Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2b4219a-bbe2-327f-9064-a921b09bdd05.roa
File:                     c2b4219a-bbe2-327f-9064-a921b09bdd05.roa (raw, json)
Hash identifier:          ZV3VS4z8kJ7tCM2h6w2NL7/nLU5Lz7zUXBRD3Rjwj0o=
Subject key identifier:   8C:39:75:38:41:D8:EB:1A:11:90:9F:14:6E:D0:50:B8:1E:76:B8:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C11FFF133304680B061A080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2b4219a-bbe2-327f-9064-a921b09bdd05.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33659
IP address blocks:        73.150.120.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:ff:f1:33:30:46:80:b0:61:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=d4c80d3a-02a3-4a56-a688-fcdf7bc67d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a4:86:62:7d:a7:81:e0:a4:d4:45:61:23:7a:
                    b5:05:9d:9e:2f:18:c6:cd:47:eb:9c:5d:5a:7a:9b:
                    f4:97:ac:4f:e3:34:18:dd:75:9d:31:4e:05:1c:e2:
                    03:06:7c:70:12:c0:6b:e8:56:eb:82:f2:10:f8:a5:
                    16:71:17:24:64:35:dd:44:a2:bb:6c:2f:40:61:b8:
                    08:54:4f:fe:07:a3:17:30:f6:bf:49:c0:c5:2b:dd:
                    1f:b5:5d:84:23:32:60:38:14:1f:11:9b:a9:fe:02:
                    3f:54:34:46:21:b4:ca:23:89:a9:b6:88:93:0f:4b:
                    06:aa:87:3a:a0:ce:9f:00:a0:b6:65:7f:48:78:91:
                    2c:f7:17:b7:07:7e:40:57:a7:b0:e1:53:8a:78:f1:
                    cb:e5:81:26:c2:bd:b1:19:45:b3:e8:01:b2:30:a8:
                    5e:59:7c:85:75:a5:1a:b4:a5:86:7e:9e:3b:b8:8a:
                    19:21:df:7d:1c:6e:d3:8d:92:0d:f8:2a:0e:68:f5:
                    c9:83:28:43:68:ac:c7:84:55:8d:81:9b:c1:0c:e8:
                    3e:fc:30:39:26:3c:f9:99:7a:42:72:f6:6a:3f:d7:
                    59:f1:44:3b:05:d3:fa:b5:51:ae:5b:36:ee:2d:85:
                    50:45:5b:cc:db:e6:43:b4:9d:77:23:2a:18:10:f7:
                    ec:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:39:75:38:41:D8:EB:1A:11:90:9F:14:6E:D0:50:B8:1E:76:B8:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2b4219a-bbe2-327f-9064-a921b09bdd05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.150.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:9c:99:9c:ad:9a:6b:12:a3:4f:d8:39:e1:0b:15:8c:13:9f:
         e8:3d:fe:aa:86:e1:bc:dc:10:a0:7f:32:74:e4:74:9b:35:6c:
         1f:46:27:4b:68:30:35:41:65:4e:81:72:01:64:35:4e:5a:f7:
         d8:7f:3e:a1:9a:8d:3d:3a:78:84:d1:a1:f7:fd:f4:e9:de:c3:
         ed:88:1f:ba:51:a4:56:96:c0:7e:fd:97:7f:cc:f5:09:b6:b9:
         4e:d6:53:30:cf:06:5b:5d:55:73:1d:8e:79:4a:11:32:63:32:
         5b:a9:54:81:ae:55:fe:39:5f:20:cf:32:d5:e6:db:61:7c:34:
         36:58:ce:76:f5:49:87:dc:4e:fa:33:7d:c5:f4:bc:eb:37:4e:
         ca:02:90:98:4b:c7:18:cb:48:36:7e:f6:1e:22:10:3f:62:ff:
         3e:6d:9b:ef:92:60:45:af:35:ff:be:9e:8f:48:58:93:63:ba:
         93:2f:e4:6d:4e:22:ee:a6:5f:9c:d8:1d:b5:fb:3f:58:9e:fc:
         bf:f3:f2:87:69:c7:7a:97:7c:a7:40:eb:c6:0b:d1:f3:af:5b:
         c0:70:5a:13:82:a3:b6:57:c0:93:90:a7:89:04:7c:9b:a6:6d:
         31:b4:e8:63:a0:47:fb:ad:f5:6f:cb:86:de:5f:96:32:59:79:
         02:0d:83:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEf/xMzBGgLBhoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZDRjODBkM2EtMDJhMy00YTU2LWE2ODgtZmNkZjdiYzY3ZDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6SGYn2ngeCk1EVhI3q1BZ2eLxjGzUfrnF1a
epv0l6xP4zQY3XWdMU4FHOIDBnxwEsBr6FbrgvIQ+KUWcRckZDXdRKK7bC9AYbgI
VE/+B6MXMPa/ScDFK90ftV2EIzJgOBQfEZup/gI/VDRGIbTKI4mptoiTD0sGqoc6
oM6fAKC2ZX9IeJEs9xe3B35AV6ew4VOKePHL5YEmwr2xGUWz6AGyMKheWXyFdaUa
tKWGfp47uIoZId99HG7TjZIN+CoOaPXJgyhDaKzHhFWNgZvBDOg+/DA5Jjz5mXpC
cvZqP9dZ8UQ7BdP6tVGuWzbuLYVQRVvM2+ZDtJ13IyoYEPfsEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIw5dThB2OsaEZCfFG7QULgedrgTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzJiNDIxOWEtYmJlMi0z
MjdmLTkwNjQtYTkyMWIwOWJkZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSZZ4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+cmZytmmsSo0/YOeELFYwTn+g9/qqG4bzcEKB/MnTkdJs1bB9GJ0to
MDVBZU6BcgFkNU5a99h/PqGajT06eITRoff99Onew+2IH7pRpFaWwH79l3/M9Qm2
uU7WUzDPBltdVXMdjnlKETJjMlupVIGuVf45XyDPMtXm22F8NDZYznb1SYfcTvoz
fcX0vOs3TsoCkJhLxxjLSDZ+9h4iED9i/z5tm++SYEWvNf++no9IWJNjupMv5G1O
Iu6mX5zYHbX7P1ie/L/z8odpx3qXfKdA68YL0fOvW8BwWhOCo7ZXwJOQp4kEfJum
bTG06GOgR/ut9W/Lht5fljJZeQINg9I=
-----END CERTIFICATE-----