Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55a53513-2564-306d-b49b-2133a2280c1a.roa
File:                     55a53513-2564-306d-b49b-2133a2280c1a.roa (raw, json)
Hash identifier:          NjnDfloIZYQPzkFStaFybA8kPxo5qV1ddnEYTn9oZt4=
Subject key identifier:   28:2D:85:B0:36:A5:B5:9F:A8:14:29:99:98:D8:E0:1F:FA:E2:1A:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203CA81179B2CB55F65D7A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55a53513-2564-306d-b49b-2133a2280c1a.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.237.188.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:a8:11:79:b2:cb:55:f6:5d:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=3efc5198-5e67-49ff-9762-dad06780a9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:20:f1:1a:52:f4:a2:cf:f0:3c:bd:fc:57:98:
                    8a:b0:f2:8c:d7:e7:42:85:ed:ab:06:3c:c1:80:15:
                    f2:ea:f4:61:4f:25:01:d1:c6:67:3d:19:16:80:1b:
                    c6:0f:ba:e9:3b:05:9a:9d:df:3d:f5:cf:23:59:9e:
                    43:42:91:83:dc:b0:53:0e:ad:2a:eb:4a:98:f2:86:
                    a8:5e:11:5b:53:83:ef:5b:2e:3a:9a:f5:62:17:db:
                    62:7a:45:da:99:f5:10:59:dc:8b:90:c1:11:98:ec:
                    87:63:1d:85:bd:bc:8e:5b:a6:43:91:40:47:5a:ad:
                    de:25:ee:f0:a6:e3:5e:16:da:65:84:c4:9b:d2:94:
                    3f:df:96:21:34:9e:b7:63:6d:8e:42:41:b1:3b:49:
                    d7:26:70:9a:90:56:c0:22:a4:57:fd:95:d2:3d:b7:
                    52:58:88:1b:a7:92:80:58:39:75:1a:10:7f:b0:88:
                    86:9c:ae:84:78:3b:9a:46:60:2e:6a:cb:c3:f4:fd:
                    d3:77:a7:40:a9:2c:2c:69:e5:08:49:f3:59:1b:33:
                    b8:fd:90:54:6f:dc:29:e4:94:84:37:48:36:5a:75:
                    85:ae:05:cd:05:50:82:9d:cc:97:01:d3:e7:06:98:
                    bd:6e:e0:22:fd:ed:17:fb:67:54:45:e1:18:c5:f2:
                    e9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2D:85:B0:36:A5:B5:9F:A8:14:29:99:98:D8:E0:1F:FA:E2:1A:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55a53513-2564-306d-b49b-2133a2280c1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.237.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c2:c8:05:10:c5:17:1b:f2:6c:84:30:51:88:7d:7c:4f:15:
         27:26:94:9f:72:77:b8:72:13:3f:4b:33:05:a2:a8:c1:9a:99:
         58:a6:ba:b2:03:1c:b3:73:db:ca:64:4b:18:a6:d3:d7:0b:1e:
         b8:33:22:a2:6b:34:59:93:57:b9:02:b0:27:97:5c:87:60:09:
         cf:60:36:23:62:85:16:13:28:52:45:98:ad:02:99:fb:f9:95:
         f0:df:71:05:8a:fa:8d:e9:a6:02:0f:f1:74:8d:4f:d2:35:70:
         dd:2d:c4:35:0a:96:f2:33:d9:ec:18:3d:38:f8:72:a1:da:b0:
         d9:54:da:60:f4:bf:9b:c2:a7:a5:50:bc:eb:ed:ea:4e:18:45:
         7d:b3:62:d7:23:42:6b:d3:9b:13:14:b5:45:9c:fb:87:19:99:
         b9:ae:69:e3:af:bd:03:dd:3f:6a:74:30:4b:ab:40:37:e6:46:
         8f:26:5a:c2:90:6a:fe:e0:e3:26:f8:d0:4f:a9:49:ed:50:f9:
         3c:72:88:ed:46:9e:6d:e6:b2:ae:4a:84:b2:5b:09:91:ad:2f:
         e9:7b:fa:1c:16:c0:08:a6:01:69:ff:91:cf:54:7d:7b:97:92:
         7e:49:60:88:c2:43:e0:30:c5:42:88:90:7e:89:8b:e0:40:26:
         23:d4:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:14:50 2025 by rpki-client