Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4223a616-7e71-39c2-8bb7-d08bd5f94045.roa
File:                     4223a616-7e71-39c2-8bb7-d08bd5f94045.roa (raw, json)
Hash identifier:          xGziUttKSba0qmHOBrmuwnhmcnOqAgZ0p0nqPq0I7DA=
Subject key identifier:   6B:C8:D3:56:0E:01:AF:42:6A:0A:0B:31:67:FA:64:0A:21:C5:9B:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D81CF6C23C6B49C3CB630
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4223a616-7e71-39c2-8bb7-d08bd5f94045.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33660
IP address blocks:        73.228.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:81:cf:6c:23:c6:b4:9c:3c:b6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=006fc28f-0ccf-420e-a9d4-5593074bc0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:bb:b9:5f:5a:fa:6e:4e:fe:f5:86:3c:ea:
                    58:02:24:c6:66:eb:8c:36:14:1a:58:f8:18:41:98:
                    2e:b6:65:77:3b:8f:f6:c0:6f:f0:3d:53:81:5b:13:
                    20:8d:1c:03:dc:b6:fe:14:66:97:13:ed:1c:61:87:
                    f4:ab:33:45:eb:bf:e5:a8:eb:9a:66:f9:4a:26:ca:
                    86:2d:84:d1:53:45:90:70:28:d4:28:73:7a:87:1e:
                    2c:d5:bb:83:09:06:6a:64:a3:68:4e:57:2c:e6:b9:
                    1b:9d:a8:aa:4f:f5:f1:79:54:b1:b6:95:ff:70:a0:
                    2e:4e:b1:93:19:01:e2:33:a7:18:45:d5:84:b9:fe:
                    23:1f:55:af:b5:8a:58:24:0d:e2:b3:77:f6:dc:db:
                    fe:85:eb:d1:31:6d:f3:59:51:e9:a2:31:2c:be:81:
                    20:ef:7d:c9:39:93:68:5f:c8:bf:27:2f:a5:39:82:
                    78:d5:05:69:4c:fd:4b:cc:8b:ba:45:66:ee:81:a1:
                    d5:68:7c:25:4b:49:a6:70:59:de:b1:1f:68:ec:e1:
                    47:ed:76:5d:da:08:44:e5:d2:11:a9:00:f7:f9:19:
                    14:ca:8a:af:fd:7d:1b:e4:89:1c:de:3f:d8:b1:74:
                    41:0a:a5:fc:1b:37:f8:02:c1:5c:88:cf:72:72:9a:
                    fc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C8:D3:56:0E:01:AF:42:6A:0A:0B:31:67:FA:64:0A:21:C5:9B:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4223a616-7e71-39c2-8bb7-d08bd5f94045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.228.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f5:5e:80:08:c9:35:89:c6:c3:28:db:e0:ae:e0:f8:f4:47:
         a9:01:54:b2:0d:4e:08:62:99:74:46:04:af:e5:e1:f4:fa:6d:
         49:04:5c:5b:b9:e5:35:29:1b:60:b3:9a:53:97:dd:ff:8d:f6:
         e4:d5:6d:12:01:3e:a2:0c:f1:5b:4d:0c:f7:7f:d1:65:24:dd:
         40:02:45:f6:98:f5:43:59:99:cc:c8:9c:87:02:38:0e:d2:33:
         37:85:39:3e:fe:bc:d5:c7:91:a5:8d:03:c9:08:ac:e7:50:8c:
         ab:1c:1c:22:85:13:fa:f6:69:88:4a:5c:78:05:c8:28:3a:68:
         d7:ff:46:79:fe:a6:1d:6e:8d:05:e7:18:6d:7e:d8:04:37:55:
         36:43:6c:66:d4:3c:b0:8e:69:b2:cb:4a:14:26:53:d8:0d:81:
         3e:8d:02:0b:94:a8:4a:77:ce:41:cc:ec:a9:86:ef:6d:0c:2e:
         fb:87:3a:ac:d7:91:98:88:00:dc:3a:80:b7:bd:5d:41:b9:4c:
         aa:66:f0:bf:a4:82:a7:8b:42:51:52:43:be:94:fe:4d:2e:e9:
         05:2c:d9:ef:76:d6:af:c2:ac:3b:e6:ef:c2:2c:5b:17:8f:92:
         2c:91:8e:a1:dd:19:d0:83:f6:8c:36:1e:a2:02:e8:12:c7:fb:
         ae:f4:9e:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebYHPbCPGtJw8tjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MDA2ZmMyOGYtMGNjZi00MjBlLWE5ZDQtNTU5MzA3NGJjMGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBa7uV9a+m5O/vWGPOpYAiTGZuuMNhQaWPgY
QZgutmV3O4/2wG/wPVOBWxMgjRwD3Lb+FGaXE+0cYYf0qzNF67/lqOuaZvlKJsqG
LYTRU0WQcCjUKHN6hx4s1buDCQZqZKNoTlcs5rkbnaiqT/XxeVSxtpX/cKAuTrGT
GQHiM6cYRdWEuf4jH1WvtYpYJA3is3f23Nv+hevRMW3zWVHpojEsvoEg733JOZNo
X8i/Jy+lOYJ41QVpTP1LzIu6RWbugaHVaHwlS0mmcFnesR9o7OFH7XZd2ghE5dIR
qQD3+RkUyoqv/X0b5Ikc3j/YsXRBCqX8Gzf4AsFciM9ycpr8jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGvI01YOAa9CagoLMWf6ZAohxZtwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDIyM2E2MTYtN2U3MS0z
OWMyLThiYjctZDA4YmQ1Zjk0MDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSeRAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIj1XoAIyTWJxsMo2+Cu4Pj0R6kBVLINTghimXRGBK/l4fT6bUkEXFu5
5TUpG2CzmlOX3f+N9uTVbRIBPqIM8VtNDPd/0WUk3UACRfaY9UNZmczInIcCOA7S
MzeFOT7+vNXHkaWNA8kIrOdQjKscHCKFE/r2aYhKXHgFyCg6aNf/Rnn+ph1ujQXn
GG1+2AQ3VTZDbGbUPLCOabLLShQmU9gNgT6NAguUqEp3zkHM7KmG720MLvuHOqzX
kZiIANw6gLe9XUG5TKpm8L+kgqeLQlFSQ76U/k0u6QUs2e921q/CrDvm78IsWxeP
kiyRjqHdGdCD9ow2HqIC6BLH+670nmY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:31:50 2025 by rpki-client