B5:3F:94:AC:94:76:9D:9A:50:06:33:34:4C:8D:48:09:AB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143E9B92986FE7E38FE99300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0324110-2028-371e-84ef-ffcc990e79bf.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.47.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3e:9b:92:98:6f:e7:e3:8f:e9:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=8a85cd41-a6c1-4fdf-93f7-b589325266e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:99:86:8d:58:6b:8b:5c:2d:4f:6d:f2:c4:
                    9b:fe:1f:2f:36:fd:b4:23:d5:d4:b0:81:d2:93:87:
                    b4:e5:10:24:73:f6:9d:a2:65:d5:9c:c8:e4:81:7b:
                    81:63:1e:32:26:ac:90:18:73:b1:94:90:be:69:60:
                    cf:29:53:a8:de:53:62:58:93:21:12:98:1c:04:d6:
                    42:8c:a6:c2:f8:49:23:17:ef:58:a4:36:c5:37:02:
                    07:1c:da:85:e8:eb:c9:57:3c:3c:44:31:17:42:45:
                    8b:ae:77:e9:db:da:f1:96:a6:c7:1b:3b:65:a2:ec:
                    84:df:24:6e:ef:15:7e:c5:b1:d8:3d:f1:73:d2:bc:
                    1e:2b:48:94:6e:21:49:ab:db:79:7a:cb:2a:12:72:
                    5b:1e:5d:e1:d3:ab:fd:26:2d:df:ec:4f:1a:bb:6f:
                    aa:19:34:d6:f1:5b:e4:74:72:00:0c:b0:73:c6:57:
                    81:c4:26:c5:84:81:3b:07:60:be:f2:68:6f:42:a3:
                    5d:c7:c5:69:68:42:71:43:1c:5a:84:d6:26:59:fb:
                    c8:16:7e:8b:05:00:56:7c:75:ab:ad:f6:56:67:7c:
                    00:d2:ee:0b:42:86:45:e5:89:4f:6c:d3:75:7d:56:
                    73:de:14:d0:6b:a2:98:55:94:ba:b8:44:35:a1:10:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:94:CB:B5:3F:94:AC:94:76:9D:9A:50:06:33:34:4C:8D:48:09:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0324110-2028-371e-84ef-ffcc990e79bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.47.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d8:f7:9d:34:88:71:c0:3d:4a:20:96:c0:d6:55:68:02:94:
         d3:f5:0c:31:e8:c8:fd:bf:73:05:07:39:d8:ff:2c:77:d0:78:
         22:8c:64:c0:58:56:9e:2f:95:22:2e:f6:37:ca:fc:64:10:b7:
         51:b7:c1:26:78:5a:d3:bc:5d:d4:0f:b1:74:1c:71:66:37:db:
         50:fd:98:9f:ff:fa:81:18:ba:0b:b8:77:36:c6:ad:ed:0e:28:
         d0:91:85:98:1d:0d:5c:b1:07:bf:32:91:78:25:01:fa:a6:11:
         d9:20:ac:81:1d:b4:20:82:2e:cc:fb:d6:90:c3:e4:55:68:85:
         c2:18:6e:09:a3:c4:cd:94:2d:5b:03:e6:a6:18:5b:9f:fc:1a:
         1c:fc:2c:49:97:00:7d:b9:90:a3:c9:af:2f:64:20:a3:72:24:
         52:59:bd:76:0e:42:4a:be:03:67:4a:ff:7f:6c:d4:e3:0e:e6:
         3f:a8:d8:c6:90:60:8e:63:12:24:12:4a:21:8f:81:1b:da:93:
         c0:f9:c3:71:ee:06:52:47:92:18:74:7c:ed:3f:80:ce:8a:a1:
         77:89:18:fb:8b:39:b3:77:df:98:f7:44:50:eb:6c:72:44:23:
         4c:d5:e1:17:59:0b:82:e3:b6:95:ef:c9:27:2d:b4:33:89:09:
         36:46:2b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:08:14 2025 by rpki-client