Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/473eef27-5774-346d-9c36-67df239352c4.roa
File:                     473eef27-5774-346d-9c36-67df239352c4.roa (raw, json)
Hash identifier:          TS4AN9eCm+8/t6Ywb9Ry9ydczQ9iX46TNLCiJ7Ouv+E=
Subject key identifier:   DD:E7:CC:63:F5:6E:3D:C1:2A:6F:A0:6C:28:21:7A:67:38:20:70:D9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAEC9002B30ED8BF7B5B180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/473eef27-5774-346d-9c36-67df239352c4.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33659
IP address blocks:        73.10.236.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:c9:00:2b:30:ed:8b:f7:b5:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=53c52157-1ead-400d-be18-fa72fec4a896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0c:6e:2e:45:f7:f3:a9:4e:b7:07:24:44:d1:
                    39:fb:83:65:d5:12:4c:f6:87:ea:bf:59:12:24:ab:
                    56:da:de:2a:b3:55:8b:6c:5d:11:a4:2d:f2:76:ab:
                    a1:07:14:80:ee:1d:35:5f:5b:c8:ed:0e:22:ad:22:
                    84:26:fb:b2:8b:e1:4b:8d:7b:23:36:46:b4:61:db:
                    ba:b3:b4:92:ff:3a:10:0d:92:d7:b1:91:b9:ef:41:
                    23:68:a9:16:46:40:a6:52:24:93:96:b8:f0:a9:ce:
                    23:62:4b:fb:a1:16:fd:a4:5f:4c:4f:85:fd:09:9d:
                    28:94:34:a1:85:fc:5d:6e:83:1c:68:7e:7c:5c:15:
                    c9:10:e7:10:09:ec:d6:bb:20:e3:5c:dd:ae:53:47:
                    35:93:ed:7e:a6:80:41:e8:5a:2c:b3:b1:e7:4d:d6:
                    70:54:42:68:32:91:35:79:11:94:4e:40:d7:87:b6:
                    71:3e:36:84:43:e5:0b:66:d0:b5:8e:3d:aa:e5:42:
                    c6:d3:9b:13:a9:fc:29:7d:e0:1d:0f:96:49:91:76:
                    06:0a:30:41:6c:be:1a:c3:5d:cf:60:3a:0c:74:c8:
                    3a:f8:4f:d1:de:79:5f:6b:fa:58:07:43:65:84:7f:
                    1e:23:92:d6:2b:39:a0:17:42:58:74:93:d0:38:a9:
                    83:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E7:CC:63:F5:6E:3D:C1:2A:6F:A0:6C:28:21:7A:67:38:20:70:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/473eef27-5774-346d-9c36-67df239352c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.10.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:96:f4:06:0d:02:81:d3:de:b1:42:83:98:c6:8e:55:0c:91:
         e8:a0:ee:87:8a:fd:4f:c4:74:c9:be:56:4b:89:1d:d5:59:ce:
         a2:98:58:5f:8f:22:ac:56:a1:4a:ba:94:ed:2f:f4:d7:cd:fd:
         82:c4:1c:3e:87:f2:1c:3e:07:98:88:b9:0e:48:30:44:6a:d4:
         a8:ec:bc:0d:e4:69:42:fb:e5:69:bf:da:97:9b:96:20:98:33:
         64:4b:61:38:ff:2e:ec:4b:82:a0:1c:18:ce:47:73:14:e5:15:
         0f:cd:65:7d:e5:22:14:50:aa:65:44:88:c2:b6:99:ef:f5:36:
         52:5f:a2:fe:a4:26:b7:e7:ba:a6:fb:b9:79:01:4a:8f:f5:80:
         c0:9b:d8:72:6e:08:fb:3a:5f:0c:e5:a3:a6:e0:10:6e:65:a6:
         d0:12:96:98:9c:bd:fb:44:1b:86:e4:d1:5d:94:27:b8:b2:7a:
         4e:2c:de:93:91:7c:83:85:07:c9:d3:ca:e2:79:3f:65:6b:75:
         81:06:60:50:ed:a5:37:92:db:5a:d7:06:97:d2:16:49:9e:2c:
         b5:96:c9:dd:65:f4:d0:b2:63:e7:6d:2b:8a:4e:54:13:88:2a:
         3b:bd:9d:59:54:d0:38:20:fa:28:5c:b2:3b:93:fb:71:f0:ce:
         d0:e3:30:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:22:00 2025 by rpki-client