Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2b03152-d858-3935-beeb-03e39edb1875.roa
File:                     e2b03152-d858-3935-beeb-03e39edb1875.roa (raw, json)
Hash identifier:          6fzxSsK/EN4UAdLGt0VuyM/5EV3Ci6lvv6IxH/QtYxo=
Subject key identifier:   6F:B9:36:41:5E:1D:CE:98:E2:64:89:6E:54:02:EC:52:BF:74:29:E5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF7F0B8E473D96465CCC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2b03152-d858-3935-beeb-03e39edb1875.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.36.42.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:7f:0b:8e:47:3d:96:46:5c:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=2a29dc5e-f62a-4b17-91e8-f2c491101b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b4:ac:c4:74:f7:34:07:bb:96:43:95:92:9b:
                    60:54:50:a2:9a:31:6f:b0:6d:c6:59:31:6f:a5:29:
                    af:45:72:31:40:2c:d0:ea:55:f9:43:83:13:39:6b:
                    b6:5e:65:78:c4:be:b2:25:38:14:b5:4f:dd:8d:da:
                    cc:4c:d2:09:ab:5a:c2:89:ee:63:b9:03:8d:f9:aa:
                    25:82:a4:f5:cc:f4:61:8f:28:c4:85:a4:63:6e:cf:
                    c9:12:56:34:04:c0:46:1d:03:6b:1f:ce:04:58:3a:
                    cc:05:b3:6f:6f:c3:7b:26:dc:2a:df:10:17:73:fb:
                    1d:49:fa:39:42:50:46:d3:d8:f8:7e:f9:c1:af:b0:
                    8f:1c:49:da:40:b2:a1:d2:72:67:50:92:3a:64:7f:
                    2d:25:7f:69:62:5e:b7:cb:d2:26:03:d2:47:20:2a:
                    55:dc:de:b6:f4:54:ce:eb:e2:12:a8:b5:4e:dd:3b:
                    ba:4f:3b:83:16:65:29:8f:76:dc:ff:9a:11:67:35:
                    fe:22:ef:e7:ea:21:b5:1e:b4:e1:88:d3:b3:4f:73:
                    b9:9f:4c:c0:5f:48:08:e9:bb:13:59:25:ca:43:1c:
                    47:e7:94:90:b1:26:b8:ff:35:68:ef:4c:4d:69:4e:
                    52:fe:cd:73:b7:53:77:e1:09:77:ef:6e:8c:e7:ae:
                    58:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B9:36:41:5E:1D:CE:98:E2:64:89:6E:54:02:EC:52:BF:74:29:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2b03152-d858-3935-beeb-03e39edb1875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.36.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:63:a6:ff:af:16:6d:78:00:82:f6:40:ab:79:38:6e:d3:5d:
         3f:bd:96:a3:a7:5a:00:4c:2b:3d:07:17:9c:02:e1:68:cb:85:
         99:70:12:52:a0:78:4e:fa:6f:7f:b9:cc:39:ff:1e:31:19:be:
         87:db:fe:9d:36:fa:bf:b0:34:81:62:d7:3e:e7:6a:03:8a:b6:
         38:00:36:e0:05:bc:e9:63:78:e1:29:64:86:ff:95:9e:76:92:
         0b:73:72:17:8d:76:28:25:4c:60:4e:52:69:9f:5c:5f:0f:1a:
         82:bb:bc:1d:d9:08:8f:98:7f:85:79:3f:91:06:1a:b6:e4:ed:
         f8:fc:dc:d5:7c:e3:9c:46:16:c8:1b:8b:07:ac:37:05:91:56:
         2e:d9:b7:c3:6f:68:78:c2:ea:60:1f:51:09:f8:14:b2:11:a2:
         54:08:49:1c:59:a1:47:13:54:85:60:ef:f2:04:fc:1f:3c:e3:
         5e:35:03:82:f5:51:77:a4:48:3e:91:11:14:2a:bc:7a:2e:d3:
         c5:3f:5e:bb:15:6c:4e:3f:94:3c:1a:95:ab:18:7c:a5:48:e5:
         19:87:0b:ee:ba:52:61:6a:94:89:f9:cb:91:94:02:e7:c2:80:
         f2:b6:4b:44:b4:49:cb:aa:57:4a:68:92:f1:53:ae:cb:b1:b2:
         b1:a8:a8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:41:12 2025 by rpki-client