Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/0f0f87c9-4fe3-3b07-8499-fa609e122d91.roa
File:                     0f0f87c9-4fe3-3b07-8499-fa609e122d91.roa (raw, json)
Hash identifier:          0KYnY3VB8GUXJrkdjaLlqmdp6RSgzgbJ9S5FSN80yBs=
Subject key identifier:   EB:45:04:96:6E:39:61:7E:33:F3:F9:78:AA:BE:ED:BE:3E:78:5A:C3
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F4328584869606DDB94FD6920CDB18A00
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/0f0f87c9-4fe3-3b07-8499-fa609e122d91.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     201917
IP address blocks:        47.73.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:6d:db:94:fd:69:20:cd:b1:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=b7927364-b1e5-4b44-a0e5-d1bed37fbc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a4:32:5d:7b:00:83:89:72:be:49:17:59:3c:
                    c7:28:3d:ca:7b:ae:0c:a2:b4:46:cf:49:6b:96:18:
                    6f:02:29:97:7a:c2:65:4e:ea:b7:6e:57:00:eb:64:
                    ed:85:b6:c6:9d:e0:b1:b1:71:be:ed:80:5d:b2:47:
                    b1:07:bd:8b:7c:42:bd:40:a2:37:24:64:4f:bb:6f:
                    9c:2f:cb:50:a6:f4:7f:b2:f5:4f:4f:99:50:76:2c:
                    3c:f9:08:27:6f:b5:fa:b4:26:ad:74:90:a7:9a:0d:
                    0e:e8:a1:87:b2:75:b5:7e:c2:f8:79:51:6d:fc:df:
                    f8:3f:af:f3:d4:84:47:4a:aa:75:50:0f:44:8d:80:
                    3c:84:ca:c3:45:31:30:ec:b3:59:3c:83:d7:01:ef:
                    17:ac:92:25:db:db:67:a7:cf:25:77:f4:4d:80:bd:
                    35:04:ac:c2:50:db:17:b4:2f:90:62:af:97:0c:85:
                    6e:da:52:bf:f7:e0:4a:c5:d8:13:56:91:ee:4b:32:
                    a1:e9:63:0a:65:c0:b6:82:f7:b8:b9:01:d3:c7:c0:
                    9e:02:af:a5:fb:fb:60:b8:0c:af:fd:3d:c7:bf:dc:
                    68:2b:f0:97:0d:c7:ae:0f:45:66:01:74:81:48:6d:
                    b2:4e:dc:f9:3c:b6:ca:d6:81:58:5b:7d:57:d0:05:
                    8f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:45:04:96:6E:39:61:7E:33:F3:F9:78:AA:BE:ED:BE:3E:78:5A:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/0f0f87c9-4fe3-3b07-8499-fa609e122d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:68:21:34:27:2c:9b:57:a7:f3:2c:52:e8:93:fd:95:3b:c4:
         4a:e1:8b:c8:4c:30:6c:82:ea:1b:40:99:67:01:4c:c3:3b:87:
         2a:0a:cd:38:9f:2c:13:87:ec:b8:2c:ac:67:d1:bf:d1:f7:0c:
         ef:da:5e:ae:06:13:51:cf:78:e7:06:65:27:88:68:db:7d:9b:
         ad:80:81:0a:fa:8f:e2:ac:1e:e6:a1:4a:3c:00:17:9c:95:c1:
         f2:a8:1e:ff:34:2b:cb:1b:8b:10:6c:61:81:04:a9:1b:4b:75:
         88:0e:6d:d0:8d:8c:d9:4e:01:e9:8f:03:61:ca:20:7d:b3:4a:
         99:d4:64:f1:85:69:d3:10:bc:d4:3f:7e:28:00:3d:84:b3:b9:
         57:97:0a:75:09:0f:e9:90:9d:73:fe:17:d6:14:26:9e:c2:2b:
         2d:69:09:93:a5:d3:a2:7b:a3:2d:08:5a:0d:59:de:69:76:57:
         5c:05:6e:50:89:96:c6:9e:45:b5:06:b8:00:6f:b2:9f:07:73:
         be:3f:dd:da:6d:9a:19:94:71:3a:1d:72:d5:07:c8:e7:a8:56:
         4d:1f:13:ae:f7:82:38:c4:23:73:18:e6:d0:02:cd:ad:dc:a3:
         1e:de:1e:14:4e:5c:0d:f5:bf:f5:61:b8:cc:29:cc:36:2a:db:
         19:90:ff:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:59:05 2025 by rpki-client