Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d28b0c70-c9ab-32f1-bf57-d6b9b50dcd0b.roa
File:                     d28b0c70-c9ab-32f1-bf57-d6b9b50dcd0b.roa (raw, json)
Hash identifier:          i+9K9t/gMoUhplp6R7Wjl//R+zVXtQMclfvC9t2tWkw=
Subject key identifier:   12:B2:BA:3F:18:79:E6:45:A6:44:DC:8F:53:E4:01:F1:C7:77:C8:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143DEE9432A10546FB652E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d28b0c70-c9ab-32f1-bf57-d6b9b50dcd0b.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.123.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3d:ee:94:32:a1:05:46:fb:65:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=6856a043-0bcf-452e-8e56-3a03421a1064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f4:5c:df:96:b4:60:41:41:ae:d3:f9:3d:41:
                    41:cc:03:46:d3:83:5d:35:37:22:ce:da:9c:28:2f:
                    0f:44:3c:10:8f:b8:3b:7b:8a:1c:78:43:44:8b:05:
                    50:ef:3d:b6:31:48:15:7a:f7:4a:e1:8a:4b:95:8d:
                    0d:32:37:64:cf:35:73:8e:a7:c2:0a:5f:27:d4:54:
                    0e:ee:44:f5:a5:22:13:38:49:8e:e1:b3:54:b7:b0:
                    c9:83:30:aa:59:44:70:93:55:13:d8:d1:79:12:98:
                    d9:09:6f:53:7e:c1:5f:ee:02:6d:52:f3:44:ac:0f:
                    55:56:1d:b3:70:84:d9:57:c4:f4:cc:2a:00:d8:45:
                    03:74:3a:d8:c0:82:40:d5:ad:3b:ec:19:07:da:38:
                    ee:df:86:fb:e0:04:bd:20:83:79:8a:48:35:dd:83:
                    77:02:4b:87:86:8a:07:f1:a4:12:c5:96:cc:ae:2c:
                    b0:8b:2e:8d:62:14:3a:2b:5e:18:d8:6b:1c:4d:ca:
                    8c:c2:73:dd:34:a9:fe:86:e3:b3:91:5f:13:04:2b:
                    ad:6c:bc:6b:d4:60:36:b8:05:96:e8:3d:f4:f4:ed:
                    e5:a3:00:4d:3a:8a:49:73:2d:38:5d:c4:7b:59:f1:
                    7c:3a:bd:5c:00:5d:a9:61:be:fb:e8:f7:e5:2a:6d:
                    80:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B2:BA:3F:18:79:E6:45:A6:44:DC:8F:53:E4:01:F1:C7:77:C8:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d28b0c70-c9ab-32f1-bf57-d6b9b50dcd0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.123.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:46:0f:4f:cd:d3:99:6d:f2:95:d8:a3:b6:a9:b0:1d:b2:d8:
         3f:8e:10:f7:3b:7e:49:b4:5b:c7:34:db:63:68:d0:7e:57:3a:
         4d:ff:b1:ec:1b:d8:9e:23:9c:a7:47:0f:18:1d:5a:a9:0c:11:
         c9:a4:51:8f:ae:6b:a8:b7:42:b1:86:f1:41:28:af:0e:25:a0:
         e5:28:fb:0c:99:48:b2:04:56:62:2b:1a:f7:a2:c0:10:c2:f7:
         e8:83:d1:83:a3:41:5d:45:59:64:1b:3e:e9:4d:9b:f2:60:b7:
         9f:d9:4b:b1:e0:ca:82:b5:d2:cf:64:f3:fe:b8:2d:b9:48:5b:
         f5:98:7d:a6:83:97:93:8f:43:79:77:e4:e7:d3:a5:37:df:a2:
         c3:87:c6:dc:fa:70:e7:30:04:99:97:4c:6d:3d:dd:1d:11:d2:
         8a:fc:fd:7f:92:95:58:9b:ac:fc:2f:63:48:3c:a2:41:29:4e:
         df:60:49:ad:28:20:be:ab:bb:a3:19:85:69:98:db:e8:b1:80:
         da:a9:a7:b6:94:ac:aa:b0:95:72:ad:f3:d0:99:70:3f:5d:4e:
         be:61:d3:05:05:0e:9e:0d:44:1a:e0:a9:51:18:4f:ec:2f:fd:
         d8:f4:15:d9:0e:e9:82:c0:9e:32:19:c3:14:1d:fe:1d:b2:99:
         a8:3e:5f:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPe6UMqEFRvtlLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
Njg1NmEwNDMtMGJjZi00NTJlLThlNTYtM2EwMzQyMWExMDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/Rc35a0YEFBrtP5PUFBzANG04NdNTciztqc
KC8PRDwQj7g7e4oceENEiwVQ7z22MUgVevdK4YpLlY0NMjdkzzVzjqfCCl8n1FQO
7kT1pSITOEmO4bNUt7DJgzCqWURwk1UT2NF5EpjZCW9TfsFf7gJtUvNErA9VVh2z
cITZV8T0zCoA2EUDdDrYwIJA1a077BkH2jju34b74AS9IIN5ikg13YN3AkuHhooH
8aQSxZbMriywiy6NYhQ6K14Y2GscTcqMwnPdNKn+huOzkV8TBCutbLxr1GA2uAWW
6D309O3lowBNOopJcy04XcR7WfF8Or1cAF2pYb776PflKm2AqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBKyuj8YeeZFpkTcj1PkAfHHd8j8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDI4YjBjNzAtYzlhYi0z
MmYxLWJmNTctZDZiOWI1MGRjZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKBGD0/N05lt8pXYo7apsB2y2D+OEPc7fkm0W8c022No0H5XOk3/sewb
2J4jnKdHDxgdWqkMEcmkUY+ua6i3QrGG8UEorw4loOUo+wyZSLIEVmIrGveiwBDC
9+iD0YOjQV1FWWQbPulNm/Jgt5/ZS7HgyoK10s9k8/64LblIW/WYfaaDl5OPQ3l3
5OfTpTffosOHxtz6cOcwBJmXTG093R0R0or8/X+SlVibrPwvY0g8okEpTt9gSa0o
IL6ru6MZhWmY2+ixgNqpp7aUrKqwlXKt89CZcD9dTr5h0wUFDp4NRBrgqVEYT+wv
/dj0FdkO6YLAnjIZwxQd/h2ymag+X0k=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:22 2025 by rpki-client