Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de807a50-de7d-32a8-83c8-eb2f83a7332d.roa
File:                     de807a50-de7d-32a8-83c8-eb2f83a7332d.roa (raw, json)
Hash identifier:          +UzCj0WvP8Ou9GbVYiHJOIP3r9xG6HuiyBccOSo3OXk=
Subject key identifier:   6D:2B:CD:FD:F5:B4:67:34:91:13:C3:AE:AE:B2:07:F9:15:F3:5D:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0E89E392416A118F6C080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de807a50-de7d-32a8-83c8-eb2f83a7332d.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.102.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:e8:9e:39:24:16:a1:18:f6:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=577b7046-7c79-4336-af67-7e6d9c92a5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ec:17:98:36:2b:6a:5d:95:cd:62:93:a7:4a:
                    94:8b:48:ec:52:5c:8d:42:c2:aa:60:d7:7f:bc:12:
                    b1:c0:a9:fe:4f:a4:cd:3e:41:15:29:e2:87:0e:5d:
                    96:5d:55:01:e4:99:fd:6d:95:e9:64:86:3e:e4:8c:
                    d7:52:db:21:3a:2a:6e:77:9b:08:d1:c4:76:dd:31:
                    52:2d:1a:10:29:ae:96:fa:bf:a2:d2:35:04:69:f9:
                    d1:dd:46:d6:47:ad:16:91:23:7d:52:f0:20:1a:3c:
                    79:3c:5c:a4:73:c8:50:7b:00:65:b8:03:a6:88:36:
                    64:60:aa:00:97:7c:ad:12:0c:4d:64:99:62:1e:58:
                    9d:d3:fa:d1:c8:7d:fb:97:cc:c7:95:82:04:c0:5c:
                    93:f0:83:c7:8a:73:15:fd:9f:e6:b1:27:f2:e7:66:
                    ad:05:15:fb:0b:7b:5f:ac:be:e3:4b:ee:6b:5b:bc:
                    65:b7:b4:2e:09:2b:af:a3:bf:e5:3f:b0:19:56:7d:
                    cd:6b:75:bd:9d:e9:1c:ab:ef:81:19:75:4c:fe:ed:
                    65:8c:a4:eb:b2:db:5a:3b:7c:e6:2f:f1:1a:c9:66:
                    c4:9e:3e:ea:57:db:4d:43:50:c0:dc:29:5d:03:cc:
                    1b:8b:95:bf:8b:2f:ba:4a:43:0e:00:8b:9e:1b:ea:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2B:CD:FD:F5:B4:67:34:91:13:C3:AE:AE:B2:07:F9:15:F3:5D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de807a50-de7d-32a8-83c8-eb2f83a7332d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.102.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:41:43:e7:5d:b9:7c:8e:b8:72:dc:0e:78:b6:a7:c4:16:72:
         53:35:43:d4:0b:c3:53:b3:47:8b:ed:30:b1:a9:9a:85:4c:15:
         ab:17:37:58:9f:01:96:31:20:58:38:6e:97:8a:94:28:2b:07:
         7c:af:e8:4e:d7:71:93:3a:7f:e8:97:86:f0:f9:29:d1:d6:4e:
         33:36:7d:5a:73:7f:27:18:30:4e:4f:37:3a:29:ec:86:bd:68:
         c6:4e:5e:39:a1:a1:9c:35:3b:83:bb:63:41:0c:a5:90:71:2f:
         9d:8c:a6:ed:e3:8a:3d:a2:ab:68:04:26:64:25:03:a2:c8:bb:
         f6:9e:16:a8:01:5c:06:24:1f:cf:10:c9:95:ab:f7:14:77:94:
         f6:24:be:ad:92:c8:3a:58:84:95:80:55:1d:f0:08:b6:e8:e9:
         05:c8:b8:51:b6:c8:24:bd:49:78:0c:3f:5c:c0:dc:4e:ae:ac:
         04:e9:e7:48:a4:e8:66:fb:d5:15:dc:72:25:b7:36:d5:ce:57:
         b1:88:70:f5:fe:65:b1:23:af:06:4b:c0:12:71:93:8f:33:9a:
         33:94:27:e3:bf:63:30:92:04:b5:82:a6:11:70:f6:f6:99:c4:
         71:52:81:91:ba:0b:c6:b4:5c:af:56:b9:2a:43:75:49:da:94:
         a8:be:70:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:09:01 2025 by rpki-client