Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abff55e7-de8b-3934-aa71-ef9cc5e60dee.roa
File:                     abff55e7-de8b-3934-aa71-ef9cc5e60dee.roa (raw, json)
Hash identifier:          hQeIELmFs7lQ59DOR9Tyv1y6qk0xkcmQbJxehTDnBjQ=
Subject key identifier:   0D:F6:42:46:AF:FB:87:A2:B5:A4:B8:2E:37:B3:67:96:C5:95:F2:45
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB09D52309FEDA6C8AC9000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abff55e7-de8b-3934-aa71-ef9cc5e60dee.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        73.81.110.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:9d:52:30:9f:ed:a6:c8:ac:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=0736b5cc-cbc8-416b-a9c5-f11a886b1ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:24:da:fe:92:9a:84:76:df:f8:0c:67:f1:
                    2b:9a:0b:58:6d:53:06:af:04:40:54:d2:a6:68:e2:
                    a4:c1:ad:dd:40:bd:8c:8a:ba:18:4d:bf:9d:0a:04:
                    f1:d4:7d:11:13:80:1a:67:da:1b:36:81:b1:b8:19:
                    60:13:0f:0b:37:a0:f8:57:21:0a:c6:25:70:f5:b2:
                    fc:ae:b9:0e:4e:b8:df:b9:d4:24:c5:6f:5c:66:97:
                    93:82:3a:b6:ce:fd:d9:aa:a6:e0:ba:c6:6b:0d:47:
                    f8:43:55:e9:b4:0a:2c:e2:8d:31:42:be:66:e5:7c:
                    0e:c7:04:01:1e:c2:58:6c:81:93:dc:98:c2:dc:1b:
                    fe:5d:db:eb:65:47:8e:bd:07:62:40:0d:ac:15:10:
                    c1:21:1b:10:2d:e7:39:99:93:17:7d:c5:1c:40:21:
                    c3:28:bb:2a:f7:e0:ba:84:d0:0a:3a:be:d4:02:78:
                    50:33:b4:b9:74:17:10:52:03:4a:a1:40:b2:64:c6:
                    55:49:95:2e:79:5e:af:c1:b1:14:f7:2c:45:59:bf:
                    ec:3b:db:6c:fe:dd:16:28:ea:bb:f4:1a:0a:11:f4:
                    81:83:d5:46:bc:6a:4d:bc:c7:e7:23:16:b8:aa:4d:
                    bf:7b:69:43:06:f4:3c:f4:cb:ef:b2:49:88:ea:9f:
                    a3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F6:42:46:AF:FB:87:A2:B5:A4:B8:2E:37:B3:67:96:C5:95:F2:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abff55e7-de8b-3934-aa71-ef9cc5e60dee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.81.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:ff:ef:1d:d3:bf:64:2b:ef:05:52:2c:4d:6f:5b:58:7c:24:
         a6:8b:29:3d:fc:86:c6:85:56:b9:28:0f:b3:eb:3c:0d:f3:24:
         15:4c:bf:0f:eb:fb:84:32:3d:77:d1:43:df:28:d2:20:5b:bf:
         c6:7d:3a:37:f2:52:1a:b4:c3:ff:73:06:c3:e7:c2:f2:8c:0f:
         bf:9f:7e:c9:cb:ba:ac:f7:5d:bb:e9:21:47:b8:38:be:62:d7:
         e8:77:a6:11:bb:3d:9c:53:2a:ba:e9:1d:bc:fa:d2:ca:88:5a:
         bd:da:39:30:22:1d:79:ec:89:25:7d:25:66:3f:d8:88:cb:ae:
         30:ec:d5:da:7b:8f:fb:38:d9:88:6f:aa:a8:db:c4:6d:19:ce:
         d8:19:7f:2e:6d:91:80:72:fe:e7:4e:a4:98:7e:c7:23:e7:07:
         de:3d:11:20:4c:b3:e3:c2:0c:85:a7:ba:de:b7:05:fe:53:83:
         a7:47:f4:92:68:7e:01:89:7d:36:f3:1b:43:89:91:3f:1b:63:
         46:4e:61:50:15:82:a9:62:43:d1:b2:ad:99:9b:46:25:28:ee:
         c0:75:a9:f3:78:b1:2e:c2:75:e1:d4:9a:ee:92:75:cd:90:42:
         1c:cb:f8:1b:67:83:aa:c9:77:da:68:3b:f8:39:5d:f6:aa:61:
         69:a1:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:41:49 2025 by rpki-client