Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/483e4bea-0ece-3232-8c8e-106e682bd978.roa
File:                     483e4bea-0ece-3232-8c8e-106e682bd978.roa (raw, json)
Hash identifier:          IqbKUrQsevSZXFDDux6dMoLxIBsANZYg4WD2DJN8Lt0=
Subject key identifier:   9E:AF:10:4E:FB:57:B1:F0:CE:60:87:91:3E:A0:C9:14:B1:03:3B:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1366595B01F8CDEF28980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/483e4bea-0ece-3232-8c8e-106e682bd978.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.74.160.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:36:65:95:b0:1f:8c:de:f2:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=3e6659a3-db51-4a4a-9a54-a59127ef2231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:40:c8:95:04:93:eb:75:d8:a8:0a:07:3a:44:
                    e3:3b:e4:04:87:bc:77:d6:b5:16:a0:55:32:90:e1:
                    61:73:b0:c9:15:c6:ab:13:68:36:29:ea:08:b2:6d:
                    9b:10:54:f4:78:42:7b:e7:73:2f:4d:fe:f2:87:21:
                    b3:b0:e7:00:4b:77:8a:34:fe:d1:85:88:90:b0:a1:
                    01:d4:66:7e:c4:ce:54:3d:ab:5e:a6:99:6d:e7:d4:
                    e6:68:9b:f6:10:26:de:95:2e:f5:b4:39:35:56:47:
                    1c:d1:ed:5d:27:69:83:cb:49:7a:36:ed:f2:72:20:
                    5a:cc:3b:51:b8:ef:c5:59:87:1b:ff:99:fd:e6:70:
                    09:7c:60:b2:3e:a6:36:4b:6a:1f:cd:f3:fd:91:ed:
                    fa:f3:df:53:7c:53:b6:04:0e:c1:da:59:54:f4:07:
                    e3:7c:ab:c2:ad:14:a1:c6:8a:46:77:4f:e4:97:96:
                    ef:9f:53:9e:2b:31:05:e3:fd:03:7f:d0:78:c5:15:
                    e9:c5:23:47:3d:b4:9e:c4:de:f9:90:73:ca:ee:8f:
                    10:cf:11:c1:65:1d:82:2f:51:8d:e6:25:9f:13:a3:
                    c9:f7:c6:1a:a7:bf:a2:c5:04:7a:5c:68:2c:82:ef:
                    ec:4d:8b:26:6d:1a:f8:85:6c:4b:ee:49:93:9a:0f:
                    2b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AF:10:4E:FB:57:B1:F0:CE:60:87:91:3E:A0:C9:14:B1:03:3B:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/483e4bea-0ece-3232-8c8e-106e682bd978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.74.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:08:9c:0a:b8:a1:9f:31:8d:d4:c8:ef:47:d8:12:2b:dd:a0:
         d9:2f:ff:82:22:6c:4a:e7:80:fb:a7:18:91:1e:5a:d1:2b:2c:
         d4:7c:19:1d:5f:01:9f:ec:a1:91:f7:1b:b0:0d:51:a6:b3:84:
         dd:8a:0b:4f:c0:07:e9:8c:9e:9e:e5:2d:82:51:34:43:22:ee:
         89:8b:79:9a:9d:19:e2:e0:1f:b0:ad:c5:5b:08:40:8c:e0:b6:
         ed:e7:50:16:9b:53:87:90:38:95:19:c3:53:9a:9e:cf:d5:5f:
         f5:70:95:11:53:58:2f:b3:1c:ac:ef:c1:2a:e4:b3:69:17:1b:
         67:f8:f8:4a:6b:f9:af:22:20:12:c4:14:78:1e:ae:cb:33:8e:
         71:de:47:d4:fc:ce:12:59:a3:85:f5:58:83:93:3c:2e:03:42:
         34:f9:63:ee:10:21:4e:94:bd:c8:60:44:aa:33:9d:fd:68:06:
         62:ff:72:4b:89:42:b0:cb:be:29:07:0c:7e:06:8e:1e:57:87:
         85:2c:7f:4f:ce:0a:81:f5:f2:c0:6e:84:be:0f:cc:d3:58:a8:
         48:e3:ad:2f:9f:db:d6:bc:72:9c:0a:2a:1d:94:fd:c3:22:76:
         09:ba:8a:5f:48:b2:71:ec:ae:3c:08:55:7c:58:71:52:72:9a:
         8e:cd:c5:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssTZllbAfjN7yiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
M2U2NjU5YTMtZGI1MS00YTRhLTlhNTQtYTU5MTI3ZWYyMjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0DIlQST63XYqAoHOkTjO+QEh7x31rUWoFUy
kOFhc7DJFcarE2g2KeoIsm2bEFT0eEJ753MvTf7yhyGzsOcAS3eKNP7RhYiQsKEB
1GZ+xM5UPatepplt59TmaJv2ECbelS71tDk1Vkcc0e1dJ2mDy0l6Nu3yciBazDtR
uO/FWYcb/5n95nAJfGCyPqY2S2ofzfP9ke36899TfFO2BA7B2llU9AfjfKvCrRSh
xopGd0/kl5bvn1OeKzEF4/0Df9B4xRXpxSNHPbSexN75kHPK7o8QzxHBZR2CL1GN
5iWfE6PJ98Yap7+ixQR6XGgsgu/sTYsmbRr4hWxL7kmTmg8rnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ6vEE77V7HwzmCHkT6gyRSxAzsXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDgzZTRiZWEtMGVjZS0z
MjMyLThjOGUtMTA2ZTY4MmJkOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUqgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANYInAq4oZ8xjdTI70fYEivdoNkv/4IibErngPunGJEeWtErLNR8GR1f
AZ/soZH3G7ANUaazhN2KC0/AB+mMnp7lLYJRNEMi7omLeZqdGeLgH7CtxVsIQIzg
tu3nUBabU4eQOJUZw1Oans/VX/VwlRFTWC+zHKzvwSrks2kXG2f4+Epr+a8iIBLE
FHgersszjnHeR9T8zhJZo4X1WIOTPC4DQjT5Y+4QIU6UvchgRKoznf1oBmL/ckuJ
QrDLvikHDH4Gjh5Xh4Usf0/OCoH18sBuhL4PzNNYqEjjrS+f29a8cpwKKh2U/cMi
dgm6il9IsnHsrjwIVXxYcVJymo7NxWw=
-----END CERTIFICATE-----