Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9afb5df-2c04-32cb-a099-5c141a31fb59.roa
File:                     b9afb5df-2c04-32cb-a099-5c141a31fb59.roa (raw, json)
Hash identifier:          wSV8MTbvRbqQRhGJUxflQPQPobdZSDB3utD1KUWbLdU=
Subject key identifier:   06:AB:25:81:56:EF:E2:9C:5F:D5:03:68:B0:39:E4:5B:DA:E9:B7:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF3BFF012EECDF84F15A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9afb5df-2c04-32cb-a099-5c141a31fb59.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        67.173.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:3b:ff:01:2e:ec:df:84:f1:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=6690ebb9-9301-4a3e-88c6-f82d42df4dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9e:5a:fa:33:f5:d9:0e:3f:cb:1b:b8:e7:33:
                    a1:ed:5f:d2:36:95:78:77:4a:f7:91:c9:fd:45:fc:
                    57:91:50:72:f3:a3:79:37:4d:dd:af:0c:03:65:7b:
                    d9:8f:23:c9:5d:fb:2c:02:47:33:2a:5f:48:57:dd:
                    72:c1:e9:2d:8b:31:a3:88:a4:82:02:00:66:6a:e9:
                    f2:27:97:39:bb:cb:44:dd:53:e1:a5:05:99:c0:d6:
                    6a:5c:fc:48:12:a7:72:bf:0e:17:57:8b:83:67:59:
                    ed:25:29:86:d9:ed:fd:ac:8d:92:86:08:28:fb:16:
                    0a:ba:74:d9:80:da:1c:2f:a6:b4:e1:79:5d:cd:2b:
                    49:44:5a:fb:74:ba:5f:25:e1:96:89:4a:f2:28:eb:
                    c0:dd:b4:fe:59:1e:a7:99:2b:86:64:c3:7e:ca:d6:
                    60:44:72:c4:66:0b:36:09:0d:63:62:54:82:f0:01:
                    86:33:3a:08:e0:39:bc:cc:32:ce:9a:3d:ab:c2:43:
                    7b:85:ce:86:f4:fc:c4:f4:2d:2e:2e:57:04:72:52:
                    bf:d1:a3:39:01:b4:8e:30:19:ce:de:a0:bb:84:40:
                    61:61:3c:57:dd:aa:af:24:f2:6e:82:64:d4:d7:ae:
                    b7:64:62:06:a8:6d:ff:c1:01:79:44:cd:e0:9f:17:
                    49:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AB:25:81:56:EF:E2:9C:5F:D5:03:68:B0:39:E4:5B:DA:E9:B7:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9afb5df-2c04-32cb-a099-5c141a31fb59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.173.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:81:62:bb:8f:78:ce:24:08:2f:9c:02:2a:1d:62:5e:e3:31:
         b6:98:bd:f4:fd:35:05:ab:f1:8a:be:09:e4:ac:aa:28:fd:1c:
         4f:5a:90:c4:e6:2c:f0:21:d0:30:36:ae:4d:8f:d0:64:b9:40:
         47:d2:e0:0c:44:d2:da:ab:fc:41:43:22:14:3d:49:8f:e3:40:
         91:3a:92:2e:e2:53:11:20:67:e5:21:bd:c3:12:db:38:aa:d3:
         c6:3f:44:e4:2d:20:60:d1:7a:41:a8:51:e7:c3:ec:53:19:78:
         3a:04:c1:1f:b0:1d:81:1d:e2:24:d2:8a:54:4c:30:70:fc:e8:
         47:e4:be:5b:1e:6c:9e:ea:e4:e0:e7:27:90:ee:75:65:9d:be:
         1f:03:07:da:b6:b5:82:83:ea:4a:51:01:73:b3:48:05:d0:dd:
         e4:36:8f:a8:43:b4:6f:fe:c3:42:0c:fd:15:88:bf:10:50:c6:
         48:bc:e8:b9:62:61:f3:5d:90:d8:04:0b:44:b2:f4:21:65:ec:
         ef:e1:d5:7e:ae:6c:14:8b:ff:c8:79:18:c4:91:ea:8e:ef:50:
         c3:65:f9:e2:19:3f:eb:2e:fe:cf:27:ad:76:f5:28:a7:00:c6:
         87:d6:1a:0c:51:63:d1:1c:0a:14:27:01:82:f5:82:fe:d6:79:
         c9:6e:fe:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:56:08 2025 by rpki-client