Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caa53330-9361-3d72-a446-f6248ecfde7e.roa
File:                     caa53330-9361-3d72-a446-f6248ecfde7e.roa (raw, json)
Hash identifier:          nYwrsiXWezEyfmo8bvBRoi3w965jyKsdoSrVaEtcysc=
Subject key identifier:   B9:AF:1D:60:7E:FC:D8:1F:AE:B3:14:62:6D:6D:D6:7A:D1:C0:BB:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1A95058AFD025C7EBAF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caa53330-9361-3d72-a446-f6248ecfde7e.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        73.92.166.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:a9:50:58:af:d0:25:c7:eb:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=cccf44d0-4b4b-472e-bbc1-b0fba2bf047b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:ea:5b:4b:92:35:1a:3d:9e:79:12:38:3e:
                    6a:bc:1c:7b:8c:96:a1:29:04:93:1b:4c:19:06:4b:
                    98:da:58:a8:f6:e2:e8:74:00:b1:04:8d:3b:15:61:
                    77:82:2c:f3:47:a8:13:97:df:d4:b7:1e:90:81:94:
                    a8:6c:ea:ff:7a:b6:94:7c:6d:49:ee:c8:7e:ac:54:
                    cd:de:f5:47:23:de:df:21:c9:af:2a:dc:67:3b:7c:
                    1e:f7:92:8c:9f:38:e2:76:d1:6f:87:30:6e:95:10:
                    a5:97:1e:21:63:25:3e:61:24:bb:c5:a3:0f:47:c4:
                    f4:61:2b:25:ee:8e:cc:9b:c7:88:5b:6a:40:73:a6:
                    f5:13:03:9d:52:da:e2:50:d8:8c:66:8e:86:da:53:
                    11:dd:54:f5:c5:29:0d:0e:3c:76:15:a3:f6:14:f5:
                    7f:23:20:40:5a:ff:61:88:5b:16:a6:b5:df:3e:01:
                    ef:c9:18:da:36:c6:02:05:18:df:bf:3d:4c:ab:93:
                    fc:60:ab:ae:50:00:dd:a7:3a:b8:ec:e9:33:e4:ed:
                    04:18:e9:f0:b0:6a:93:cc:fc:5b:95:d6:cf:42:47:
                    3c:87:db:5e:27:61:ec:13:a5:ec:14:2b:0c:c2:5f:
                    01:c5:22:65:9f:3e:0f:d0:0c:e6:cc:4e:70:55:92:
                    04:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AF:1D:60:7E:FC:D8:1F:AE:B3:14:62:6D:6D:D6:7A:D1:C0:BB:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caa53330-9361-3d72-a446-f6248ecfde7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.92.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:64:cf:5d:5c:16:4d:a2:f4:12:58:de:92:a1:d7:13:f3:b2:
         3e:fc:3d:77:9f:07:5e:2a:b7:94:86:e1:02:68:73:c7:99:7f:
         64:b1:75:7f:f4:2c:ca:17:40:88:b3:2c:54:af:ab:82:05:db:
         24:c5:ef:bb:82:4e:98:59:6c:fd:95:99:37:25:ff:24:b7:6a:
         49:7a:2b:69:88:ef:56:bc:d5:03:b1:a0:f8:92:95:fd:ed:b9:
         a2:65:e8:03:ac:62:d2:ac:0c:6a:70:92:a1:17:77:9a:9b:b4:
         33:0f:c6:d7:d0:75:ce:55:7c:bb:32:aa:f5:a6:c2:6d:40:dd:
         41:51:60:b2:a1:59:fa:6e:81:fd:50:a4:73:3e:e8:fe:20:c4:
         bd:bc:e6:49:d8:7e:8d:44:6b:ca:e5:2b:82:05:e6:ab:fe:59:
         be:6d:c3:a4:ee:06:d2:42:68:c9:f5:31:71:0f:82:ae:62:d2:
         b6:bf:28:74:c8:5b:ca:16:9d:04:0b:77:1f:0a:f3:29:93:81:
         0c:a2:ca:c5:72:41:47:37:be:ef:19:79:c4:99:bf:de:6a:e8:
         1f:2b:4e:43:52:a5:c1:0e:e9:52:32:b6:7e:e9:84:e3:93:26:
         33:f7:b9:56:1a:23:41:8d:85:5b:de:3c:08:d2:80:52:d6:cb:
         82:93:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:29:08 2025 by rpki-client