Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8d18221-0d14-3ca8-b916-b8dd335d8bc9.roa
File:                     c8d18221-0d14-3ca8-b916-b8dd335d8bc9.roa (raw, json)
Hash identifier:          fRnGgjUM3DXSh4YJsbtxQZ+x8qWiDBgdAbWva9bLB08=
Subject key identifier:   8E:60:07:20:89:57:0C:17:F6:32:65:62:EE:2F:AF:4C:1B:75:7E:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C5B88C2550E4A0AFE6380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8d18221-0d14-3ca8-b916-b8dd335d8bc9.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        73.242.116.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:5b:88:c2:55:0e:4a:0a:fe:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=f587e3bd-debc-492e-b0f4-e7f6b5b83bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:22:d4:74:de:e6:d4:2a:59:6d:e9:99:8a:5a:
                    b5:9f:7d:c4:0d:fb:64:ed:c4:96:3a:88:1b:6b:b7:
                    fa:41:7e:21:fc:d6:64:2e:49:2e:bb:c7:52:fd:3f:
                    02:23:cf:64:96:46:8b:44:4c:e8:2b:b1:09:09:89:
                    47:7d:61:a6:f4:8f:21:e8:d4:d4:44:3a:b3:db:6b:
                    72:2b:5e:dc:7b:e2:fb:2e:f0:6b:24:71:23:42:d3:
                    f0:59:35:90:9a:6d:d4:87:7c:f8:17:b2:6f:a0:51:
                    ce:51:92:eb:28:9d:8b:54:3d:fd:a7:9c:3d:55:c2:
                    b6:9b:ce:b6:5d:93:31:cf:d8:c6:52:50:9b:3f:7c:
                    72:94:35:0d:04:08:e4:06:63:0a:b0:d8:14:33:de:
                    dc:a3:9f:2b:77:cb:fd:fe:00:dd:4b:d7:35:c1:f5:
                    bf:d7:d1:b5:95:c7:22:bf:c2:0a:bf:5b:c9:6a:23:
                    66:66:42:e1:7b:2a:16:7a:69:17:73:66:3e:5d:32:
                    64:5d:67:cf:79:7b:44:2b:56:ba:e9:05:61:c5:68:
                    bf:7c:53:ee:3a:62:c3:56:15:6c:f6:96:b8:8b:95:
                    37:97:95:cf:ef:32:eb:0b:95:f3:77:6e:83:88:76:
                    cc:91:30:48:1c:2e:89:24:70:97:a8:7d:86:66:d6:
                    ec:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:60:07:20:89:57:0C:17:F6:32:65:62:EE:2F:AF:4C:1B:75:7E:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8d18221-0d14-3ca8-b916-b8dd335d8bc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.242.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:91:b4:47:e0:b8:8f:05:ec:45:72:45:24:47:23:0a:a9:ee:
         9a:52:42:2e:20:ba:8a:5c:de:59:b9:b6:74:ef:c4:f3:df:bd:
         47:6c:b3:64:7e:31:ed:d0:83:20:79:8c:2c:56:93:56:b6:49:
         c9:a7:70:e1:a7:7e:6e:bf:e9:c3:e4:e9:35:92:a7:12:86:3d:
         ad:ad:60:75:4f:44:c8:5c:a7:66:9b:cf:ab:30:df:fb:dc:ee:
         d9:bf:1d:e3:c6:b8:e4:9b:70:46:69:67:48:22:b7:9f:ec:35:
         44:57:19:44:bc:35:af:c2:9f:62:ac:78:91:8b:a9:f4:e4:94:
         58:4f:da:dd:91:a7:9f:85:15:ab:95:ea:3d:cf:b5:12:f0:43:
         a5:c3:98:d6:f6:f4:d8:64:9c:07:aa:0e:d5:b1:31:26:a1:90:
         25:f9:95:5d:20:4d:1e:08:51:af:c7:92:b8:45:1a:16:27:40:
         79:9d:a4:25:4d:07:db:51:d8:8c:3d:ae:36:21:16:fb:de:a8:
         b4:c4:0e:26:63:83:3c:18:ae:32:df:7b:5b:42:d5:e5:5f:19:
         b4:97:42:64:e8:f2:b0:b4:3d:1c:8f:e0:f7:f8:41:cb:7f:0f:
         90:a3:cd:47:56:c9:0e:0e:7f:b1:ed:20:f8:27:f9:c2:e5:e7:
         78:45:0b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:55:29 2025 by rpki-client