Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/361489a5-3c73-380b-8c44-224648f3a996.roa
File:                     361489a5-3c73-380b-8c44-224648f3a996.roa (raw, json)
Hash identifier:          vHgu/1xKLk3bhjnZJpZHeVqqOxk20kEzYbJxNr8b4aQ=
Subject key identifier:   F1:C1:FC:F4:89:6D:C1:F3:84:D9:70:8E:58:F7:EE:D8:A2:D8:0B:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0764B46FFEDD42AF3BA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/361489a5-3c73-380b-8c44-224648f3a996.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33659
IP address blocks:        73.248.242.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:76:4b:46:ff:ed:d4:2a:f3:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=be8712e1-c888-4472-880a-9c1c0ae658c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:19:fd:30:ec:8e:c6:b5:44:91:e9:cb:1e:6f:
                    26:71:23:f2:ae:61:2b:7a:84:e9:cf:98:33:03:48:
                    d1:f7:e2:b9:81:c4:f4:51:f7:cc:64:cb:a9:0f:af:
                    27:62:ae:10:ae:c4:c1:bd:05:ca:94:74:2d:cd:62:
                    d5:61:dd:fe:89:5e:eb:47:40:2e:f5:cb:cd:60:08:
                    85:ab:c4:14:80:84:db:0c:f8:80:c1:6c:50:d3:49:
                    f1:82:a2:57:26:17:92:b6:7c:4b:ad:f2:de:ed:7b:
                    fd:b0:38:d9:72:b9:4d:57:3b:d0:6b:6e:b3:0c:ef:
                    b2:99:26:86:80:0b:48:9f:29:e9:59:72:8e:2f:c3:
                    78:e2:2d:e0:95:01:90:50:15:74:4a:32:ec:07:6f:
                    ad:f1:bb:4c:76:35:9e:12:a0:de:c2:18:db:da:9a:
                    6a:84:c5:70:da:70:80:71:d1:58:23:cf:41:bf:a4:
                    21:50:ea:a4:cd:37:da:b3:81:9d:b6:75:f0:b6:a0:
                    95:3e:d7:9d:35:1a:ef:57:23:c9:b8:8a:b7:1f:57:
                    51:1c:17:c2:89:79:9e:bc:47:11:54:b4:3b:f1:b1:
                    3f:6d:bf:35:6b:5f:7a:62:c9:ae:9c:da:23:70:04:
                    9f:09:7a:44:cc:d7:52:8d:40:c9:d8:22:79:d9:9c:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C1:FC:F4:89:6D:C1:F3:84:D9:70:8E:58:F7:EE:D8:A2:D8:0B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/361489a5-3c73-380b-8c44-224648f3a996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.248.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:19:8f:7b:61:d0:e6:89:77:32:e5:5a:3f:20:53:50:04:26:
         7b:0a:ea:31:73:ea:25:bf:b6:d3:49:75:a9:b8:c7:62:5d:79:
         9a:e9:c0:7d:61:fe:62:5a:6f:46:e7:b4:75:06:de:58:11:5b:
         27:34:37:79:0b:51:3e:98:ee:ca:5e:79:fc:79:38:95:a7:2e:
         cd:94:01:6b:3d:ab:a5:26:e5:6c:cc:d8:15:e1:88:09:3f:96:
         48:ef:7d:c1:b2:99:f5:cc:c6:99:a3:1d:0f:15:53:3c:1d:11:
         57:18:e2:d9:2a:fd:5b:87:5a:87:8f:e6:5d:c1:8f:1b:0e:e4:
         02:c0:17:9d:27:ec:13:34:b6:f4:2d:be:ce:bf:66:18:41:00:
         82:b4:58:ab:27:55:6f:04:a8:0d:92:06:a5:9a:6d:98:e8:3c:
         f2:5f:29:2f:c0:c5:70:60:29:7b:71:62:73:fe:31:ca:3c:72:
         81:47:7c:30:dc:2a:59:1f:27:0c:67:d0:e5:b3:af:50:2c:17:
         4c:6e:f8:0a:62:59:01:7e:d3:ee:90:82:cf:55:64:d0:5b:73:
         d1:23:a2:99:6c:d1:4e:46:71:25:93:6b:0e:ee:0f:aa:05:db:
         c8:37:4b:ff:b8:5a:e6:ac:84:36:e8:a2:ba:12:0e:4f:9f:b2:
         ca:14:7a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:13:08 2025 by rpki-client