Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9293a1c-2227-32ad-967c-784d8c2a973b.roa
File:                     d9293a1c-2227-32ad-967c-784d8c2a973b.roa (raw, json)
Hash identifier:          y4DYVD0FI33NUCOToc8g7I9lTwZkxoXFhypVOhWfKMc=
Subject key identifier:   6D:82:48:5F:3E:DB:45:3E:84:B6:38:11:9B:D6:10:C7:14:9F:A6:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7DD3B2206023C19FE8970
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9293a1c-2227-32ad-967c-784d8c2a973b.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        73.115.66.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:dd:3b:22:06:02:3c:19:fe:89:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=60cd33bc-0520-4fc9-aa98-552cc396d0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:19:da:f9:85:9a:1a:de:af:90:ca:13:f2:f5:
                    70:98:5c:b7:ac:a3:78:30:de:0b:4f:f0:de:80:06:
                    0c:bc:fe:b2:b9:ea:29:63:3c:0d:33:ad:51:5c:ae:
                    f1:10:9a:db:9a:cb:f5:8a:b1:82:74:96:73:2e:8d:
                    b1:af:8b:ad:62:13:70:69:a3:45:a1:e1:c6:56:42:
                    da:8a:c7:a1:13:e1:1e:a4:e1:ca:bd:65:e9:97:68:
                    d7:66:ab:88:1d:c4:84:5a:2d:a1:2b:c2:a3:2c:68:
                    c6:86:a0:41:5d:79:ac:bb:e6:12:2b:07:41:38:b9:
                    f1:d9:c0:fe:5d:63:7a:72:3e:1b:23:db:7c:24:34:
                    0f:89:f9:9f:95:b8:8a:69:7f:31:cb:85:93:c1:5b:
                    33:62:db:92:7d:5c:48:eb:50:ca:9b:f3:16:c2:7f:
                    ba:62:e3:9e:dc:1e:9f:bd:8b:c2:82:69:e2:19:e5:
                    49:bc:11:8f:28:6f:88:ae:ba:62:16:e0:7e:88:95:
                    71:8f:65:4f:77:3c:6b:00:db:f8:c4:bd:4e:e7:80:
                    54:f0:d5:dc:b4:2e:4b:dc:62:2c:ad:df:df:47:f3:
                    3a:c3:69:70:5b:3d:96:ae:35:03:dd:72:6a:e7:76:
                    9c:9e:6d:f8:d1:1b:2a:76:73:31:2e:9e:26:93:b8:
                    9b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:82:48:5F:3E:DB:45:3E:84:B6:38:11:9B:D6:10:C7:14:9F:A6:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9293a1c-2227-32ad-967c-784d8c2a973b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.115.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:5b:1d:f4:95:99:35:92:8c:3f:80:6a:4e:fd:8c:0b:54:62:
         a4:7a:7a:12:b2:c1:78:17:60:9f:ba:9d:79:1d:4c:25:34:59:
         0e:16:f3:18:35:22:2c:ad:85:09:eb:44:91:cf:e1:de:fb:30:
         ec:8b:76:ea:b4:95:c9:10:66:71:6c:f3:b0:ad:96:38:21:9f:
         47:6e:b9:50:c7:22:ba:82:94:8c:46:f5:69:81:d8:1e:a0:3c:
         eb:2a:49:49:bf:03:53:15:df:c8:5c:0e:c4:37:7f:1d:ea:90:
         58:dc:34:16:55:48:5c:a6:4b:63:e2:fe:64:ae:3a:fd:7d:81:
         57:3e:01:14:8c:44:94:bb:6a:44:52:76:99:68:96:c2:22:c2:
         b7:1e:89:03:70:31:57:27:6d:00:b8:e4:c8:77:bb:98:04:c7:
         e1:97:0e:11:36:23:a4:15:b2:5e:d9:74:03:3b:5e:ed:ee:de:
         d6:cf:a8:d6:f6:76:fc:0c:43:ae:35:c3:13:f6:08:68:80:6d:
         83:b4:47:5b:be:33:ed:40:bc:3f:9a:34:6f:ae:93:67:26:f0:
         e3:2b:06:1e:a6:1d:e0:ec:41:68:5b:93:62:e3:1d:7d:2c:16:
         1c:aa:4b:cd:5a:97:c1:c2:6d:f6:17:4a:04:d7:d1:86:cd:ee:
         6d:63:e7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----