Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e66de025-60a5-3265-98c7-c848def38da7.roa
File:                     e66de025-60a5-3265-98c7-c848def38da7.roa (raw, json)
Hash identifier:          ixbrV97erzTfsZeU9f+PXwwCbiE0AkMAZzEfxEGNLSs=
Subject key identifier:   A3:0A:C2:34:04:5C:60:12:1F:6F:73:C6:53:6C:44:C8:ED:56:40:B0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C125632096425A9320DDCA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e66de025-60a5-3265-98c7-c848def38da7.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        73.233.240.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:56:32:09:64:25:a9:32:0d:dc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=253097d5-8afe-49f8-a6fb-0f29e70797e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:f1:bf:b7:38:db:6c:de:ba:df:90:51:15:
                    ac:3d:67:3d:95:9d:a0:21:dc:bf:51:93:10:47:55:
                    bd:e3:53:4d:4b:11:fd:3b:0c:39:88:09:25:97:8a:
                    22:91:3f:76:fd:cc:18:bc:4f:c3:38:da:f9:97:f5:
                    e8:1c:9c:85:5d:b0:f0:ea:fb:08:bd:31:69:d2:ca:
                    4f:03:d5:88:b2:3b:2a:cf:54:0d:b3:fc:a7:9b:86:
                    ed:c2:fc:8a:dc:68:4b:47:4a:9d:f2:38:98:5d:5b:
                    e9:6c:4c:60:70:d6:14:4a:26:b3:78:63:5f:7a:e6:
                    59:e2:37:c5:dc:cc:4e:f4:9a:7f:39:ad:27:95:6f:
                    71:87:77:5c:46:c2:42:36:c8:fa:86:1d:8c:eb:5b:
                    f8:77:32:cb:cb:ec:67:dd:72:b6:23:77:f1:c6:52:
                    75:33:17:83:47:1e:69:f8:35:b2:a3:98:14:dc:df:
                    d5:2d:6f:b2:e1:ff:73:c0:51:73:1e:1b:fe:27:59:
                    aa:56:e4:dc:98:2d:e2:68:47:4a:f1:b2:32:d5:f9:
                    19:01:ef:c5:10:24:e7:da:32:ea:69:96:a4:8d:db:
                    11:8f:48:52:50:20:c5:14:47:ef:1d:c7:f2:00:bd:
                    77:8d:e2:6b:ee:62:3c:c6:79:1a:cf:61:41:6c:67:
                    f0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0A:C2:34:04:5C:60:12:1F:6F:73:C6:53:6C:44:C8:ED:56:40:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e66de025-60a5-3265-98c7-c848def38da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.233.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:9e:ca:bd:40:80:7f:05:9e:ea:c6:94:97:ae:be:b2:4e:00:
         8d:65:8d:07:dd:cb:6c:42:1e:80:d2:60:39:da:b9:ca:32:1d:
         83:d6:87:76:63:4e:d5:11:2c:63:21:ce:e3:62:ab:fb:d3:3d:
         73:74:0c:b8:c6:c6:b8:d8:23:3c:fa:1d:03:74:1c:6e:03:ca:
         dc:90:58:40:e9:af:79:2e:e9:1c:e1:dd:a4:7e:9d:c8:d6:fd:
         24:cb:f2:de:63:d9:f6:29:fc:ec:10:24:1e:7a:58:56:54:23:
         61:ec:69:a6:96:99:21:83:ff:26:f8:26:7b:2a:af:74:6a:68:
         94:4b:a3:f8:33:f2:b3:f0:c6:7c:16:f3:e8:47:87:23:79:59:
         ee:c2:aa:f6:ce:f1:fd:0d:8c:53:e5:e2:b1:09:ba:f6:f4:0b:
         3c:16:21:4d:60:b5:af:fb:01:0d:18:bc:66:c5:b7:18:c9:f5:
         ee:e7:42:ef:30:83:d9:49:0c:ca:58:26:b8:94:dc:a6:5b:48:
         08:0c:36:fc:01:80:97:58:71:45:fa:6e:48:33:98:99:8d:4c:
         19:e7:a4:f8:69:1e:3d:d4:2f:cd:7b:ac:7b:af:59:4b:cd:bd:
         aa:e0:13:bd:74:d6:81:f3:1d:8c:77:28:89:06:84:6a:55:45:
         9a:fc:40:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:00:28 2025 by rpki-client