Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e13cbf92-97ba-3b4a-bd26-7c915c76d1b8.roa
File:                     e13cbf92-97ba-3b4a-bd26-7c915c76d1b8.roa (raw, json)
Hash identifier:          chTuOulvA0hz2PIsi4WKfec98Bom9SAkrgxL0MQ+vKo=
Subject key identifier:   71:D2:AC:26:6E:91:60:97:BC:C3:62:97:92:B6:FA:27:C1:03:DD:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C118D10BB7C566FC0891DB0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e13cbf92-97ba-3b4a-bd26-7c915c76d1b8.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        73.158.10.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:8d:10:bb:7c:56:6f:c0:89:1d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=1c4e9ccd-5291-4f21-a1f3-a635346649e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8c:14:c9:39:ef:f9:4c:6a:f0:d3:24:38:9f:
                    d0:e6:24:9e:4d:e6:df:2a:55:e7:e9:e6:e2:52:e2:
                    bb:3b:f7:e0:3d:4d:ca:82:9b:83:05:bb:57:5b:28:
                    8a:06:ad:0d:5e:9c:ce:02:91:63:79:50:96:0a:9c:
                    70:2b:06:56:81:d5:06:4d:42:cc:d5:1d:7e:a7:ee:
                    b4:e6:c0:f1:a5:e1:03:ce:a1:e5:54:14:7d:1f:b4:
                    38:41:08:b1:03:fc:ab:ec:e8:aa:45:35:ca:61:d7:
                    00:36:a1:9e:8c:47:b6:a9:83:a8:bf:b6:03:af:2f:
                    de:77:e8:64:4a:05:48:aa:e4:ca:c1:bc:ca:14:a9:
                    7b:dc:92:8a:cb:22:b5:44:58:c1:a1:91:4d:47:b1:
                    4b:7e:a9:88:7d:23:8e:e1:33:19:05:3f:35:55:e7:
                    a2:47:c0:cb:39:bc:a0:91:17:13:2f:98:c7:75:a8:
                    f5:55:8c:75:11:cd:34:b2:16:cf:06:6b:a5:16:42:
                    5d:d9:0c:61:19:0a:b4:fb:0d:bb:94:1f:a4:25:c0:
                    2a:d7:f0:51:80:b0:de:f8:b3:05:6b:b0:c0:2b:03:
                    d7:83:b6:68:bb:b9:70:b8:4a:1d:0c:ae:32:ba:a0:
                    03:77:4f:bf:f6:e0:5f:2f:67:c3:25:cc:75:35:b3:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D2:AC:26:6E:91:60:97:BC:C3:62:97:92:B6:FA:27:C1:03:DD:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e13cbf92-97ba-3b4a-bd26-7c915c76d1b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.158.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c5:8f:7e:ff:41:c3:ac:1d:37:c4:d9:e9:bb:5d:81:ed:4f:
         55:ba:62:40:c2:7b:47:d0:fd:55:e1:b9:8a:f5:b9:44:e5:8f:
         36:85:1a:38:d7:99:48:35:cd:dd:85:2f:dd:2c:64:7c:37:df:
         bb:a4:bd:71:bb:18:5c:1e:06:34:e9:4a:ed:a7:01:b4:8d:e7:
         2e:59:df:bb:db:f5:ac:d9:b5:95:b8:ef:b6:23:a3:b9:e5:ff:
         50:8a:b9:93:30:24:14:57:e7:64:96:15:b4:bf:a0:4d:ed:84:
         cc:33:99:00:c6:9a:07:ad:fc:52:ef:37:b9:1d:2c:5e:26:b2:
         94:51:04:93:73:e5:fa:6c:c6:bd:5a:7c:cb:19:ba:af:83:a9:
         b7:a7:1c:76:b9:fd:d2:b0:6b:dd:4e:00:e4:84:93:f1:ed:4f:
         55:d3:44:00:40:3b:f0:f0:40:9d:9f:5d:02:73:be:c2:cb:cc:
         f0:8a:7e:0a:f9:14:5d:5b:a9:e5:6c:e8:b4:7d:8d:8f:d6:0e:
         c0:c8:cd:c9:84:e2:ab:86:21:96:98:e7:cc:ad:4c:f3:fe:16:
         54:58:4b:aa:ef:76:3f:fe:de:26:2b:42:31:ed:1e:96:8e:32:
         a7:9b:2a:05:03:ef:34:b3:34:b9:4b:44:bf:c8:fa:a2:2e:d9:
         b8:41:ac:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:40:53 2025 by rpki-client