Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53f6128d-5164-3b20-8970-86e4c98ddb8b.roa
File:                     53f6128d-5164-3b20-8970-86e4c98ddb8b.roa (raw, json)
Hash identifier:          OZXp+IDW5OUIqJlEJNda5tO6MmkR96DSan/XpQ0FdUg=
Subject key identifier:   F7:67:39:7D:AD:4B:67:DD:49:1D:A5:91:B4:39:9E:8B:F4:D9:FA:BE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F717807BE52AB953CD8080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53f6128d-5164-3b20-8970-86e4c98ddb8b.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        73.126.112.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:17:80:7b:e5:2a:b9:53:cd:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=f2a4f055-db23-43e0-8013-de00ebd03912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:73:d0:c2:6b:89:9a:2e:10:c5:b4:3e:f9:
                    9c:49:bc:9b:d3:3a:f8:e1:dc:61:6e:41:c8:3a:33:
                    df:87:5b:71:6f:45:4c:1a:87:d2:8f:d4:82:24:97:
                    b8:4e:c2:af:74:37:fd:8c:7a:c8:9c:53:7e:cb:b5:
                    76:62:46:d2:54:b7:29:01:05:6d:23:3d:3f:58:ee:
                    df:4c:5d:0d:90:e9:7b:e5:8e:cc:6d:94:5a:89:d0:
                    0f:fd:67:4e:b2:2f:f6:a8:bf:b0:d5:0b:0d:37:b1:
                    b3:d9:19:c6:6a:78:a6:32:32:c2:6c:df:e7:ea:93:
                    a5:fd:5d:3c:30:d4:04:fa:e5:51:77:3d:e3:1f:37:
                    fb:79:8e:8b:d6:af:5e:1a:8d:d0:dd:e1:db:02:1b:
                    25:84:ff:a6:33:55:0c:4a:77:24:aa:8d:ee:c0:c0:
                    e1:65:35:4a:4a:13:5e:d9:a6:1b:98:53:42:b2:50:
                    5c:18:a0:20:9a:47:03:c9:6a:79:e5:7f:bf:8e:ed:
                    61:9e:f1:fd:32:cf:80:af:93:f3:e8:f4:da:d0:df:
                    f7:81:ea:e6:43:32:8c:5d:3c:5f:f9:f7:39:47:5d:
                    74:85:60:19:53:8f:90:ab:08:69:71:a3:07:71:80:
                    ce:41:f6:cb:44:e0:df:d3:34:70:98:92:de:d3:73:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:67:39:7D:AD:4B:67:DD:49:1D:A5:91:B4:39:9E:8B:F4:D9:FA:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53f6128d-5164-3b20-8970-86e4c98ddb8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.126.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c2:bf:a5:52:97:d9:0a:30:5f:2f:0c:f7:a0:6a:6a:d5:a9:
         7e:d3:46:16:17:9b:1a:7f:97:f9:dc:9a:48:6a:41:c1:53:45:
         2e:b2:bb:7d:16:33:c5:6f:73:a0:9f:9d:b4:4e:d0:0f:0a:a3:
         58:78:c4:e7:9f:70:2a:74:0d:ac:7d:c6:3c:b6:a1:22:08:3d:
         54:1f:fc:b2:6c:fe:74:49:38:be:12:27:67:40:89:09:ce:d4:
         9a:e9:81:38:1d:5a:71:6e:50:25:69:96:f7:8b:34:4d:7e:38:
         de:6a:fe:b2:1e:5c:2d:8b:75:98:c1:c8:d6:f6:6d:a2:3f:79:
         e0:cd:62:0e:f8:0d:8c:4e:9b:e2:83:d5:ce:49:8b:3f:49:43:
         71:e1:23:dc:a6:e9:32:5b:e6:24:77:b0:72:98:c0:c0:72:88:
         04:f1:5c:98:44:cc:19:73:d2:66:ca:64:cb:a7:2c:d1:14:d2:
         1a:e4:f3:7f:cc:91:c3:d1:00:9d:2f:45:24:7e:37:c3:8d:94:
         73:60:d8:4c:3f:45:fb:7f:35:25:6d:ab:ac:08:c0:04:25:82:
         cc:0c:09:ce:1c:85:fc:63:b7:61:0f:d3:91:80:2c:12:90:33:
         4c:97:93:17:3d:17:4a:ee:9f:4a:3a:12:59:83:8f:03:b6:c9:
         67:f8:99:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09xeAe+UquVPNgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
ZjJhNGYwNTUtZGIyMy00M2UwLTgwMTMtZGUwMGViZDAzOTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuStz0MJriZouEMW0PvmcSbyb0zr44dxhbkHI
OjPfh1txb0VMGofSj9SCJJe4TsKvdDf9jHrInFN+y7V2YkbSVLcpAQVtIz0/WO7f
TF0NkOl75Y7MbZRaidAP/WdOsi/2qL+w1QsNN7Gz2RnGanimMjLCbN/n6pOl/V08
MNQE+uVRdz3jHzf7eY6L1q9eGo3Q3eHbAhslhP+mM1UMSnckqo3uwMDhZTVKShNe
2aYbmFNCslBcGKAgmkcDyWp55X+/ju1hnvH9Ms+Ar5Pz6PTa0N/3germQzKMXTxf
+fc5R110hWAZU4+QqwhpcaMHcYDOQfbLRODf0zRwmJLe03OnMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPdnOX2tS2fdSR2lkbQ5nov02fq+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTNmNjEyOGQtNTE2NC0z
YjIwLTg5NzAtODZlNGM5OGRkYjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSX5wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI3Cv6VSl9kKMF8vDPegamrVqX7TRhYXmxp/l/ncmkhqQcFTRS6yu30W
M8Vvc6CfnbRO0A8Ko1h4xOefcCp0Dax9xjy2oSIIPVQf/LJs/nRJOL4SJ2dAiQnO
1JrpgTgdWnFuUCVplveLNE1+ON5q/rIeXC2LdZjByNb2baI/eeDNYg74DYxOm+KD
1c5Jiz9JQ3HhI9ym6TJb5iR3sHKYwMByiATxXJhEzBlz0mbKZMunLNEU0hrk83/M
kcPRAJ0vRSR+N8ONlHNg2Ew/Rft/NSVtq6wIwAQlgswMCc4chfxjt2EP05GALBKQ
M0yXkxc9F0run0o6ElmDjwO2yWf4mag=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:01:28 2025 by rpki-client