Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9af38f19-1f7d-3751-8990-d3b5ab74c02d.roa
File:                     9af38f19-1f7d-3751-8990-d3b5ab74c02d.roa (raw, json)
Hash identifier:          0M0155M90UJX7uZ1qxE5Qxvbp6iZEfAuT0G3R+yyoMA=
Subject key identifier:   40:B3:B3:D9:51:7D:86:55:43:07:C7:70:CE:B0:86:C6:59:DA:79:71
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6B91F73EE3641F13DFA180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9af38f19-1f7d-3751-8990-d3b5ab74c02d.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     22909
IP address blocks:        73.120.24.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:91:f7:3e:e3:64:1f:13:df:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=debe00d2-4c54-466a-86c9-64977b223bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:34:1d:13:c3:44:e5:7f:23:e8:19:2a:ef:9c:
                    9e:e5:52:80:2d:93:bb:92:b5:61:cc:6f:31:36:a5:
                    94:b7:a3:e0:21:52:07:36:9b:63:93:42:bc:12:6b:
                    b7:20:57:fd:05:0e:be:ba:27:c0:c3:d8:43:48:c5:
                    1b:99:50:a9:a6:48:c9:15:06:69:ba:72:2b:a4:37:
                    f1:57:c0:bb:eb:0f:a1:58:b8:95:0a:12:74:45:94:
                    a0:3b:53:c2:92:92:e3:1b:41:98:06:0a:d2:56:24:
                    f5:2b:e9:81:13:a5:08:e2:cf:ac:4e:88:b3:6f:62:
                    b7:15:48:20:44:6b:ca:9c:b8:46:63:19:ec:d2:0a:
                    a9:94:2a:46:3e:33:3a:a2:12:15:68:1c:99:a1:5a:
                    a0:cc:ee:d1:e6:30:70:af:1d:96:18:1c:73:3f:22:
                    06:2f:fd:f0:16:9e:3b:bc:c7:1e:e2:5e:79:45:f2:
                    a7:d9:97:f8:4e:b4:31:20:b0:90:85:2c:f4:b1:fb:
                    52:21:26:9d:23:02:d2:91:fb:d0:f0:94:4c:be:9b:
                    52:b4:49:37:aa:34:51:1c:f7:73:3c:5d:a8:bd:2e:
                    b7:7a:99:03:fe:3a:73:3e:91:9e:19:0f:ff:b5:7a:
                    d5:5b:e4:9c:61:a0:0e:2d:7b:54:96:fa:99:08:71:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B3:B3:D9:51:7D:86:55:43:07:C7:70:CE:B0:86:C6:59:DA:79:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9af38f19-1f7d-3751-8990-d3b5ab74c02d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.120.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:04:03:6c:1a:fd:e7:1e:a9:79:93:b6:82:1f:70:af:df:2a:
         31:7a:09:bc:2c:4a:f0:cf:17:5c:e1:94:fe:6c:60:f0:ca:b9:
         4e:1b:76:50:e3:16:66:88:33:92:cc:14:af:20:40:00:01:7a:
         e9:bc:62:91:67:ad:12:9b:b6:c6:89:30:1d:0a:8a:e2:9e:88:
         de:30:d0:17:03:bc:2f:16:a4:b6:0c:77:f8:be:68:af:32:15:
         40:54:56:93:5e:91:63:76:2b:a4:99:85:b3:8e:88:1b:4c:d5:
         07:84:77:4f:3a:dc:3c:cf:ed:94:a2:19:a2:9b:75:da:76:5d:
         01:e9:f8:c4:ff:ce:a7:1d:ca:5a:7a:2f:7d:87:f6:b4:99:f1:
         b2:04:8b:5d:fc:97:48:53:1e:8d:cc:29:5a:fc:ce:f5:86:55:
         96:b2:87:8d:4b:b2:7f:0e:d9:fd:0c:62:c1:6d:be:5d:96:86:
         64:0f:e4:c5:9a:7a:1a:a9:aa:d7:96:d6:dc:f3:79:33:cd:39:
         7a:57:ea:8f:5d:ca:06:60:b7:09:71:36:3e:ed:da:4f:ce:de:
         46:1f:27:ce:71:ab:70:87:0f:72:a9:ee:87:99:0d:e1:97:76:
         44:dc:ff:68:cf:64:36:58:71:ae:84:bd:ef:99:e3:43:cc:76:
         be:dc:fa:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea5H3PuNkHxPfoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZGViZTAwZDItNGM1NC00NjZhLTg2YzktNjQ5NzdiMjIzYmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDQdE8NE5X8j6Bkq75ye5VKALZO7krVhzG8x
NqWUt6PgIVIHNptjk0K8Emu3IFf9BQ6+uifAw9hDSMUbmVCppkjJFQZpunIrpDfx
V8C76w+hWLiVChJ0RZSgO1PCkpLjG0GYBgrSViT1K+mBE6UI4s+sToizb2K3FUgg
RGvKnLhGYxns0gqplCpGPjM6ohIVaByZoVqgzO7R5jBwrx2WGBxzPyIGL/3wFp47
vMce4l55RfKn2Zf4TrQxILCQhSz0sftSISadIwLSkfvQ8JRMvptStEk3qjRRHPdz
PF2ovS63epkD/jpzPpGeGQ//tXrVW+ScYaAOLXtUlvqZCHH6hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECzs9lRfYZVQwfHcM6whsZZ2nlxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWFmMzhmMTktMWY3ZC0z
NzUxLTg5OTAtZDNiNWFiNzRjMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXgYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA4EA2wa/eceqXmTtoIfcK/fKjF6CbwsSvDPF1zhlP5sYPDKuU4bdlDj
FmaIM5LMFK8gQAABeum8YpFnrRKbtsaJMB0KiuKeiN4w0BcDvC8WpLYMd/i+aK8y
FUBUVpNekWN2K6SZhbOOiBtM1QeEd0863DzP7ZSiGaKbddp2XQHp+MT/zqcdylp6
L32H9rSZ8bIEi138l0hTHo3MKVr8zvWGVZayh41Lsn8O2f0MYsFtvl2WhmQP5MWa
ehqpqteW1tzzeTPNOXpX6o9dygZgtwlxNj7t2k/O3kYfJ85xq3CHD3Kp7oeZDeGX
dkTc/2jPZDZYca6Eve+Z40PMdr7c+vI=
-----END CERTIFICATE-----