Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb6bfc1b-4387-31eb-8bac-67d4d67943fc.roa
File:                     cb6bfc1b-4387-31eb-8bac-67d4d67943fc.roa (raw, json)
Hash identifier:          /zHHNGWx7ICzQAruc2iKYpsZcoRBtFRIlTi9GQ3ajhg=
Subject key identifier:   92:A0:B3:D4:BE:F3:7A:3B:2F:C9:40:9F:E8:EC:69:28:58:A9:4C:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143E5F308E2C838C8089F900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb6bfc1b-4387-31eb-8bac-67d4d67943fc.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.234.254.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3e:5f:30:8e:2c:83:8c:80:89:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=8b105318-e1e8-46a5-9e65-c3bec65e2656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:f4:7d:05:4e:1d:ab:04:33:c0:8d:e3:31:
                    96:b7:45:1a:37:d8:69:a2:fa:70:cb:e0:f6:c3:68:
                    fd:dc:05:d9:dd:55:94:c5:10:c2:ac:02:c3:fa:6e:
                    ab:68:a4:00:78:39:4e:c6:f6:dd:03:3e:ba:66:17:
                    b9:b1:16:87:90:98:59:37:69:6e:47:77:d6:9e:3b:
                    ba:7e:8a:e1:b4:ac:b7:2f:b0:d6:ec:66:c9:d7:af:
                    fc:f3:2d:fe:ee:43:22:c1:4c:1d:c4:8b:73:b3:05:
                    bc:fa:b3:f9:e0:28:a2:68:4f:89:bf:58:ee:aa:79:
                    ba:ba:11:dc:c7:3a:eb:ce:91:b0:71:c3:de:e4:20:
                    5f:a3:d2:2b:8d:ee:3a:40:3e:85:55:7a:2f:00:6e:
                    8a:7d:73:58:d2:1b:29:7f:6b:d3:c1:ab:b0:e0:83:
                    c5:22:57:1f:72:a6:c2:6b:55:54:09:82:a9:ff:21:
                    93:40:7d:e7:08:d4:bf:ed:fd:21:4f:40:58:44:32:
                    bb:95:5a:da:26:0e:4e:c7:80:00:e0:7c:ed:d8:a4:
                    5b:81:56:c3:cb:20:dc:4a:71:ca:ed:8d:64:25:95:
                    8e:10:70:97:b2:63:98:82:b1:fa:23:8d:70:b5:6a:
                    9f:a3:a3:a1:3c:1e:1f:ee:08:0c:a8:65:91:d1:a1:
                    4a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A0:B3:D4:BE:F3:7A:3B:2F:C9:40:9F:E8:EC:69:28:58:A9:4C:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb6bfc1b-4387-31eb-8bac-67d4d67943fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.234.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:10:4f:1a:37:1e:95:72:21:96:45:6e:41:af:32:3b:a5:28:
         93:98:6b:5d:58:20:fe:dd:3b:a4:8e:4a:3f:60:95:c8:fe:7a:
         ac:66:9e:7f:bf:16:27:4b:d9:09:24:f2:09:5d:5c:5e:ab:99:
         39:f8:39:35:73:09:3a:72:ae:72:71:89:fe:57:d3:22:64:4a:
         a9:85:a6:89:3c:e0:af:22:30:6e:ae:a2:88:7b:cd:b4:ed:e4:
         8e:db:56:34:dd:d2:b2:a1:80:30:f2:43:50:28:d9:cc:43:a0:
         6b:a2:a2:84:a7:3a:f2:bc:b7:9d:62:a1:ac:ea:9f:42:ab:db:
         6c:8e:b2:dc:ac:58:65:45:61:79:47:ab:d3:fd:d2:0e:7c:6c:
         46:f9:bd:8d:d8:dd:d4:e7:d9:d6:b6:1e:19:49:51:6f:0f:e4:
         14:87:5b:7d:dd:4a:5b:1d:12:be:38:3c:82:b5:a2:5d:ce:ea:
         85:f6:a9:61:bd:59:4f:c9:6e:99:ae:a6:9e:b6:96:bb:78:56:
         31:b2:9e:d1:a7:9a:26:2e:95:01:c0:79:6c:c4:e1:16:81:da:
         60:8d:a4:7f:53:55:92:3f:b5:f7:ec:6e:88:16:51:b0:28:fa:
         cd:d2:35:8e:13:12:91:ac:22:45:63:ad:ea:d0:0b:b0:0d:59:
         4e:94:6d:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPl8wjiyDjICJ+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
OGIxMDUzMTgtZTFlOC00NmE1LTllNjUtYzNiZWM2NWUyNjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy70fQVOHasEM8CN4zGWt0UaN9hpovpwy+D2
w2j93AXZ3VWUxRDCrALD+m6raKQAeDlOxvbdAz66Zhe5sRaHkJhZN2luR3fWnju6
forhtKy3L7DW7GbJ16/88y3+7kMiwUwdxItzswW8+rP54CiiaE+Jv1juqnm6uhHc
xzrrzpGwccPe5CBfo9Irje46QD6FVXovAG6KfXNY0hspf2vTwauw4IPFIlcfcqbC
a1VUCYKp/yGTQH3nCNS/7f0hT0BYRDK7lVraJg5Ox4AA4Hzt2KRbgVbDyyDcSnHK
7Y1kJZWOEHCXsmOYgrH6I41wtWqfo6OhPB4f7ggMqGWR0aFKjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJKgs9S+83o7L8lAn+jsaShYqUxVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I2YmZjMWItNDM4Ny0z
MWViLThiYWMtNjdkNGQ2Nzk0M2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASer+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM8QTxo3HpVyIZZFbkGvMjulKJOYa11YIP7dO6SOSj9glcj+eqxmnn+/
FidL2Qkk8gldXF6rmTn4OTVzCTpyrnJxif5X0yJkSqmFpok84K8iMG6uooh7zbTt
5I7bVjTd0rKhgDDyQ1Ao2cxDoGuiooSnOvK8t51ioazqn0Kr22yOstysWGVFYXlH
q9P90g58bEb5vY3Y3dTn2da2HhlJUW8P5BSHW33dSlsdEr44PIK1ol3O6oX2qWG9
WU/Jbpmupp62lrt4VjGyntGnmiYulQHAeWzE4RaB2mCNpH9TVZI/tffsbogWUbAo
+s3SNY4TEpGsIkVjrerQC7ANWU6UbZc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:08:38 2025 by rpki-client