Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/471886af-ddf1-3ab0-8cc9-2751def4bcaa.roa
File:                     471886af-ddf1-3ab0-8cc9-2751def4bcaa.roa (raw, json)
Hash identifier:          ExkMU60dcZss2sVoOegW7u7muAscFTrOQ5+DRtdyQ9I=
Subject key identifier:   04:0A:AC:7C:A4:D9:5C:29:0D:E1:44:90:2A:35:58:3C:E9:33:A2:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F88384B7CE96EE15CF4E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/471886af-ddf1-3ab0-8cc9-2751def4bcaa.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        73.16.224.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:83:84:b7:ce:96:ee:15:cf:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=2311cb90-d995-4e07-afef-c6e3b38f7e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:39:b4:60:84:81:a3:5a:9b:da:f0:4d:4a:ee:
                    6b:d1:95:f8:f3:fc:56:75:ad:83:64:38:51:12:4e:
                    97:31:65:f5:af:ec:47:4a:a6:84:7a:ba:c4:2d:5d:
                    0d:7d:12:31:21:cb:cb:10:14:5c:69:31:59:98:58:
                    73:79:ee:d3:82:91:86:0b:61:55:0f:ce:fa:3e:66:
                    6d:7d:ff:25:fd:90:1d:96:04:cd:36:48:ab:bc:ea:
                    0c:64:9b:8a:08:44:3b:d8:29:e9:22:b2:dd:50:02:
                    89:5b:22:93:c1:35:96:ab:f0:9b:1c:24:cc:61:09:
                    2c:75:01:14:50:68:ca:28:27:fd:c5:0b:e2:ee:c4:
                    fa:46:8d:9c:34:23:ce:f2:51:ca:4f:a3:eb:a8:29:
                    a3:4c:44:0a:0c:0d:ad:d6:e3:d6:be:a8:78:e1:31:
                    47:f9:31:de:2c:29:4a:77:aa:4c:f9:b2:5b:b4:80:
                    eb:80:51:90:59:95:d7:6e:58:94:47:ec:2c:f2:c2:
                    9b:a3:a0:61:6b:50:73:a3:be:d2:48:3c:40:30:da:
                    9e:fb:f6:b6:46:42:7a:b7:58:87:b9:28:50:f7:1f:
                    0f:42:25:7d:05:e1:3f:f9:a0:d5:34:90:a4:df:01:
                    8b:5f:8d:a2:1a:3d:42:ff:8c:32:6a:85:e9:85:69:
                    69:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0A:AC:7C:A4:D9:5C:29:0D:E1:44:90:2A:35:58:3C:E9:33:A2:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/471886af-ddf1-3ab0-8cc9-2751def4bcaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.16.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:5d:dd:b2:c4:4e:3d:19:f3:41:f8:9b:f3:e3:69:54:3a:0d:
         df:13:e9:fc:54:a7:56:1c:43:04:c0:06:3e:22:a1:3a:5d:28:
         f1:4d:14:9f:48:fa:cc:70:ed:f2:ae:23:fe:e4:6b:ae:64:4b:
         f0:89:4f:f5:54:c3:14:d0:d7:f3:9e:36:a8:bd:11:f6:2e:4a:
         4e:f3:14:0f:91:ec:25:17:b3:22:a9:24:d6:35:c6:25:40:5e:
         9c:cc:b2:3a:c6:fd:ce:0a:64:ab:09:80:f6:b7:76:3e:1b:72:
         ab:74:4e:63:9f:bc:07:3e:c0:f8:b9:fe:69:f0:56:89:e7:57:
         90:c2:55:26:ae:94:b4:5f:4d:9e:1f:2c:76:78:1d:43:6f:c5:
         79:66:da:ed:52:fc:fa:1a:5d:e3:f2:aa:30:a8:4a:b7:98:9a:
         64:1d:ae:08:d4:7c:fd:79:64:84:18:86:50:65:d4:56:b6:14:
         ae:76:8e:23:cf:5a:d5:6c:90:4a:f6:08:a1:08:bb:5d:9a:78:
         d1:36:f5:26:03:26:ad:89:05:39:76:e0:c2:a3:41:6c:fb:af:
         d6:e0:61:96:08:a2:38:65:ec:c6:49:53:2f:4c:ba:df:d1:3b:
         d5:0e:92:86:ba:08:e3:28:5d:13:af:34:49:03:de:11:1e:fd:
         9d:80:ea:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:28:44 2025 by rpki-client