Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d880e12f-60c8-3f26-97fd-a46744506af9.roa
File:                     d880e12f-60c8-3f26-97fd-a46744506af9.roa (raw, json)
Hash identifier:          sr5fjvJZX5V/OySGVIY5g57cgAVXxYSfMxyrPLPqFeo=
Subject key identifier:   BB:3E:A2:61:E6:3B:70:BB:20:D5:F5:4A:25:A2:78:A0:70:B7:4D:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB133B2F3F796C73249D580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d880e12f-60c8-3f26-97fd-a46744506af9.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.73.200.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:33:b2:f3:f7:96:c7:32:49:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=f2963f87-ee15-47ec-b7f3-2e6e3d8f5b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:80:ef:bf:0f:07:c2:3f:33:c2:ec:6c:e9:
                    c9:5a:93:67:b0:ac:43:5e:a0:c1:fa:aa:43:b4:ac:
                    10:85:66:58:cf:ec:ec:c3:f5:6e:72:fd:1b:44:bb:
                    95:d1:f5:f9:3e:b6:f2:8b:bd:f6:20:59:e9:a0:00:
                    56:80:53:22:16:29:05:e9:33:b3:82:81:02:a5:aa:
                    f3:ac:11:e4:29:ec:10:c0:6e:86:fb:f4:44:96:33:
                    0d:be:bb:b8:e0:a1:6e:30:05:6b:46:40:1c:e1:df:
                    b8:9e:f1:af:27:f2:01:65:c6:7b:b2:ef:69:fe:4b:
                    70:fd:3c:27:41:b8:73:00:9b:a4:b3:ca:e4:89:72:
                    e2:29:4b:30:c4:f7:cc:4f:a2:89:b4:5a:f5:e0:31:
                    73:43:32:30:c3:51:f0:58:f8:09:4f:d3:49:f8:91:
                    8b:41:86:49:db:16:c3:1c:19:74:3c:fc:2c:37:88:
                    39:cb:7b:49:4a:68:c2:c8:07:51:2b:ea:bf:a0:9f:
                    15:1d:16:ca:bf:6d:b7:b8:06:44:04:25:31:e7:a0:
                    bb:d5:4b:1e:4f:45:7a:b7:24:78:88:71:a9:c6:7c:
                    0e:5f:0b:0c:bb:1f:26:f0:89:f3:e1:a2:7b:78:4a:
                    b4:af:68:e9:36:e2:b7:ae:58:79:60:17:25:94:a0:
                    6b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3E:A2:61:E6:3B:70:BB:20:D5:F5:4A:25:A2:78:A0:70:B7:4D:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d880e12f-60c8-3f26-97fd-a46744506af9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.73.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:da:22:44:9f:49:bb:b0:f0:96:8a:2d:81:2a:1c:86:b3:51:
         8e:af:a4:b1:4e:f7:1d:05:ba:67:ad:d8:be:18:4c:a9:09:96:
         32:3e:18:39:1e:b6:a9:71:e3:2a:d4:fd:19:ca:56:18:30:d5:
         e9:b8:75:83:71:51:02:15:d8:c2:54:b8:f3:71:60:10:c6:d4:
         66:3e:15:83:e8:d0:f2:7a:50:cc:bf:c7:30:3a:81:0e:dd:0d:
         cf:3a:5c:70:e7:fb:a5:ae:75:4b:6f:32:53:23:83:c9:74:7d:
         8f:cf:4a:84:2d:53:2c:ac:72:4f:2a:00:81:6b:7a:14:37:c3:
         4a:74:c1:13:97:d3:42:58:02:2c:b6:aa:6f:a0:5f:85:82:74:
         b2:0a:1c:76:6f:27:ad:6f:ea:bb:9f:f5:bd:64:a4:75:0d:8e:
         51:73:2b:3e:40:51:bb:d1:0f:cf:22:b5:0a:58:5a:40:4a:00:
         ec:51:04:ce:af:09:41:49:8b:33:b8:45:6b:d0:fd:12:5d:52:
         5e:e1:1f:cc:8f:02:0b:12:f4:9f:9c:5b:71:a2:14:33:fd:87:
         38:ed:ad:88:cd:0e:9e:ea:d1:e7:51:c1:e7:70:3b:5a:f9:bd:
         95:75:14:ff:d9:2f:e4:fd:16:34:02:aa:d2:9d:ee:16:9c:b4:
         73:ea:9f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:13:25 2025 by rpki-client