Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1ba4004-ef31-3ab9-a757-512a243b3e26.roa
File:                     c1ba4004-ef31-3ab9-a757-512a243b3e26.roa (raw, json)
Hash identifier:          Itc7KlLctdBIwLPcU5TLGIhJGfntDJTFK9y1Zxbi1aM=
Subject key identifier:   7F:A1:B0:A2:17:5D:23:61:51:FB:7B:59:87:EC:3D:69:2A:85:6D:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB00DED48190F65A3EE8C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1ba4004-ef31-3ab9-a757-512a243b3e26.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        73.70.244.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:0d:ed:48:19:0f:65:a3:ee:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=56c284b1-d1c6-45e0-8262-01a82b2b8cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:c2:67:02:2a:17:2d:55:22:33:60:53:c6:
                    89:05:25:82:4a:66:9d:32:28:d7:49:cc:6e:d4:14:
                    a1:db:74:72:94:7c:87:ca:6a:0d:07:c0:3b:5b:7b:
                    51:b3:00:fb:a1:19:1a:8a:71:e0:22:84:c7:63:b6:
                    34:52:ea:d7:d3:c0:89:09:f9:70:83:57:2e:39:0d:
                    7c:a9:fc:10:b9:1f:bb:36:49:cc:69:97:57:43:2b:
                    39:67:77:19:d3:df:64:4c:b2:34:96:8d:ee:eb:83:
                    f5:77:45:3f:5d:4a:23:a1:ff:91:3e:70:ca:82:22:
                    ea:de:e4:a6:a0:c0:b3:77:1e:50:64:ef:a9:6e:17:
                    3e:6c:bd:c8:d1:28:86:0d:fd:1e:c8:ef:9c:15:44:
                    fd:2e:4d:6b:79:35:ea:ba:c0:45:ce:89:92:d0:0b:
                    27:3e:80:9a:d2:66:85:8f:96:c5:e9:83:33:40:db:
                    5d:10:8e:2b:e3:e9:a8:4f:d3:3f:0d:dc:cf:50:9a:
                    1b:8d:fc:8e:e9:4d:73:3f:68:06:01:8e:5f:53:ef:
                    91:3e:9d:58:37:43:d6:f6:67:2a:d0:c4:8a:97:55:
                    4f:83:0f:7a:d8:be:58:a4:0e:8a:59:c4:fc:e3:fc:
                    ac:6c:4a:67:e1:06:66:1d:8d:52:43:4b:36:a9:94:
                    f1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A1:B0:A2:17:5D:23:61:51:FB:7B:59:87:EC:3D:69:2A:85:6D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1ba4004-ef31-3ab9-a757-512a243b3e26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.70.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:15:5d:f2:9f:e0:f8:0c:72:ef:77:62:41:e9:59:89:86:39:
         56:7a:b2:f7:83:a4:41:76:47:1b:63:8a:fd:2e:9e:f7:24:15:
         3f:33:c3:4c:55:1a:d8:99:82:7a:10:f5:4a:82:20:02:6a:a7:
         94:40:ca:3d:e0:da:cd:a3:29:0e:d0:9a:4c:58:95:9d:fc:b5:
         0e:d0:3e:df:d3:35:61:2f:39:b0:3c:f2:62:72:6f:4d:64:3f:
         08:51:7f:ba:1c:58:34:96:c4:d3:ca:11:18:6b:54:44:30:b7:
         bd:3f:32:b6:95:c7:96:0a:a1:f1:ac:21:d6:be:55:3d:ae:92:
         ae:53:e9:7f:bd:72:12:23:97:49:fe:20:1c:c2:dc:d1:fc:24:
         fc:24:6f:0c:5f:ba:05:5c:ca:46:3c:75:a9:25:c2:43:f7:70:
         95:7f:7d:f3:d9:ef:d1:7a:2e:b0:b0:93:87:de:97:e5:a1:d2:
         d4:23:cd:cf:a4:18:f4:28:56:f9:bf:31:3b:37:0b:af:64:b7:
         d6:b9:34:31:33:db:c5:83:7d:d2:a0:9f:bf:ab:52:c2:77:cd:
         cd:2c:96:fb:90:3b:ba:6f:55:0a:c3:48:be:8f:85:16:47:3a:
         d8:ed:da:2a:32:1b:87:77:32:05:b4:c6:8c:72:b3:d4:54:dd:
         50:92:0c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----