Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c08b6078-28e1-3447-bb63-375988c14c52.roa
File:                     c08b6078-28e1-3447-bb63-375988c14c52.roa (raw, json)
Hash identifier:          J29pdoGmcAa2UOsdvUON+bj8CSspwPW+Ei1s/X3/vko=
Subject key identifier:   6E:74:1D:F6:3B:4B:BE:E0:57:A9:01:5C:94:E8:2F:26:AB:9F:37:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C10FCC0073A6DF366F0A200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c08b6078-28e1-3447-bb63-375988c14c52.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        73.146.10.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:fc:c0:07:3a:6d:f3:66:f0:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=b6b57868-f70c-418b-804d-6fffedf22ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3a:80:a5:df:5a:ed:df:e8:6b:39:ab:3b:71:
                    ba:28:de:a9:cb:a8:d2:e4:06:dc:ad:3d:0b:4a:1e:
                    d5:d4:3a:19:6f:4a:42:a1:e5:d9:e7:4f:8c:9b:30:
                    59:d8:5f:ff:13:09:d1:fb:b4:75:2c:5e:59:eb:b1:
                    d5:98:c6:d6:4c:15:64:64:e9:da:b8:c7:b3:08:37:
                    6a:03:29:15:e5:69:e5:31:e8:01:da:0d:f0:96:d9:
                    35:79:e6:c0:80:04:1e:cb:d7:c3:d5:a8:0f:8c:84:
                    40:6a:8f:be:a4:8b:63:74:6e:fe:07:97:e1:27:b4:
                    2c:cc:e1:6f:77:0d:9a:1f:3e:78:3f:0e:fe:50:e1:
                    53:15:eb:78:ca:24:da:1c:1d:fd:43:f0:26:41:fa:
                    c1:02:5b:d8:e3:c6:14:7f:cf:66:61:96:68:3c:5d:
                    dd:20:27:7b:15:be:19:d2:9b:69:25:92:22:eb:15:
                    83:22:b1:5c:6d:81:22:d6:5e:a9:56:97:6e:f8:74:
                    fa:91:48:8d:7d:71:7f:d6:83:aa:ff:18:07:52:a8:
                    da:d6:09:31:3c:38:be:29:d6:db:f9:20:fb:30:3d:
                    ed:e3:15:89:92:ce:76:c0:40:b0:78:5b:45:f6:71:
                    73:f7:53:c0:9e:27:cf:46:75:c0:ab:1f:84:db:19:
                    68:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:74:1D:F6:3B:4B:BE:E0:57:A9:01:5C:94:E8:2F:26:AB:9F:37:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c08b6078-28e1-3447-bb63-375988c14c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.146.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b2:ab:92:44:25:6b:a2:56:b6:e6:04:9c:01:f1:89:87:65:
         9d:56:86:8a:ef:bf:1d:27:ad:64:98:f0:8a:74:e6:af:33:3d:
         31:78:25:02:c8:7e:d5:5d:23:d6:09:f6:98:9c:1e:04:a9:e3:
         10:57:6b:79:ce:62:f9:fe:ea:dc:d7:81:ba:39:c3:41:a7:d3:
         7d:06:38:18:78:81:d3:77:52:0e:76:b2:ac:01:a2:37:4c:71:
         a8:67:60:61:4e:07:b8:97:d2:9d:5d:64:1b:e5:1e:f8:b4:7a:
         fb:2c:a6:0b:96:b1:21:1c:ca:b1:6c:ad:92:73:2a:00:e7:60:
         be:6a:43:59:f5:4b:5e:fa:ff:3e:5e:e5:f3:9a:29:ef:3e:24:
         ac:28:fe:1a:8f:9c:52:56:95:50:f4:f5:b6:5e:70:bb:42:ad:
         78:11:f7:11:10:c4:92:ad:c5:1f:97:59:2b:eb:5d:4b:a3:a3:
         7f:4c:fa:2a:e7:49:33:13:45:4d:d8:68:92:69:47:d9:b8:df:
         fd:42:e8:fa:d4:75:0a:7d:09:80:18:45:5b:1c:7d:85:5c:e7:
         da:20:81:07:21:e6:03:89:19:a4:34:25:f8:fa:1c:05:21:0c:
         f9:9c:2b:49:7c:6a:05:c2:a4:46:49:9d:a6:e9:92:07:ca:56:
         2b:e1:91:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:17:26 2025 by rpki-client