Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/192b2a5e-ad02-3c40-81d9-5279aefa894e.roa
File:                     192b2a5e-ad02-3c40-81d9-5279aefa894e.roa (raw, json)
Hash identifier:          +x5y0eXi7ScvyWJAELG/g4Af7RmEkUchpO3KB9eJgno=
Subject key identifier:   D5:C9:44:3B:B2:A3:1D:3E:94:94:93:C2:AD:3D:F0:7C:5B:02:74:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8876F115C0742F67A8880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/192b2a5e-ad02-3c40-81d9-5279aefa894e.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        73.17.153.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:87:6f:11:5c:07:42:f6:7a:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=1c40f8a6-6781-465d-a3cd-4adf02cd10da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6a:34:65:be:93:bf:40:40:7a:7d:f1:65:6d:
                    fd:92:85:fc:9a:ee:58:fa:52:aa:35:4f:3e:ad:7e:
                    e4:59:82:9e:68:3b:71:0a:cf:6d:65:81:62:fd:63:
                    05:3a:99:0a:46:80:1d:0d:bc:8a:3b:6d:e1:9c:e2:
                    50:ee:77:fb:90:db:ab:41:92:61:e1:fe:57:0e:da:
                    64:25:47:12:6d:22:be:87:32:d2:18:53:ca:3d:4d:
                    6f:91:43:50:18:a1:4e:e1:f6:d5:4c:b7:bf:9a:0f:
                    10:4f:d4:c5:35:0c:97:32:ff:48:df:88:87:66:44:
                    23:f9:32:ef:81:61:99:fd:99:70:e9:d4:1f:b9:0b:
                    f1:17:a8:6f:a9:f9:88:27:79:32:65:9a:32:3c:65:
                    0f:d9:70:49:c3:4a:ac:61:9b:f9:de:76:5d:6b:07:
                    be:a0:87:47:4f:27:90:c4:6f:70:85:94:6f:b1:61:
                    ff:18:ee:37:f1:23:6a:6f:cc:cc:73:4e:47:8d:31:
                    d4:ef:9b:74:d9:54:eb:dc:3e:bd:ca:68:ca:3e:15:
                    3e:68:32:a0:c0:98:72:a2:a8:03:76:9d:df:54:1c:
                    f7:86:6e:4f:6d:70:e7:94:26:8c:5a:36:6e:f7:9b:
                    84:30:14:45:d9:8f:58:9d:3e:b2:7c:41:c3:08:b1:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C9:44:3B:B2:A3:1D:3E:94:94:93:C2:AD:3D:F0:7C:5B:02:74:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/192b2a5e-ad02-3c40-81d9-5279aefa894e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.17.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:4e:6d:8a:8f:26:5c:4c:e9:fa:df:a8:6f:3f:e0:64:94:58:
         90:42:13:0b:2c:a2:39:d8:f0:89:54:d3:0b:41:24:b1:b3:b9:
         45:9b:de:a9:d8:3a:49:05:23:e9:39:ce:9b:8a:1f:0a:f0:73:
         53:6c:69:db:4d:54:07:93:bd:9f:5f:18:ce:9b:ed:b4:7e:3e:
         5d:b4:81:ab:13:ec:f7:cc:a0:a8:94:99:66:8f:42:ea:e7:28:
         b0:86:5a:18:d9:18:a9:be:e0:44:ce:45:14:db:4c:c5:aa:f9:
         8b:cb:8e:c9:87:bb:60:74:2b:9f:97:80:67:7e:ee:6b:80:42:
         27:ba:bb:1a:14:74:53:74:eb:93:93:9f:58:79:b6:a7:f4:18:
         1e:c4:c0:ff:42:0d:3a:e5:e0:ec:ff:b4:c6:0d:4f:02:01:74:
         db:af:8d:55:22:08:bc:29:77:c7:56:16:42:2f:77:fa:51:1c:
         26:17:35:23:46:7a:1d:fa:e3:8f:63:11:47:16:55:e2:bd:38:
         32:15:db:4d:e9:19:c3:43:a6:e1:ac:90:88:67:7a:52:58:72:
         cf:ae:47:68:8e:e4:a7:35:e5:15:84:e8:65:44:ff:c7:ed:16:
         2a:f0:61:99:95:be:b5:18:83:64:8a:6f:9e:94:ba:80:68:f2:
         e9:34:8b:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+IdvEVwHQvZ6iIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MWM0MGY4YTYtNjc4MS00NjVkLWEzY2QtNGFkZjAyY2QxMGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGo0Zb6Tv0BAen3xZW39koX8mu5Y+lKqNU8+
rX7kWYKeaDtxCs9tZYFi/WMFOpkKRoAdDbyKO23hnOJQ7nf7kNurQZJh4f5XDtpk
JUcSbSK+hzLSGFPKPU1vkUNQGKFO4fbVTLe/mg8QT9TFNQyXMv9I34iHZkQj+TLv
gWGZ/Zlw6dQfuQvxF6hvqfmIJ3kyZZoyPGUP2XBJw0qsYZv53nZdawe+oIdHTyeQ
xG9whZRvsWH/GO438SNqb8zMc05HjTHU75t02VTr3D69ymjKPhU+aDKgwJhyoqgD
dp3fVBz3hm5PbXDnlCaMWjZu95uEMBRF2Y9YnT6yfEHDCLG7mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNXJRDuyox0+lJSTwq098HxbAnR7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTkyYjJhNWUtYWQwMi0z
YzQwLTgxZDktNTI3OWFlZmE4OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASRGZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5ObYqPJlxM6frfqG8/4GSUWJBCEwssojnY8IlU0wtBJLGzuUWb3qnY
OkkFI+k5zpuKHwrwc1NsadtNVAeTvZ9fGM6b7bR+Pl20gasT7PfMoKiUmWaPQurn
KLCGWhjZGKm+4ETORRTbTMWq+YvLjsmHu2B0K5+XgGd+7muAQie6uxoUdFN065OT
n1h5tqf0GB7EwP9CDTrl4Oz/tMYNTwIBdNuvjVUiCLwpd8dWFkIvd/pRHCYXNSNG
eh36449jEUcWVeK9ODIV203pGcNDpuGskIhnelJYcs+uR2iO5Kc15RWE6GVE/8ft
FirwYZmVvrUYg2SKb56UuoBo8uk0izg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:24 2025 by rpki-client