Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0809192e-a079-3a84-a830-237aef44183d.roa
File:                     0809192e-a079-3a84-a830-237aef44183d.roa (raw, json)
Hash identifier:          ch7jmjzuPA2TfW5w4zQHbhwG42SiNI7vMOA7f9U3Em0=
Subject key identifier:   6E:6C:E4:E6:77:68:93:91:BB:8A:C0:3D:D4:34:14:F5:70:80:F5:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1378E19E0D6502B94EB40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0809192e-a079-3a84-a830-237aef44183d.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.74.40.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:37:8e:19:e0:d6:50:2b:94:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=189e5d31-e365-4afc-abd0-d63baf3fa350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:86:17:d0:41:8d:cb:e8:02:1d:12:85:b7:36:
                    16:6b:4f:da:2d:69:93:17:4d:b1:02:c6:2c:30:f1:
                    a3:35:ee:a9:81:52:78:db:35:31:9b:11:eb:4d:aa:
                    28:0e:47:6c:07:a9:7a:40:ec:84:ab:ba:94:c1:b7:
                    07:26:a4:e2:60:65:e1:93:67:36:ff:e4:d9:22:7e:
                    33:e4:86:ec:87:7f:32:a7:76:66:92:ca:2c:c3:24:
                    51:7f:a5:af:5b:bd:13:89:f4:64:cf:34:b5:3d:d7:
                    02:34:0a:20:b1:e6:a6:f2:00:9c:14:cb:f1:e7:7a:
                    a7:1b:37:37:65:01:ac:95:3c:8a:9f:b9:e1:03:bd:
                    e2:dd:57:ba:36:8d:a3:24:31:52:60:e9:77:78:41:
                    3e:61:b3:47:22:79:59:cf:5c:a0:aa:b6:c6:d3:d7:
                    e9:e2:cc:6e:d8:67:ef:5f:9c:31:90:81:e8:a9:29:
                    99:bb:01:ce:e5:66:6c:73:d3:bc:85:0b:ee:ab:1a:
                    9b:58:a3:ce:cf:79:04:49:59:ca:75:36:04:74:b4:
                    75:ca:e3:e9:fc:c4:9a:47:26:ec:d5:54:80:d7:1b:
                    7d:22:ef:8f:aa:4d:ec:ba:d6:14:79:e2:54:02:f4:
                    3d:27:74:80:dd:10:f2:5e:8d:89:03:05:4d:e0:4c:
                    e3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6C:E4:E6:77:68:93:91:BB:8A:C0:3D:D4:34:14:F5:70:80:F5:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0809192e-a079-3a84-a830-237aef44183d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.74.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9e:51:c0:3a:d0:34:4e:57:1d:4d:5b:14:78:0d:51:03:1b:
         f9:0f:35:4e:1c:0b:67:56:18:2d:19:e9:a0:18:84:46:8d:5c:
         ad:fc:62:04:e9:80:34:e8:37:42:f2:fd:56:3d:c6:45:4b:73:
         0a:76:fa:9a:04:e5:3f:89:88:14:f5:0e:0e:36:b7:de:07:bb:
         ec:58:1d:01:a5:e0:17:d1:e3:b6:dc:17:6c:83:4f:6f:ae:01:
         fc:55:5b:55:34:2d:ae:f2:e2:0f:09:4e:c9:3b:48:03:72:16:
         15:a4:42:aa:0c:15:16:58:da:6f:04:e4:62:22:ad:3d:85:67:
         9c:33:27:15:8f:25:ab:3b:2d:a3:5d:69:61:83:8c:e6:1b:a3:
         c5:b4:d8:91:71:39:6a:30:fa:aa:a8:44:ec:50:18:b4:3e:9b:
         94:29:fd:6e:81:ad:37:07:55:0c:c6:89:07:b4:2a:42:bc:8b:
         5a:dc:8c:61:d1:8a:8e:b1:99:9b:a1:87:3f:bd:28:7a:67:16:
         a8:f4:47:ca:a3:5a:56:73:4b:1a:c1:27:95:c1:d5:10:7f:9a:
         12:81:c0:21:7d:e1:a8:3d:76:e4:4e:05:01:a3:b1:5e:8b:bc:
         9b:5d:7d:37:19:e3:c6:f0:c5:69:9c:e8:f8:3f:52:5d:e1:a8:
         3b:e8:0d:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssTeOGeDWUCuU60AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MTg5ZTVkMzEtZTM2NS00YWZjLWFiZDAtZDYzYmFmM2ZhMzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIYX0EGNy+gCHRKFtzYWa0/aLWmTF02xAsYs
MPGjNe6pgVJ42zUxmxHrTaooDkdsB6l6QOyEq7qUwbcHJqTiYGXhk2c2/+TZIn4z
5Ibsh38yp3ZmksoswyRRf6WvW70TifRkzzS1PdcCNAogseam8gCcFMvx53qnGzc3
ZQGslTyKn7nhA73i3Ve6No2jJDFSYOl3eEE+YbNHInlZz1ygqrbG09fp4sxu2Gfv
X5wxkIHoqSmZuwHO5WZsc9O8hQvuqxqbWKPOz3kESVnKdTYEdLR1yuPp/MSaRybs
1VSA1xt9Iu+Pqk3sutYUeeJUAvQ9J3SA3RDyXo2JAwVN4EzjEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG5s5OZ3aJORu4rAPdQ0FPVwgPXGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDgwOTE5MmUtYTA3OS0z
YTg0LWE4MzAtMjM3YWVmNDQxODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSUooMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD2eUcA60DROVx1NWxR4DVEDG/kPNU4cC2dWGC0Z6aAYhEaNXK38YgTp
gDToN0Ly/VY9xkVLcwp2+poE5T+JiBT1Dg42t94Hu+xYHQGl4BfR47bcF2yDT2+u
AfxVW1U0La7y4g8JTsk7SANyFhWkQqoMFRZY2m8E5GIirT2FZ5wzJxWPJas7LaNd
aWGDjOYbo8W02JFxOWow+qqoROxQGLQ+m5Qp/W6BrTcHVQzGiQe0KkK8i1rcjGHR
io6xmZuhhz+9KHpnFqj0R8qjWlZzSxrBJ5XB1RB/mhKBwCF94ag9duROBQGjsV6L
vJtdfTcZ48bwxWmc6Pg/Ul3hqDvoDTw=
-----END CERTIFICATE-----