Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/819e23fc-87e0-3915-9d0f-1e494899d66b.roa
File:                     819e23fc-87e0-3915-9d0f-1e494899d66b.roa (raw, json)
Hash identifier:          MQc4d4ii9F1+rrTJZW4B9Digb+hYRo6qzcVm2M8Fa7Y=
Subject key identifier:   26:CE:8B:29:42:D7:5F:B8:A7:82:B2:9C:0F:F7:1E:74:76:10:12:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F943BE8089D31CC6DDB980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/819e23fc-87e0-3915-9d0f-1e494899d66b.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        73.76.112.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:43:be:80:89:d3:1c:c6:dd:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=d850ac3d-4740-471d-a303-ae146bae8780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:77:88:f0:2d:5d:7f:bc:bf:a2:7a:37:af:9f:
                    c6:67:18:e6:29:11:74:26:7c:24:7f:f8:4a:61:e1:
                    5e:4d:8b:45:0b:3e:93:20:d0:22:42:4f:7d:eb:3e:
                    08:ea:e2:5a:1c:78:56:58:8c:ee:a6:64:d6:7b:ad:
                    9d:b3:4a:63:bc:c4:50:80:31:f8:98:78:29:2b:9d:
                    69:54:17:ef:98:7c:80:28:4f:a5:0c:cd:d6:b4:de:
                    2e:87:9b:61:14:03:92:2d:1a:30:81:81:ad:af:b4:
                    b3:76:89:d7:fb:da:13:11:9d:57:bb:4e:7a:6d:15:
                    3d:4b:e6:52:c5:37:13:90:0b:1b:ef:a3:d8:36:46:
                    be:ef:01:65:de:87:0b:ee:4e:2d:71:0b:de:ac:84:
                    9b:6e:b1:a5:ec:a8:b0:13:63:1a:b1:df:97:1b:c8:
                    f7:3e:db:96:8e:5e:0e:67:70:d4:80:d5:b8:ae:95:
                    a7:e6:aa:f8:4f:d9:d9:2b:cc:34:1e:d9:57:61:74:
                    80:fb:5d:55:16:87:ad:ad:b0:1d:b2:85:35:71:88:
                    ff:4f:4b:87:82:d0:a5:16:f1:a1:78:ee:a8:d5:dc:
                    cc:7c:0d:9d:e7:43:29:8c:a9:1a:32:c2:c2:66:34:
                    a0:4d:59:01:27:72:35:b6:66:bb:ea:24:2a:3d:53:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CE:8B:29:42:D7:5F:B8:A7:82:B2:9C:0F:F7:1E:74:76:10:12:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/819e23fc-87e0-3915-9d0f-1e494899d66b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.76.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:06:71:b9:73:c5:19:70:09:ed:e2:26:00:9c:30:1b:1f:36:
         5e:31:ce:0c:dd:fa:3f:fc:91:ce:13:a7:35:9d:71:a2:1f:bc:
         d4:5b:2c:48:ed:b1:1a:62:a5:d3:88:da:ef:b6:1e:7b:dd:67:
         79:a6:f7:ca:84:6d:e2:2b:46:bc:02:ba:e5:f4:8e:e3:2c:d8:
         8c:61:5f:9f:50:96:5f:bb:d8:cd:71:68:bd:82:77:b0:81:93:
         b9:94:1e:ca:a4:b3:8b:eb:03:5b:d0:a0:83:ae:26:00:23:0e:
         e8:f2:f7:1d:79:c4:5e:4e:11:ad:a0:bb:0f:e8:99:e8:9f:52:
         e7:4d:9c:1e:3f:9e:89:99:30:75:a7:39:c3:61:38:22:f3:19:
         43:98:bf:4a:cc:ae:aa:0e:34:31:97:05:43:ef:13:b0:bd:dc:
         f9:fd:f6:31:83:71:b0:a1:48:8a:0b:4c:11:4c:cf:a1:d9:42:
         4f:bb:8c:c2:61:6f:76:9e:91:43:aa:e3:a2:1f:b8:0e:bd:1a:
         b9:91:65:3c:2d:66:3c:a1:2b:69:51:29:2d:11:7d:83:18:6b:
         03:6c:e3:19:74:1c:18:1b:74:49:2e:35:20:8a:8e:41:e0:3f:
         8c:85:b7:05:39:91:67:f3:ec:0b:a9:7b:f0:2e:00:32:c6:37:
         4b:20:dd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----