Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eb62a0f-778c-3668-b86f-4c69b8ff6338.roa
File:                     3eb62a0f-778c-3668-b86f-4c69b8ff6338.roa (raw, json)
Hash identifier:          GhLdmumYowIn4DW8IUZQTM3l1nFu2o8rPl4UXVVh240=
Subject key identifier:   7B:58:9A:2E:C6:82:CF:A7:55:33:5B:8F:C2:1F:9F:3B:2E:B3:A8:42
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F73B06BE64C10CB7B1C940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eb62a0f-778c-3668-b86f-4c69b8ff6338.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        73.219.70.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:3b:06:be:64:c1:0c:b7:b1:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=4c3ce88f-4b77-4110-a105-c099146caf33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:66:0a:6b:8e:57:a2:59:66:83:61:dd:98:27:
                    ae:8f:e8:2f:29:0c:3e:13:a0:22:94:0a:9c:fb:c6:
                    eb:00:e2:1b:6a:76:88:41:1d:73:f6:98:dd:0d:a0:
                    ed:f7:5b:63:e3:74:39:10:ad:20:72:05:c3:e3:0f:
                    c8:a6:62:9b:22:f6:99:01:c4:66:fd:3d:f7:0a:27:
                    dc:ef:b9:04:fe:17:b9:d8:b6:4d:f7:d1:c2:10:ea:
                    b0:25:8c:3b:f0:45:a7:e0:65:56:db:f3:dd:83:52:
                    9c:4a:64:38:42:61:0e:df:6d:07:b8:7c:1d:4f:16:
                    05:0f:4f:bb:47:48:6e:90:97:15:bf:82:62:56:6e:
                    12:bf:9c:2a:89:f1:3f:3a:5a:d0:38:ca:5b:71:4d:
                    a2:c9:fb:9c:2b:4d:12:2a:f6:3b:ad:45:3d:87:0d:
                    c2:a2:dc:ed:f2:81:6b:21:4d:72:05:11:3d:78:ad:
                    0a:b8:f2:69:38:fd:9c:36:d3:6d:49:f5:8f:34:5e:
                    67:dc:86:59:da:2a:00:e8:e4:3c:2e:26:4b:88:3a:
                    80:9c:75:7b:78:1b:77:da:08:ba:ed:cd:54:4b:1a:
                    03:ab:b0:7a:42:f4:9a:09:b9:46:73:08:a8:34:50:
                    b1:49:2b:8b:f2:3a:4a:31:d8:65:6d:8e:ff:65:69:
                    ba:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:58:9A:2E:C6:82:CF:A7:55:33:5B:8F:C2:1F:9F:3B:2E:B3:A8:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eb62a0f-778c-3668-b86f-4c69b8ff6338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.219.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f6:3e:41:9f:82:88:de:a4:4c:3a:46:63:0b:d2:4d:00:7c:
         df:1b:fe:18:0a:ba:68:99:52:7d:b0:5a:13:8a:39:0b:96:95:
         ca:ef:23:86:0d:93:1f:af:da:c5:27:57:df:a4:67:74:52:7f:
         d8:ee:e6:31:09:59:15:53:f9:ef:19:8e:16:65:c4:b0:15:b2:
         8a:1f:b5:08:1d:c6:cc:bd:8c:03:f1:fd:9d:a9:2e:d7:6a:35:
         7d:3a:18:19:24:92:f0:f7:d0:3f:5b:c5:3d:38:27:00:ab:e9:
         3e:b3:a0:c9:e6:75:87:49:d2:99:27:48:b4:1a:3e:1c:a3:31:
         7c:9c:8f:fb:c2:92:72:de:ec:86:d2:d0:eb:6d:14:47:c7:a4:
         b5:15:fe:93:72:60:35:65:45:7b:e0:04:e3:61:65:d0:f5:ad:
         51:50:e6:c6:b5:03:61:cd:48:8b:25:6f:0d:d2:c0:79:e7:7b:
         55:a8:10:a6:e8:46:6a:78:9c:d0:9f:01:90:86:44:1d:95:6d:
         cd:fd:04:99:47:1c:67:53:73:46:13:8a:d5:12:b5:2f:cf:c2:
         0b:07:10:6d:ad:e3:54:dc:5b:b5:b1:35:08:9e:1d:b9:20:1f:
         a5:b1:a1:dc:3c:a5:0d:9c:75:78:29:0c:96:d1:62:2e:a4:82:
         f6:9c:16:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:13 2025 by rpki-client