Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6acea51-bc3a-3179-97f3-99408d43fb6a.roa
File:                     a6acea51-bc3a-3179-97f3-99408d43fb6a.roa (raw, json)
Hash identifier:          GRdpUoHWu9cSMyl75ScpvAPQObx73xyfLbxkmz47HbM=
Subject key identifier:   FC:B9:40:31:4D:B6:8F:5F:50:41:5F:E4:FC:5E:7C:26:99:D4:79:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7EEBDC62CF316D72FBA20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6acea51-bc3a-3179-97f3-99408d43fb6a.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        73.255.10.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:ee:bd:c6:2c:f3:16:d7:2f:ba:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=5a184f88-3f11-4ab8-a043-50759055dfa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:ae:d3:96:7a:20:c5:6a:c5:0a:ed:d3:6b:
                    da:60:6f:4a:80:5b:b1:14:6a:62:ee:be:53:d5:f5:
                    b9:fc:3c:bb:db:7f:90:4f:51:cb:58:81:6e:b1:a7:
                    fa:4f:37:f5:2a:f0:1f:3b:fa:36:4d:89:d1:3a:42:
                    83:8f:45:b6:e5:ad:88:1f:23:6e:b7:a0:98:2c:55:
                    bb:0c:e1:de:a6:0e:01:70:3f:1a:cd:e4:54:e2:c9:
                    bc:45:ff:f7:26:01:6b:88:b5:1a:f1:f8:2a:28:c9:
                    a6:aa:b4:f5:f5:33:c3:2a:41:a4:14:da:29:4a:5d:
                    cf:68:38:ec:56:43:61:bb:37:24:35:99:84:ea:9f:
                    c9:99:36:35:14:da:35:bd:14:32:3a:1f:3a:32:cb:
                    0d:59:55:41:31:2b:1e:a9:14:72:a2:e3:a5:d0:ff:
                    a2:74:ec:16:f2:3c:9e:cf:57:8a:4f:12:50:04:a7:
                    17:8b:2a:c1:ec:46:84:ef:b4:46:dc:47:3d:7d:bf:
                    b4:39:1f:5b:57:66:09:b0:75:60:2b:e4:84:c3:a6:
                    a2:4e:16:34:7f:18:1a:8b:3f:3a:e3:73:38:d6:f2:
                    82:50:39:f5:98:ab:54:21:cc:18:56:82:e4:91:f1:
                    85:09:3b:9b:24:de:41:dd:e2:ef:e4:93:0b:b0:6c:
                    d0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B9:40:31:4D:B6:8F:5F:50:41:5F:E4:FC:5E:7C:26:99:D4:79:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6acea51-bc3a-3179-97f3-99408d43fb6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.255.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:9e:51:b1:d1:af:cc:d0:fd:7c:ce:df:08:28:2f:d0:17:e1:
         3b:68:56:f3:4c:af:ff:f1:3f:e5:cf:7e:83:f1:38:88:37:b3:
         22:48:b8:be:63:1e:24:df:af:b2:8a:05:f0:3e:1f:79:33:f5:
         aa:bf:e0:f5:30:47:d0:79:0d:44:4c:2e:1d:bd:5a:33:c5:25:
         c2:4e:e5:87:92:1c:9b:dd:54:e7:09:e9:5e:0c:a9:c5:32:d5:
         c4:7a:44:8b:9c:38:63:95:b5:00:66:b5:36:57:51:b6:d2:0d:
         68:1d:d7:cb:7e:22:4c:e0:8a:83:ee:f7:6c:7f:11:3a:b7:bb:
         91:be:d8:7f:b8:6f:50:0a:3c:ba:c2:a4:56:8b:30:67:bc:6e:
         f8:67:70:d7:2a:b7:ee:0a:6e:26:50:34:5f:1a:ab:40:35:dd:
         e9:59:7b:72:fe:bb:d8:51:47:a4:93:a2:c1:69:a2:d8:17:a9:
         6c:dd:3f:e8:10:87:10:8f:d6:75:23:6b:27:4a:b8:86:13:9c:
         dd:73:1d:c7:9a:1f:c2:53:38:e2:18:12:ac:91:00:2e:64:37:
         aa:f5:ef:9f:18:17:3a:cb:23:c5:33:ed:0e:6f:78:43:80:cd:
         42:5f:94:b3:d0:d2:56:bc:1f:e6:d7:aa:d5:66:29:e5:6c:a6:
         66:d8:32:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:14:55 2025 by rpki-client