Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a81e2e69-3260-3691-bf22-57e878bccdca.roa
File:                     a81e2e69-3260-3691-bf22-57e878bccdca.roa (raw, json)
Hash identifier:          5ZjJHc1dtR65onri6vpb5dyj21PF04ZMM+5LeyXUipU=
Subject key identifier:   F5:73:69:45:40:AA:54:25:75:F8:73:18:45:A2:64:68:1F:97:2D:91
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB13B671F0063F1742E8880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a81e2e69-3260-3691-bf22-57e878bccdca.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.8.122.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:3b:67:1f:00:63:f1:74:2e:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=deb4ca52-09c6-4d44-ab36-40e9e52cf270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:74:24:52:ea:dc:6b:a0:73:02:0c:6c:d8:db:
                    42:c1:50:60:8e:56:57:3d:67:e7:0c:38:cc:e6:ab:
                    ac:14:05:af:37:97:6f:15:40:78:05:51:29:19:d8:
                    15:79:c6:c1:14:4d:ba:1a:8e:aa:04:a5:37:9e:29:
                    47:44:99:0c:7f:c2:24:89:c2:91:63:5e:12:da:22:
                    8f:02:df:e2:5d:70:7d:27:19:27:12:72:da:a3:67:
                    fa:af:0b:52:28:95:27:01:8f:a6:d9:98:50:08:40:
                    27:0b:57:27:f3:ed:12:63:f7:4d:ff:04:e8:7e:d2:
                    d4:10:09:0c:22:6a:f9:46:e5:46:e1:45:a9:73:54:
                    c8:51:15:54:f9:6d:95:8a:6a:06:7f:7d:6b:74:6f:
                    d5:ac:73:f0:d4:91:d6:17:3d:9c:49:77:c8:d4:a3:
                    41:7c:bf:53:2d:b4:65:6b:d2:8d:a0:3d:12:6d:45:
                    3e:f9:26:14:07:19:35:de:8f:fb:51:2c:66:0a:8c:
                    a9:96:a7:56:79:c9:49:73:21:9f:9f:9f:e8:fe:ad:
                    95:3a:22:56:a1:43:2b:ca:d9:91:84:dd:c2:3c:26:
                    a2:a6:4e:2e:2c:24:8e:20:92:63:05:7d:3d:02:32:
                    f7:20:9e:3c:13:2b:ba:12:31:5b:aa:bd:4a:5f:9b:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:73:69:45:40:AA:54:25:75:F8:73:18:45:A2:64:68:1F:97:2D:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a81e2e69-3260-3691-bf22-57e878bccdca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.8.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a0:fe:1e:df:6b:fc:bc:dd:2f:9c:05:42:17:8e:ff:23:83:
         f5:1c:79:ed:b5:6d:a6:cc:a8:ee:26:a3:0e:39:e2:55:5b:25:
         71:ae:a1:f6:d0:95:60:69:c6:a2:b3:dc:98:cf:db:da:78:cc:
         fc:a2:f3:44:84:bc:62:79:8a:3c:09:a5:da:43:f9:94:e9:62:
         c1:c5:e4:7c:db:3b:ff:0b:66:d6:88:47:41:ac:7f:d6:15:bf:
         be:5a:97:d2:67:92:bb:b8:8a:d0:69:80:04:46:9c:19:b8:b4:
         de:ea:9f:59:26:e0:91:51:3b:22:f2:8e:fb:8c:88:42:ab:ee:
         c5:7c:02:23:96:47:20:26:ce:d6:01:25:6f:8d:3e:a0:ca:db:
         30:04:34:d2:f8:a1:75:97:3e:7b:5a:a4:90:af:b3:55:0e:ce:
         53:32:b3:14:46:13:8a:e7:09:5d:79:bc:a3:7a:3f:fd:2b:f8:
         17:05:94:05:90:90:aa:af:21:b9:f9:db:dc:20:66:cf:fe:fb:
         ef:19:7e:3f:cc:57:06:b4:4c:d3:37:1a:4d:07:cf:01:eb:9b:
         97:b8:6b:43:52:66:3b:ec:a4:ce:94:45:60:13:62:88:3c:c3:
         cc:51:9f:70:d2:aa:36:45:1a:68:48:cd:65:26:6a:e3:c0:a2:
         19:51:8d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:18:31 2025 by rpki-client