Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfcf7964-4948-3473-96e6-01865df1c363.roa
File:                     cfcf7964-4948-3473-96e6-01865df1c363.roa (raw, json)
Hash identifier:          vaV+n0F9te7UvEocgn8R2WcmgCvWSSQqrlOdwZLeDQk=
Subject key identifier:   BD:50:87:9D:5A:20:17:E1:AE:BE:14:61:70:12:D3:FF:9F:29:95:58
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7B2CD136BB77A03FC7E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfcf7964-4948-3473-96e6-01865df1c363.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        73.145.216.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:b2:cd:13:6b:b7:7a:03:fc:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=726a88dc-5658-440b-ba35-363c1ea772c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:25:d0:61:82:f8:72:d5:f5:06:d4:09:00:
                    dc:3e:7a:e4:78:8f:11:76:46:04:f1:4b:e0:85:25:
                    56:26:7e:1c:63:60:06:76:c8:36:4a:b5:83:04:43:
                    08:af:30:24:2a:ab:75:d8:2b:cb:76:2e:3b:c6:c9:
                    ab:81:db:28:39:f1:c2:30:2d:a1:d9:ab:d2:5a:88:
                    b2:9f:1f:7c:b0:13:df:7b:05:13:01:9e:71:06:85:
                    07:ff:ab:b1:7e:f5:5b:1e:87:35:0e:ce:17:66:d3:
                    39:77:58:4f:62:35:c3:57:ee:5b:8a:0c:34:32:87:
                    3a:6d:45:50:e1:bc:6b:cc:f9:f7:43:93:4e:1b:f6:
                    be:22:7b:ca:fc:3d:be:ab:10:51:67:2e:30:82:fe:
                    5d:05:cc:b3:9d:a7:59:59:b1:3a:5a:a1:f2:f9:d3:
                    eb:12:09:ea:f1:f9:0b:c0:c2:cf:37:c5:9a:09:52:
                    5e:bd:30:0b:a5:7f:20:fa:1c:dc:82:d7:82:36:31:
                    7d:8a:4f:c8:ae:a8:88:c6:fa:7f:63:79:99:71:3f:
                    6d:e1:0e:4b:c0:28:8d:2c:fa:9f:a1:bf:5a:3d:53:
                    80:2a:6a:b1:67:21:e3:80:b9:a8:14:3c:30:21:95:
                    5b:0d:f2:f2:69:a9:6e:12:9f:56:95:a7:bd:ae:25:
                    c8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:50:87:9D:5A:20:17:E1:AE:BE:14:61:70:12:D3:FF:9F:29:95:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfcf7964-4948-3473-96e6-01865df1c363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.145.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:7f:dd:ca:9a:da:3d:fd:5b:98:a4:2a:08:63:47:70:f4:c2:
         a4:13:59:b1:16:5d:10:3e:6f:a7:4b:78:f7:8e:44:10:a9:12:
         4d:8c:69:8c:4b:07:89:a0:4b:24:1e:1e:f5:ab:3d:b7:22:e0:
         50:9f:f7:ae:78:86:24:5a:e0:f2:29:db:b4:6e:10:0c:14:fb:
         9e:db:47:64:4e:38:2f:59:22:d6:b6:e1:a6:2d:ee:cf:1f:6d:
         af:a3:3e:20:e3:f0:2e:61:b7:2b:7c:55:69:20:84:e0:b0:3f:
         e9:a7:b9:7d:6a:0e:c6:35:70:7f:e0:a9:6e:35:43:00:9c:0f:
         bf:b8:30:bd:47:a5:1f:a1:b9:8d:2f:46:f0:f1:db:08:33:94:
         9e:28:47:7d:f6:3d:33:ad:8a:f5:8c:cc:a2:5d:d0:de:80:ff:
         4a:4b:79:91:2b:26:8a:a7:60:34:57:e1:62:ae:3f:9f:15:07:
         69:a7:48:a0:19:66:c9:f8:31:b6:fa:04:c4:3e:63:22:35:74:
         58:65:a1:bf:d4:f4:21:41:e8:19:28:9c:21:e5:c0:eb:18:c5:
         ca:6d:5d:b4:7d:8c:23:3c:e3:6f:cf:c5:a7:cb:35:5d:00:74:
         b0:e1:d3:93:88:65:60:fe:55:d6:c1:3f:f6:36:86:00:32:d8:
         33:b7:0c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:17:40 2025 by rpki-client