Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96714041-441f-38c0-85cd-2a77013aef16.roa
File:                     96714041-441f-38c0-85cd-2a77013aef16.roa (raw, json)
Hash identifier:          sEsZKyfP1xgRUYnSkfRLgAK+ThhLq51ys8SXTzpwplc=
Subject key identifier:   2F:AE:EB:EB:38:28:C3:D6:3E:AC:F5:3E:24:FB:7F:F0:AF:8E:5E:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFF33E3B5258FB7BCD1F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96714041-441f-38c0-85cd-2a77013aef16.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        73.158.224.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:f3:3e:3b:52:58:fb:7b:cd:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=080668a7-1b00-4cad-ad44-38e6a309067f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:06:e1:56:e9:f2:ee:b2:6d:7d:cd:46:fb:
                    8f:79:fd:88:a9:ce:ed:91:87:66:b2:34:eb:d7:9b:
                    2e:82:09:48:11:5e:f3:98:50:8d:b4:e5:c9:f3:82:
                    bf:46:08:c4:5e:d0:f3:f6:62:54:b3:0a:05:6e:36:
                    ca:08:29:1e:cc:45:1c:03:d0:c1:58:44:09:87:92:
                    d6:77:ad:51:26:4f:23:97:18:9d:2f:ec:ed:95:52:
                    0d:f2:73:b9:e5:25:ba:97:d7:83:fd:8b:fc:3d:8f:
                    41:3d:1b:1c:68:02:bd:6f:e6:93:c1:88:10:89:f5:
                    ab:ee:dc:2c:b1:8c:07:51:e0:6f:c6:03:34:67:d3:
                    81:90:74:77:67:4a:82:00:12:74:00:3f:b9:65:de:
                    86:89:80:f5:ff:cb:d9:a0:8d:b8:fb:14:de:17:77:
                    52:1f:ef:10:7f:a9:e8:31:ee:f7:26:11:a0:33:8a:
                    a4:c2:d3:3a:e2:0a:f1:57:3e:3c:90:b5:33:b1:5f:
                    dc:7b:75:f6:f0:a9:f1:b3:a9:49:36:a6:0f:0c:a6:
                    e4:9b:37:e2:eb:eb:a5:63:6b:db:58:07:f1:f7:75:
                    84:81:84:34:52:74:31:e2:04:b8:85:7c:07:e9:65:
                    5f:be:50:0a:5c:2b:24:e8:21:d1:71:0a:59:eb:85:
                    b0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AE:EB:EB:38:28:C3:D6:3E:AC:F5:3E:24:FB:7F:F0:AF:8E:5E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96714041-441f-38c0-85cd-2a77013aef16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.158.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d9:9d:e4:e3:c1:a7:58:51:dc:3b:89:46:ce:4a:fc:03:c0:
         4a:56:e4:59:2b:4b:e0:98:69:01:15:b3:2c:ac:db:e0:49:44:
         72:db:f0:4b:9f:71:8e:3e:0e:73:36:5b:28:23:10:b4:4e:f5:
         4f:69:64:3e:7a:83:6c:44:a9:73:63:a7:af:c4:2f:2e:d3:10:
         23:c0:cc:d2:61:46:90:31:f8:af:d8:f2:76:d1:96:85:28:32:
         7f:b4:72:7d:8e:97:92:43:be:56:e0:a0:09:e2:a8:56:27:68:
         ff:4a:7d:13:fc:03:fe:de:b3:da:20:5d:6c:ee:27:da:17:b6:
         17:fa:71:90:88:2c:47:8d:0c:27:95:eb:dc:58:3b:5e:f2:08:
         d3:ed:51:a3:47:dd:19:ca:7e:dd:26:9d:66:2b:a8:d0:d3:f8:
         7a:0a:9a:4a:98:b6:f2:9b:df:7a:7a:4e:20:53:17:49:fd:25:
         41:de:f7:41:79:a0:f1:05:0b:9b:eb:c6:7a:f8:19:c4:dc:3f:
         5d:fe:45:38:56:79:45:f8:85:a7:5c:05:a0:d9:9f:50:f2:a1:
         85:2e:13:48:a4:1e:2c:5f:01:37:c6:54:c6:38:a1:7b:ee:ff:
         ee:5a:fc:ef:7f:aa:92:d3:75:79:6a:59:03:08:e2:ab:0b:0b:
         02:70:7e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:41:46 2025 by rpki-client