Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69e90cbb-ba83-38f0-8877-d063b3d041d7.roa
File:                     69e90cbb-ba83-38f0-8877-d063b3d041d7.roa (raw, json)
Hash identifier:          SAV3Ermo7mhJlUNNPPvMRmeOxVckx7GvdlyvPM3CW0I=
Subject key identifier:   35:5B:5A:3C:C0:11:B5:72:2B:89:1A:6F:67:B8:B6:F2:68:27:AE:CA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB068BB1C7BE5E4FA17FF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69e90cbb-ba83-38f0-8877-d063b3d041d7.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33659
IP address blocks:        73.197.30.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:68:bb:1c:7b:e5:e4:fa:17:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=deff8806-5f5e-4654-802e-4242a8473975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:9e:db:40:58:41:3b:f5:7e:d0:10:5e:e2:
                    9b:4f:64:be:5f:35:57:ef:f3:e5:bd:c1:1f:f0:6b:
                    7c:4e:70:65:3f:e1:7b:65:64:6c:3a:e9:e9:67:78:
                    dc:15:dc:88:18:bd:2a:f7:0f:cf:b4:fb:a4:b3:63:
                    3e:e5:6b:c9:3b:56:f6:4b:e8:d7:6d:be:eb:ed:8c:
                    f6:39:a1:71:db:c8:b7:2e:2a:b7:c9:d8:0a:03:34:
                    17:04:ea:40:a6:cc:e9:71:04:53:47:8b:fa:a3:89:
                    71:b3:01:a5:99:47:b1:99:20:97:f2:e2:98:a9:bc:
                    ef:ed:81:ab:7a:bc:3d:4c:45:87:83:8c:e7:c0:9e:
                    ab:2e:ff:00:0c:4f:9d:46:eb:a4:d9:32:34:85:f7:
                    0c:f1:cb:e4:4e:0a:92:cf:09:7f:78:e4:9f:5a:8b:
                    3e:18:21:d5:5a:aa:19:8e:f5:94:37:e5:18:ad:cf:
                    d0:36:c3:21:e0:97:51:a4:b0:99:26:89:89:b9:a1:
                    74:2f:7e:b0:64:f6:c9:91:fe:7b:a4:70:17:37:cb:
                    78:c7:8f:55:b5:02:09:c7:65:81:06:6a:66:88:08:
                    39:2e:b5:43:e7:dc:5e:03:71:35:80:1f:b5:07:5b:
                    65:92:73:f0:75:2a:85:93:bf:cf:48:b5:32:06:e1:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5B:5A:3C:C0:11:B5:72:2B:89:1A:6F:67:B8:B6:F2:68:27:AE:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69e90cbb-ba83-38f0-8877-d063b3d041d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.197.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:23:b7:ef:ea:2f:36:36:16:48:25:f7:ea:ba:01:be:f6:3c:
         e6:07:ad:4b:4a:6e:cd:de:a6:e8:7b:eb:c0:0c:18:7e:a7:f8:
         72:4a:b2:64:1b:ec:7d:72:30:1f:b9:37:ad:27:1b:ab:21:11:
         6b:53:3c:2c:7b:de:70:ee:01:f0:25:72:6f:5a:9c:4c:23:75:
         15:91:bc:49:3a:91:13:b1:5e:c3:a8:e8:8e:7e:d8:e4:16:3a:
         cd:ee:1a:7a:d3:f6:f0:68:15:99:9a:34:04:94:d5:70:b6:a8:
         37:35:0e:34:5d:c3:6b:8e:a6:99:80:c0:5f:f0:1a:09:67:1e:
         c5:6c:a9:02:98:b8:59:a9:b7:1b:a5:ab:88:8b:e4:0e:a3:e2:
         49:8c:2e:ac:bd:1a:9c:b5:e2:42:25:21:24:ba:4d:0f:49:1e:
         16:4e:5b:c0:32:cf:3a:78:ed:9f:fd:a1:71:e4:15:89:72:5b:
         d1:33:45:e5:9d:83:3c:74:f2:aa:12:38:9a:79:70:23:cd:55:
         64:7c:d7:54:9d:08:9f:25:9d:bd:e0:f5:63:5c:de:0b:9b:77:
         9c:e0:18:43:d9:68:5c:f7:20:d4:dc:f8:78:0a:e7:9e:22:d3:
         06:35:dc:82:e1:76:ed:06:b9:75:82:6f:0b:7b:0e:37:e3:d5:
         ee:e5:da:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:57 2025 by rpki-client