Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37cd2d89-f2f7-36c0-b269-38d858feab65.roa
File:                     37cd2d89-f2f7-36c0-b269-38d858feab65.roa (raw, json)
Hash identifier:          UyfjYKv5MLsRK/nuLIFioe6ssWDVfF8Uw5uk/0gsmvI=
Subject key identifier:   DD:40:65:60:0C:72:7C:D7:2A:9D:7D:9F:84:95:29:3D:75:1F:83:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F9425C7FE0E124E396EA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37cd2d89-f2f7-36c0-b269-38d858feab65.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        73.6.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:42:5c:7f:e0:e1:24:e3:96:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=40cbd0c3-df2b-443d-a174-86d56ef4013c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9f:45:97:32:dc:29:ec:13:7c:54:0f:3e:eb:
                    32:4a:2b:3e:db:40:03:4a:0c:aa:17:f7:14:b5:ad:
                    a6:8e:43:b9:22:c6:53:de:ea:56:e0:a4:05:12:d8:
                    b3:64:ee:f2:4b:fd:da:68:ac:9e:20:4b:dd:c7:6d:
                    e5:66:b6:79:2e:65:79:fc:f4:1a:e3:e0:02:9d:e9:
                    67:6d:bc:eb:0e:3e:00:15:bd:a8:1d:85:09:58:89:
                    c8:22:b9:60:0a:5a:29:0e:3e:30:0c:ca:27:da:ee:
                    59:11:fc:09:8e:0b:13:28:0a:34:10:24:24:90:b7:
                    11:f4:41:bd:58:a5:76:6c:d5:35:d9:5b:b7:fc:87:
                    bc:f1:7d:54:9c:ed:40:17:49:4d:bd:5d:7e:9b:38:
                    93:8e:c4:88:71:86:43:d0:cf:5b:ff:46:e5:28:1c:
                    07:bb:a3:2e:01:b1:9e:dc:54:0d:be:d1:36:d3:7a:
                    b8:cc:64:67:1c:1f:e4:69:ee:5e:0f:66:52:35:42:
                    d3:c2:c7:b7:c9:6e:a0:dd:8c:b9:30:94:2b:35:6f:
                    e3:f0:0a:38:17:1d:f1:81:88:d9:a8:81:35:bc:bb:
                    bb:ee:9e:53:e1:5e:a5:a1:8c:e9:a1:bf:58:e2:86:
                    0a:38:9d:c0:3d:73:a0:7f:4c:87:70:43:17:ad:a7:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:40:65:60:0C:72:7C:D7:2A:9D:7D:9F:84:95:29:3D:75:1F:83:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37cd2d89-f2f7-36c0-b269-38d858feab65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.6.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:10:03:c4:da:4a:df:6d:f7:2c:1e:44:34:a3:6f:25:55:0c:
         71:36:10:fb:6c:f7:a9:c4:e9:cb:20:ed:24:d9:df:d0:30:d0:
         76:79:77:fb:09:2d:f9:eb:52:ef:d0:8f:88:23:96:6d:e3:ac:
         b5:16:ba:15:84:9c:45:e5:0c:64:76:85:22:d7:b6:ac:c8:2b:
         4b:1c:fd:29:60:c0:ce:d0:d7:63:6b:1a:98:dc:ac:8d:e0:2c:
         89:93:cb:50:d4:c3:f3:65:36:43:ae:64:71:89:68:47:a4:d9:
         96:cb:0b:71:0b:f7:9a:19:68:d4:9a:2e:c9:ff:7c:26:57:f1:
         77:e8:f7:b8:4e:53:6e:59:68:d3:e7:e4:20:dc:47:02:83:3e:
         8d:f8:87:18:41:9f:95:b1:3d:cd:84:fb:75:ec:1e:9a:69:7d:
         f9:0c:a1:3b:d4:e1:69:a9:6b:7c:00:35:b7:e2:ec:8e:aa:f2:
         54:fc:f0:11:52:22:62:5a:a6:a3:eb:8c:48:2e:0f:1b:0e:c9:
         f6:ea:68:80:be:1d:d4:84:8b:87:57:77:26:b2:d7:b2:ac:07:
         f5:11:72:65:0f:26:06:ff:8e:90:ee:34:c7:ff:cb:42:4d:71:
         24:80:97:0d:48:0b:f1:b8:ab:cf:61:03:a5:cc:89:0c:b9:e5:
         ed:5c:fe:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:29:25 2025 by rpki-client