Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0904a2c-b3a2-34a6-8713-0ce0b6fc80ca.roa
File:                     f0904a2c-b3a2-34a6-8713-0ce0b6fc80ca.roa (raw, json)
Hash identifier:          2wcDSSMqMxz8msyJQewwzr2R2mw1ZQJReIFi0zmLu5Q=
Subject key identifier:   3B:73:13:67:FD:13:4A:23:EF:70:87:8E:DB:56:E9:4F:8A:96:F6:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B0EAE4A98B72ADCDECB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0904a2c-b3a2-34a6-8713-0ce0b6fc80ca.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        73.234.192.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:0e:ae:4a:98:b7:2a:dc:de:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=ed214f67-2deb-4ba9-905f-b7aef3481517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:86:30:46:8e:df:a0:83:8b:2e:ce:e4:e2:9a:
                    d9:77:67:a7:8f:ea:79:84:90:c2:5e:3b:ff:d5:30:
                    41:9e:a1:c6:d0:44:51:22:8b:08:fa:64:6b:73:18:
                    c3:c5:04:7b:a1:b4:48:03:87:b0:40:34:0c:2e:31:
                    8e:3f:29:49:8a:2e:99:0a:ba:1c:c3:76:b0:96:de:
                    bf:0c:d8:b8:65:c2:55:f1:e4:ce:7d:92:ab:be:9c:
                    2d:1d:78:55:d2:6c:b2:9d:6d:e2:36:3d:66:8a:a4:
                    ec:47:a8:5e:b2:e3:93:37:01:21:71:2e:9e:d8:a9:
                    cb:e2:a5:2f:db:35:a8:b9:67:b1:42:08:1b:1f:8e:
                    e3:c6:6b:3a:40:9d:cd:09:3b:ee:61:31:ae:87:4e:
                    2f:39:2e:2a:54:68:0e:6d:c7:ea:60:73:a0:9f:4d:
                    53:76:72:0d:69:e6:b1:15:53:e8:5a:80:d1:7d:cb:
                    75:d3:4b:47:0f:dc:63:33:a2:04:49:4c:83:ae:11:
                    d5:3f:e8:7f:65:b2:a2:41:ce:2e:c8:1d:c1:f5:4c:
                    cf:6d:c6:8c:7b:bb:de:0d:d8:ad:7d:0d:fc:7a:77:
                    e2:09:8d:71:b4:63:70:60:53:33:14:6d:a3:4c:5d:
                    ca:cf:e4:52:ff:c2:f4:21:8a:b6:36:36:17:d3:17:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:73:13:67:FD:13:4A:23:EF:70:87:8E:DB:56:E9:4F:8A:96:F6:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0904a2c-b3a2-34a6-8713-0ce0b6fc80ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.234.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:15:0e:b5:8a:b4:44:29:6b:5e:2b:b4:70:26:4e:f2:6c:a3:
         bf:ee:99:fc:0b:94:f9:94:4e:36:db:c6:17:ae:0c:1a:b0:d4:
         77:7b:c5:16:8f:74:c7:30:d7:4f:24:0b:b7:e1:ac:fa:cf:d4:
         13:7e:56:20:af:e0:27:c8:d5:8d:1d:4d:d9:7b:e3:6d:63:b1:
         6b:2c:f8:2d:7e:86:ae:6d:13:59:02:cc:66:21:8b:ee:cc:51:
         62:fa:02:d9:48:53:53:f8:0a:d9:2d:fb:ba:da:7b:57:44:f1:
         c2:da:02:9d:e6:70:25:c7:e4:39:d1:13:e9:18:d4:4e:46:3a:
         c5:f3:cb:2b:6d:de:e4:f6:30:5a:2f:f8:24:a1:ed:ad:2b:f1:
         bd:c6:b1:62:a0:09:db:aa:46:65:fc:66:cc:0d:e8:5a:c1:8e:
         37:4f:85:c1:9f:4c:a8:6c:6b:25:c4:14:5e:e8:95:1d:8c:74:
         8a:bf:13:9f:45:d2:09:68:85:5e:f3:9b:06:d7:87:52:f8:9a:
         fd:23:c4:29:62:aa:e4:02:a3:84:7b:d9:ba:38:44:be:44:53:
         ee:c9:2a:30:f9:19:4c:58:d8:e1:d9:fd:38:1b:38:a9:d1:8f:
         7b:2a:3a:46:95:1c:5e:65:14:57:cc:c7:a2:91:44:e6:36:42:
         fb:46:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:38:19 2025 by rpki-client