Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d27e6609-6d76-3101-8a0a-2b0c043689dd.roa
File:                     d27e6609-6d76-3101-8a0a-2b0c043689dd.roa (raw, json)
Hash identifier:          KNx7+c8JsufUCXFsVutiCGv8w/S60VkMisT6lzaCK4w=
Subject key identifier:   91:A0:2C:DA:2B:37:9C:2B:9B:BE:EB:C7:9C:4B:F7:3C:19:88:D6:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C129AF0D30CD56888323240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d27e6609-6d76-3101-8a0a-2b0c043689dd.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        73.146.150.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:9a:f0:d3:0c:d5:68:88:32:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=c670e082-19f5-4e9a-a259-8a4ebba31a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0e:cc:45:76:74:a4:fe:91:c1:d5:f9:34:bf:
                    f8:d0:bf:a3:f9:3b:9a:0e:0b:df:ec:f1:b0:51:38:
                    52:5c:74:01:ba:f1:43:61:e0:43:a8:13:12:3b:74:
                    2f:08:85:d4:18:1b:a9:d4:17:77:5c:a8:72:71:ca:
                    2a:a3:c3:f7:1a:8f:56:ba:89:4a:80:d1:96:9d:70:
                    61:85:66:70:b6:0f:79:c1:59:3b:89:6d:78:51:e4:
                    88:19:58:67:34:b7:9f:cd:d3:fe:98:95:b2:02:e7:
                    82:ba:8a:f7:4e:f8:71:2c:14:6e:50:53:d8:24:c8:
                    43:29:41:9e:33:23:ef:36:0d:ba:59:ca:86:f5:bb:
                    6b:41:fc:03:78:e7:21:ea:9a:f1:c3:6d:f3:1b:49:
                    69:65:a7:58:dd:42:4d:34:b4:13:e4:95:e4:8f:4d:
                    a6:ab:5b:9a:41:b8:9d:be:91:ea:89:f1:77:70:eb:
                    32:2b:1b:68:2e:9c:25:a0:e9:bf:3d:73:43:9f:06:
                    2c:58:9b:b3:c8:b9:27:59:86:47:a0:e1:c7:f6:b7:
                    ff:2f:09:47:69:34:0b:00:9e:8c:ab:5d:db:5a:07:
                    f4:8f:96:93:e4:29:71:ea:4c:26:c0:3e:80:4e:ae:
                    96:ca:0a:8a:d7:5d:c0:f4:33:f4:b7:07:27:c7:f8:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A0:2C:DA:2B:37:9C:2B:9B:BE:EB:C7:9C:4B:F7:3C:19:88:D6:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d27e6609-6d76-3101-8a0a-2b0c043689dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.146.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1a:3b:42:78:f7:2f:06:90:d6:6e:0c:a2:61:5b:da:c9:c6:
         c7:2f:b3:05:11:c9:db:80:81:90:85:66:9d:2e:86:4d:2c:a6:
         80:50:08:6f:61:a7:5a:72:6a:e5:d3:e1:67:4e:fd:92:2e:73:
         cd:46:12:6b:3c:29:4c:c6:a6:7d:3f:7f:6d:c1:93:b9:96:f4:
         48:95:88:90:3b:2f:3e:57:91:ee:6e:b6:b5:9c:ab:4c:28:32:
         b2:b0:dd:a0:a0:56:66:bc:c2:2a:eb:28:3a:6c:d6:ae:ad:c6:
         b5:5f:a1:ee:eb:32:30:35:6c:8c:16:5e:da:c6:2e:82:a1:f8:
         84:e8:cf:e4:94:fe:3b:2e:ed:45:00:6e:f4:2e:21:37:3f:4a:
         58:4c:81:ce:79:ba:99:33:c3:ef:e9:49:da:97:5c:6a:d8:40:
         05:06:53:44:a4:e8:88:a4:b6:ad:67:71:e7:d9:5e:75:0c:0e:
         0d:de:ec:4b:d9:fb:6a:70:d8:83:8b:d2:e3:bd:bb:30:f7:a2:
         e7:f8:2d:71:c1:df:9b:1d:13:01:3d:97:70:5b:00:3c:62:58:
         f2:13:6e:fe:4d:46:1b:da:f0:6c:fe:01:30:63:4a:8d:d1:ba:
         e5:01:1c:6f:28:0d:01:58:a8:0b:eb:7e:6a:df:aa:32:1b:fb:
         e0:5a:c1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----