Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/583e94de-6327-31d4-a8c3-fa7731277363.roa
File:                     583e94de-6327-31d4-a8c3-fa7731277363.roa (raw, json)
Hash identifier:          JV+adBYa8QI2cfSjULvUTXUJXS5gtyJ4plA+Y/+xMzY=
Subject key identifier:   B0:03:42:53:73:27:98:9E:82:E1:CA:AD:BA:40:11:29:33:7E:D5:07
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB12E23EFC79E9EBB50BF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/583e94de-6327-31d4-a8c3-fa7731277363.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.51.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:2e:23:ef:c7:9e:9e:bb:50:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=83a27971-de0b-44ef-8afc-580e5260fba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:d3:cf:c6:da:ea:09:1f:cf:15:ec:40:2b:
                    2b:20:72:d0:d3:1e:8e:aa:14:c1:8f:d3:e0:e9:9d:
                    aa:8a:41:a8:09:40:f0:32:c8:07:83:3a:0f:75:7e:
                    dc:9d:82:da:59:ae:46:a5:f8:9b:7c:5d:80:48:b3:
                    b9:b6:2d:68:50:15:9a:e1:36:37:96:84:14:60:af:
                    48:3f:12:98:df:b9:e1:2e:5d:30:19:a5:cb:be:7c:
                    57:dd:02:44:00:b7:b5:f9:c7:62:ff:f4:e0:dd:86:
                    0c:ad:a2:a4:d7:34:d8:0c:55:7f:28:96:5b:4d:3b:
                    1c:ed:50:8b:13:0e:bc:2f:db:f8:78:ef:be:49:e8:
                    d4:67:39:46:1f:8f:d1:0e:f3:30:54:ff:95:18:5b:
                    df:71:b9:71:6b:44:08:14:05:d6:37:98:0c:82:94:
                    a1:2d:14:6b:a0:d9:47:fb:4b:fc:c2:14:c4:c8:d5:
                    ef:76:c6:7a:05:51:af:18:3e:d2:4b:ef:c6:da:b3:
                    f6:13:28:e7:9f:e7:17:37:02:6c:e5:12:9c:6b:66:
                    ba:63:83:01:65:10:ee:06:a1:0f:02:0a:21:ec:5d:
                    47:b8:65:1f:6b:f8:21:29:20:a5:4d:41:ba:d6:65:
                    0c:0b:f7:6a:66:12:16:ff:ee:d5:e0:07:64:6a:12:
                    bc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:03:42:53:73:27:98:9E:82:E1:CA:AD:BA:40:11:29:33:7E:D5:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/583e94de-6327-31d4-a8c3-fa7731277363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.51.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:49:03:c3:56:f2:3a:23:6c:f7:38:ff:e6:67:d2:18:08:93:
         39:95:b6:f8:91:42:de:01:5d:fe:90:9e:9a:01:63:9d:38:e6:
         fe:a2:6e:97:24:b9:98:50:91:6f:54:1c:58:04:3f:1d:0f:09:
         5e:6c:e4:de:84:25:b0:b7:74:3d:95:81:3f:5a:4a:16:78:eb:
         48:d4:1e:46:41:1a:38:d3:6e:5a:9e:1c:2d:e1:f9:9d:80:11:
         22:e1:35:77:f3:a2:6f:99:5d:71:7f:9b:b8:30:6b:f1:61:5b:
         f4:fd:30:11:a9:17:8f:f3:38:42:35:b9:ff:bf:82:9d:24:77:
         3c:a8:c9:c8:5f:75:ba:71:f0:fd:7b:e3:ab:f7:09:cb:bf:bd:
         36:28:c7:9d:67:61:d1:96:62:8c:a9:be:ef:2e:03:7e:31:9a:
         af:83:fb:81:ec:d4:1f:d7:50:03:6e:70:99:09:0d:d2:62:d5:
         28:af:91:00:43:a9:f3:35:02:7f:e7:57:b0:2d:f1:08:e4:3c:
         72:36:e9:1b:50:21:9b:30:00:a0:ef:d2:c8:bb:af:88:ba:39:
         9f:cf:e5:e3:27:84:b8:86:87:6f:d7:70:fe:1a:17:04:3b:8a:
         06:bc:a4:9f:79:90:f3:a8:c6:f8:42:7e:85:ae:db:6d:70:29:
         83:8d:5e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:22:22 2025 by rpki-client