Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7de57f1-d0d8-33cc-98a9-9a16baa20480.roa
File:                     c7de57f1-d0d8-33cc-98a9-9a16baa20480.roa (raw, json)
Hash identifier:          GwKulf66dp1DfpRdKHQD792lMxR49IJuYNZfCFkE8vQ=
Subject key identifier:   FC:5F:3C:B9:CE:E0:88:FB:E8:E5:53:0F:A4:02:A9:F4:24:9E:93:7C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7E7CD53945EA725AD9CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7de57f1-d0d8-33cc-98a9-9a16baa20480.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        73.206.116.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:e7:cd:53:94:5e:a7:25:ad:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=9722d542-20ca-4e71-a9f1-6b1ed335330b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b5:c2:b6:42:bf:aa:9e:6b:96:5c:d4:8b:d2:
                    6b:72:63:8a:f6:31:01:c3:56:91:1c:7b:5d:d9:0a:
                    35:f0:56:d6:f0:4f:60:8b:ea:99:34:bf:f7:ec:e8:
                    a7:3d:ee:b0:eb:a4:57:98:6a:c0:0e:5f:cd:f2:18:
                    d4:5e:90:01:33:f6:b0:d1:b5:c5:86:52:bf:78:dd:
                    68:c8:04:5e:08:84:4d:7a:50:73:fa:0f:7b:55:b5:
                    64:30:ab:d0:07:cf:80:18:3b:0b:31:93:6f:36:51:
                    4d:1d:41:bc:9d:1f:6c:13:fe:7f:d2:de:35:d4:cd:
                    d7:94:75:bb:0a:a6:58:0f:6c:d3:d2:28:bb:19:45:
                    b1:3d:b2:13:84:4c:8b:fa:ae:ab:cc:ce:9b:8e:ec:
                    ee:42:04:65:77:0d:51:7d:b7:a5:9c:b7:7c:a6:c1:
                    e3:83:ee:b7:ca:66:94:5f:87:d5:ca:90:df:d4:4d:
                    fa:1d:e1:ae:6e:c5:62:50:45:90:bb:c7:2b:4c:28:
                    c8:a4:d8:ef:4a:6c:e7:da:43:98:b5:38:c4:a2:5a:
                    d1:07:78:96:c5:ee:73:2e:52:75:7e:c9:62:79:c9:
                    3d:2a:cf:b4:18:82:cf:b5:3d:36:cd:87:e8:e5:61:
                    9f:bc:92:4e:33:60:2d:fe:cc:58:b1:3a:5f:13:1c:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5F:3C:B9:CE:E0:88:FB:E8:E5:53:0F:A4:02:A9:F4:24:9E:93:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7de57f1-d0d8-33cc-98a9-9a16baa20480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.206.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:92:b6:d8:14:aa:dc:b2:f0:02:ae:c8:c1:4f:f4:a4:8d:87:
         87:50:0e:66:2a:a1:4b:01:88:bb:57:ec:39:cf:47:90:27:a6:
         78:e7:b4:dd:cc:81:f0:10:9d:fd:29:e0:f4:bc:16:d8:76:1f:
         95:66:63:c4:92:74:f3:c8:fd:28:0b:15:73:1f:30:16:0f:63:
         54:44:3f:29:ad:d4:08:62:2f:8f:89:e5:43:cc:a7:f8:54:51:
         74:cb:1c:e7:46:b6:89:fe:73:65:8e:18:02:5c:3a:49:b1:24:
         f3:dc:4f:bc:38:a4:8e:5d:e5:a1:09:77:c2:ab:11:cf:10:e9:
         3f:7d:4c:51:59:03:04:f4:b1:0d:f1:d4:ec:19:1d:5e:ef:c4:
         18:e5:9f:11:84:31:d0:97:93:4f:e0:b0:a3:67:bb:aa:c5:e6:
         76:a9:6d:20:0c:8e:12:1b:da:24:39:1a:ff:80:fa:3d:f7:42:
         ef:83:99:9c:b3:f8:a1:fe:73:4e:d5:03:df:b8:70:65:53:a3:
         4e:9a:21:e7:f6:d4:d7:40:41:e2:b0:fc:ce:f8:1a:8a:0d:fd:
         db:f5:bd:ea:90:ca:b1:ee:1a:06:41:9d:6b:4d:03:b9:fd:81:
         2d:c1:1d:15:f2:4e:66:44:1f:46:55:f2:90:3b:e2:99:df:42:
         df:bf:50:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:29:08 2025 by rpki-client