Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbdea649-165f-394a-859b-c7ad8a2ad6d4.roa
File:                     dbdea649-165f-394a-859b-c7ad8a2ad6d4.roa (raw, json)
Hash identifier:          +rAd0eeen0tXFS0zEv6hMWF+hwjx73aPRQmhaOeLWeY=
Subject key identifier:   87:82:FD:77:0B:C7:63:6C:24:33:15:9F:23:1E:46:B5:0B:BB:98:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143E8261BF4C5CEB17DC4940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbdea649-165f-394a-859b-c7ad8a2ad6d4.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.38.194.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3e:82:61:bf:4c:5c:eb:17:dc:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=692f6f66-8510-4609-8c74-edb23f7e98b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8c:b7:fd:1a:28:42:8b:23:f9:e6:17:91:e4:
                    8c:03:75:fa:a2:68:7f:cc:84:76:b7:da:9f:e6:f9:
                    b4:0a:0c:45:c7:3c:61:55:cb:27:0f:6c:28:8c:b1:
                    56:25:9d:87:7b:2e:17:3f:bc:9e:4e:7b:49:f4:4f:
                    9d:ae:21:1b:00:00:1d:e9:38:68:58:26:ac:8a:9b:
                    28:87:ac:98:f5:64:78:27:9d:83:7a:0e:6d:d2:29:
                    5f:0c:e8:c9:f6:49:dc:3a:34:98:30:79:0b:96:a1:
                    86:05:ba:3a:e8:9e:bd:f5:1c:f4:77:59:8f:d0:d6:
                    7f:ef:96:3e:4f:3d:03:e6:d5:9a:f4:e8:b6:18:15:
                    74:b8:ea:9f:85:23:7d:ee:76:f4:64:b3:aa:53:02:
                    fc:22:ac:b7:cb:ef:2a:95:67:b3:a3:89:68:d5:1d:
                    a5:e4:43:71:9f:9c:98:f6:45:d1:b1:49:af:ef:4e:
                    7b:f5:6c:a8:17:9e:e1:58:3f:cb:78:b8:94:c7:89:
                    44:7f:c2:55:47:20:0e:12:93:cd:8b:d9:43:d5:5e:
                    ae:3b:cb:60:8b:13:ab:bc:1e:d2:6b:6d:a9:56:8b:
                    6f:05:23:f1:32:0f:16:f5:71:e1:3f:e4:41:3b:40:
                    9e:e6:62:1e:bc:cb:ac:8c:70:3f:79:ae:ee:e1:ce:
                    c5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:82:FD:77:0B:C7:63:6C:24:33:15:9F:23:1E:46:B5:0B:BB:98:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbdea649-165f-394a-859b-c7ad8a2ad6d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.38.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:4a:4b:e3:54:57:37:91:3a:04:4d:2f:c3:da:d0:59:a2:c4:
         07:86:fe:0b:ff:e3:38:cd:d5:d2:f9:17:a3:80:1d:f8:e3:cd:
         c7:e4:10:4f:2e:fc:3b:e7:f9:7b:ec:21:bb:dc:c6:21:fe:10:
         e8:c7:16:4c:2f:a5:e1:7c:53:c4:88:af:ed:e6:79:e6:4b:9d:
         c2:d6:13:d2:ea:35:97:38:00:f8:64:2a:b1:5c:d7:f4:58:93:
         06:7c:d6:f0:98:da:02:cc:93:6f:da:70:0e:b2:6f:92:26:84:
         bd:b3:f3:8e:d0:2a:77:46:4c:e1:91:e1:d0:2d:e6:47:eb:33:
         4c:0e:09:eb:f4:b0:42:35:4f:ca:74:10:37:3f:bb:a7:68:f1:
         66:76:6d:37:96:eb:4c:0e:ec:cd:59:db:d1:59:bc:40:72:84:
         77:7c:b7:f4:b1:f6:da:41:23:86:30:92:23:06:89:65:46:84:
         00:92:06:f5:1f:d8:55:71:0b:22:4a:ec:19:b5:89:d6:0a:3a:
         ff:df:5c:16:49:d3:d0:11:d9:b0:d9:04:99:02:20:10:22:94:
         65:20:4b:29:52:8d:48:27:c0:85:d6:2a:5a:c1:f4:09:0c:24:
         b0:a4:08:04:46:46:0e:dc:7e:6f:1f:b3:e3:b2:e7:40:33:50:
         43:21:c5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:15 2025 by rpki-client