Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d93ea5d-8cbc-31fa-aae8-8bd3533b3aec.roa
File:                     2d93ea5d-8cbc-31fa-aae8-8bd3533b3aec.roa (raw, json)
Hash identifier:          UE3qfVbg2PvzK6gEtwRdtfN0aFbMCI7IRyWwQq7FpOM=
Subject key identifier:   0B:C6:64:24:69:27:64:26:89:72:6D:61:06:01:B2:F8:69:AD:C9:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F6DA6598A151585452E700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d93ea5d-8cbc-31fa-aae8-8bd3533b3aec.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        73.96.56.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:da:65:98:a1:51:58:54:52:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=a21e8599-79eb-4a67-af3f-19712a169fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ae:ce:3a:bb:ea:d5:ab:0f:78:32:58:4d:0f:
                    19:83:ac:ab:ba:f9:c1:58:f0:b3:d2:b6:75:a6:6a:
                    df:df:f8:04:02:2e:39:73:e0:2b:37:81:1c:23:20:
                    e6:e7:93:9a:fc:15:ea:9b:0c:e0:9d:03:24:42:1e:
                    07:9a:7c:70:c3:5e:fa:ed:16:b4:01:83:7b:f6:42:
                    23:79:b9:83:fd:7f:83:1f:56:c4:15:af:5a:db:c1:
                    fa:62:7d:dc:5d:f7:83:31:db:d7:af:37:d7:2b:ae:
                    9e:f8:a6:39:ac:37:8e:45:56:b1:80:49:d4:6c:2c:
                    58:be:ac:6e:d0:1c:00:c2:0c:62:4a:b9:d8:de:4e:
                    a0:2c:2b:31:c8:cd:58:b9:af:47:f7:15:f8:69:72:
                    17:da:70:d5:99:fa:ad:d5:4d:02:26:2e:c6:ad:37:
                    ef:c7:08:f5:78:af:e5:56:be:6e:99:b8:ce:20:7d:
                    1f:30:57:35:e1:e5:40:c1:ca:03:18:f3:21:a4:f4:
                    a6:cd:b2:0d:58:d5:a0:0b:57:69:c8:3a:2a:3c:6d:
                    0c:b3:a9:b2:5e:90:e4:dd:e4:0d:f4:b1:41:05:97:
                    e9:72:e6:ea:74:67:96:a3:b1:2e:8d:f9:ea:b7:44:
                    89:ee:eb:7a:49:54:ba:88:55:a3:d2:6c:26:7a:72:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C6:64:24:69:27:64:26:89:72:6D:61:06:01:B2:F8:69:AD:C9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d93ea5d-8cbc-31fa-aae8-8bd3533b3aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.96.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:2d:29:27:93:da:39:a3:df:21:59:b4:99:58:e5:99:56:a7:
         fa:68:d6:80:2d:a8:de:66:31:2a:0a:e5:96:47:e8:91:4e:43:
         79:e4:a2:7c:08:30:cc:d7:c1:72:95:5c:8b:34:f8:32:d8:59:
         63:b0:75:91:34:b9:82:ca:4a:21:63:bb:28:26:3c:2c:5e:cf:
         46:12:36:15:dc:92:f8:62:86:28:fd:0a:b1:1a:d5:2b:54:1a:
         a0:26:fa:f0:15:a6:0a:5f:67:c4:40:10:90:58:f9:41:e2:e9:
         b2:f5:ae:c7:6f:d8:82:7f:eb:07:5c:94:0b:c6:d8:8b:82:1a:
         73:45:f0:ee:c3:2a:51:50:8f:82:a6:12:c4:9a:52:47:f8:6b:
         02:85:77:ab:d6:8b:a7:3b:31:d2:dd:c4:c1:9f:c3:5c:79:78:
         89:b9:fa:14:35:a3:23:28:e5:c9:0d:ba:e5:7b:14:37:04:db:
         25:29:1f:64:cc:a5:8c:85:b8:4e:ac:74:8a:d0:0b:5c:22:df:
         bd:46:ab:be:fd:42:bb:e2:b9:6b:3f:79:85:6f:8f:11:dc:69:
         80:84:2c:b2:c5:de:0a:d6:af:fc:9a:30:07:ac:80:c2:62:e7:
         dd:a4:42:97:a1:fe:26:e3:ad:0b:be:51:77:a9:a6:5e:8e:89:
         3e:e5:02:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:27:50 2025 by rpki-client