Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6feb917-89bb-37c9-856a-4f4684a56f4c.roa
File:                     e6feb917-89bb-37c9-856a-4f4684a56f4c.roa (raw, json)
Hash identifier:          xg0r2o3g954mTwj+LE3MqBGsA4OLiQekdKarRZP+Dz8=
Subject key identifier:   2F:92:61:50:AF:65:3D:38:32:E6:10:4F:2A:C3:1D:77:F2:97:23:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143FFF9FFC698F304398B440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6feb917-89bb-37c9-856a-4f4684a56f4c.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        73.32.244.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3f:ff:9f:fc:69:8f:30:43:98:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=2583786a-3131-41d8-8cba-e8ac9cd2afa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:42:37:f1:9f:a9:15:cc:16:f5:f7:90:ad:18:
                    7e:77:7b:10:7e:fb:65:94:5d:b4:f9:b6:ad:21:ee:
                    af:96:57:59:d6:8b:bc:66:c4:a6:8d:d1:58:fb:a0:
                    19:fb:e5:3c:9b:8b:75:0e:2e:a7:76:8f:f3:40:41:
                    bd:3d:65:9b:fb:90:04:1e:ba:f1:b2:70:bf:21:82:
                    84:c4:17:af:56:f3:e7:9b:6c:fe:3e:22:9c:4d:3e:
                    d1:8d:6c:bb:93:87:7f:92:0c:4e:10:51:5a:7d:75:
                    aa:1e:c6:7b:39:c5:a7:0a:e5:d7:c6:b9:d1:6b:35:
                    41:2b:06:b8:e0:29:d5:22:1f:cb:29:5e:ae:d2:78:
                    d1:c2:28:be:3b:f8:c6:c9:c6:bb:21:a5:23:1f:cf:
                    60:52:f5:38:a4:7f:d6:74:f4:ae:4e:af:bf:c9:aa:
                    c1:a6:a1:ba:c0:7d:95:08:fb:47:9a:c4:31:c9:9a:
                    05:b3:f5:35:b1:00:71:a0:96:ba:86:fb:6a:bf:0b:
                    df:8e:75:53:aa:a9:fc:74:b3:85:9d:0d:c9:d0:08:
                    2c:bc:e9:20:1b:b1:47:2c:f4:77:33:90:6e:72:da:
                    07:7b:3a:e2:ce:30:e6:b4:bb:21:bf:34:6e:22:3c:
                    ce:12:1e:c2:ad:ff:66:64:03:3d:b3:c4:b9:e8:52:
                    eb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:92:61:50:AF:65:3D:38:32:E6:10:4F:2A:C3:1D:77:F2:97:23:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6feb917-89bb-37c9-856a-4f4684a56f4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.32.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1b:46:91:09:a5:0a:6b:fc:ee:11:09:75:64:0d:05:f9:74:
         c3:a3:bd:bc:19:90:75:0d:ef:7f:0e:6f:90:69:ee:18:b7:a8:
         54:b0:59:23:59:92:21:e6:36:19:ee:a9:30:2b:93:bb:5c:b2:
         fc:b9:49:01:a6:6a:2f:96:35:ee:11:ff:db:ef:6d:a6:93:cd:
         fa:b9:65:cf:44:e1:54:a2:21:bd:33:a3:5b:c9:e0:90:c9:af:
         a0:8c:98:e7:99:db:28:d6:32:f4:1b:4b:74:6b:2d:b5:2c:fc:
         48:97:98:2d:fc:14:27:a9:6d:13:db:73:0c:42:07:5b:36:b7:
         df:b2:5a:dc:89:2c:54:73:df:fa:2a:c6:cd:28:20:29:b1:fb:
         3c:42:df:8f:5d:ca:c3:9c:d2:c7:c9:e9:74:5b:50:cd:36:99:
         28:52:53:c9:a2:b6:b2:13:62:b6:c5:64:23:5b:aa:f6:33:ab:
         aa:7e:e5:02:ba:56:92:d7:f3:fd:90:8a:73:fd:89:0d:b6:78:
         a3:36:2c:18:8e:fa:9d:8a:18:4e:8e:05:c5:fa:37:b9:05:47:
         8c:d3:b8:be:20:99:83:f6:47:b8:33:c3:54:ee:14:82:2a:82:
         1f:36:4e:62:a6:61:a7:49:44:03:9e:60:ee:09:29:4c:df:5f:
         32:23:72:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:57:44 2025 by rpki-client