Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d0a7db2-734e-3ba5-8fb3-523583c512ae.roa
File:                     2d0a7db2-734e-3ba5-8fb3-523583c512ae.roa (raw, json)
Hash identifier:          tXXZ/8v81Xhgk9E830MPDmtclF6uU2j7nrwqhhiC/1s=
Subject key identifier:   1B:47:E9:FF:0F:45:A7:D8:E0:A9:22:22:45:A4:91:4F:54:B2:18:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFF52B05C80AAAE4711480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d0a7db2-734e-3ba5-8fb3-523583c512ae.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        73.162.126.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:f5:2b:05:c8:0a:aa:e4:71:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=ac54e4d9-15b4-4c5b-a034-4c4baacfd1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c2:c0:41:86:2b:53:78:2d:0e:cd:3e:9a:91:
                    26:c4:d8:21:a1:33:2c:ea:eb:60:52:2b:c7:78:8e:
                    a2:3e:2b:2c:02:10:93:18:1c:d1:40:93:7a:ce:70:
                    b5:0b:c8:01:e5:95:5a:a5:1a:82:d2:3d:9d:61:12:
                    8c:f6:4c:e7:ad:59:0c:53:1c:2f:05:90:94:f2:f0:
                    ff:24:47:74:0b:21:50:67:ef:f2:2d:cb:e6:e7:8c:
                    2b:ae:ba:c6:be:45:3c:8c:e1:29:3e:68:83:38:51:
                    b4:ff:a8:9f:4b:79:66:63:6b:85:36:86:c2:36:1f:
                    ac:54:43:f9:d1:19:ac:a9:37:6a:c4:00:a2:f0:16:
                    2c:00:d4:6d:1c:f0:ea:33:ab:4c:10:8c:84:f8:e9:
                    70:4a:23:e5:6b:dd:74:1a:6e:08:bd:a1:07:6c:b1:
                    9f:40:0e:a1:3b:3c:05:88:ae:69:67:0e:47:73:df:
                    21:87:80:01:c6:15:22:6e:5f:26:bf:4d:f4:8e:25:
                    6a:a1:f4:a0:46:01:bb:cf:d7:7f:c5:dd:37:9b:bb:
                    c7:4f:98:18:33:b6:2f:c2:79:ac:79:cb:11:e6:1d:
                    1a:57:8e:b5:23:6b:0c:ae:24:f9:d7:30:77:ab:38:
                    7f:fb:3c:65:02:65:3f:e9:96:b8:da:04:7d:6f:4b:
                    db:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:47:E9:FF:0F:45:A7:D8:E0:A9:22:22:45:A4:91:4F:54:B2:18:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d0a7db2-734e-3ba5-8fb3-523583c512ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.162.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:34:ac:ae:46:5c:44:d0:16:50:ac:1c:c4:aa:6e:08:dd:e6:
         21:ee:b2:c3:6b:b7:b7:c0:5c:7f:5a:79:6d:4f:4d:c4:cb:c2:
         9f:d0:2a:96:f4:23:7a:68:0a:5d:d3:d1:4d:68:d1:a7:32:55:
         39:e7:a8:1b:82:2f:85:fb:03:ac:8f:ea:57:bc:da:46:bb:07:
         6f:89:1f:25:4c:c9:7b:51:5e:e7:09:e3:3a:14:9e:f5:ea:99:
         7b:66:af:bc:a3:9e:e8:e0:5c:1b:b2:d4:44:3f:3e:6a:b1:71:
         15:a1:3d:3a:e2:de:2f:77:47:82:c5:aa:14:cd:8f:b8:ea:f9:
         dc:7d:72:c3:bc:82:16:f8:ba:1f:d4:b2:dc:c8:52:09:4f:83:
         aa:cb:35:16:69:1a:28:e3:a7:8b:34:0f:9e:d0:88:29:e9:be:
         46:01:b8:57:d4:a8:00:55:ec:9a:06:7c:16:c0:d0:79:b7:df:
         c3:39:fa:45:1d:e5:7c:c5:ac:2c:55:d7:5a:df:82:a5:72:f9:
         1f:05:82:4c:1e:4a:e2:51:92:78:c4:3b:af:fa:77:b5:43:a3:
         3a:e1:2e:44:bf:5a:16:3e:8f:ec:95:1b:0c:c4:97:87:77:52:
         e2:f7:8b:95:5b:b6:fa:ad:8c:f6:ba:36:51:5f:f3:18:2b:c2:
         63:0a:ef:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:09:59 2025 by rpki-client