Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5eecf35-eeef-398c-b595-d45f0fa1f422.roa
File:                     e5eecf35-eeef-398c-b595-d45f0fa1f422.roa (raw, json)
Hash identifier:          aAxlxCgSnXGrhInOE3X81HXBK06SUxpyQ+c0H+PA9wQ=
Subject key identifier:   A4:C9:6E:7F:31:A6:41:46:E4:B4:E3:D4:93:E8:D4:2D:54:79:A8:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F22C4A797257979ADE2B3100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5eecf35-eeef-398c-b595-d45f0fa1f422.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     22258
IP address blocks:        73.91.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:4a:79:72:57:97:9a:de:2b:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=bddc9302-2f2d-4474-af9f-6fd95d1a38d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:26:aa:43:02:21:e4:45:b1:7d:02:95:7f:19:
                    76:c9:ce:bc:3b:5b:93:13:19:24:9d:2e:c5:16:68:
                    0d:1c:5c:e1:bd:47:5b:cb:f5:7c:e1:f8:8f:42:cc:
                    16:75:02:bc:3d:7c:98:01:52:cc:c6:00:fb:fb:42:
                    85:ab:4e:57:53:a2:b6:0c:70:30:d2:6d:95:fa:4c:
                    23:07:fa:d4:56:37:19:9b:d3:41:75:26:5b:4c:f8:
                    08:86:76:93:08:74:7c:86:53:bc:d5:b2:6a:6d:23:
                    a4:9c:a5:4a:dd:cb:c7:ef:31:9f:a5:7a:ed:11:2b:
                    ca:5d:0e:89:09:75:2f:6f:8d:cb:34:5a:35:fc:79:
                    dd:04:e0:c7:1d:2e:71:93:0c:d2:6e:e4:9d:68:2a:
                    40:09:16:ad:97:c8:01:09:4a:e3:cf:0d:ba:8b:29:
                    d7:ac:23:80:b0:7f:65:a4:23:fd:0d:77:bc:c2:51:
                    24:2e:66:bb:0a:44:e2:c9:51:79:64:dc:f0:46:af:
                    d1:c6:db:3c:56:e7:8d:4b:93:12:25:33:6c:52:72:
                    67:f0:fc:52:05:24:4e:1a:a2:0d:28:a6:b7:6d:b6:
                    cb:cb:28:31:84:b0:ae:23:37:62:04:61:4a:e7:aa:
                    ad:e7:31:ce:22:7a:b1:34:85:6d:b5:86:57:b8:51:
                    57:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C9:6E:7F:31:A6:41:46:E4:B4:E3:D4:93:E8:D4:2D:54:79:A8:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5eecf35-eeef-398c-b595-d45f0fa1f422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.91.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:96:a4:4e:16:f4:71:ed:38:7c:7b:d4:be:4e:4f:00:5d:40:
         a2:f0:e8:f6:e4:93:d7:e4:3b:a6:d2:78:fc:c4:a3:f6:96:c0:
         c7:5b:01:d3:11:c5:29:bb:ff:5c:de:5a:a7:c8:15:dd:75:78:
         7c:2f:30:53:0f:d7:18:67:16:85:2e:25:82:e8:4c:12:a2:73:
         45:2f:ad:10:c1:43:ed:a1:dc:c9:80:2a:3a:85:c5:eb:83:52:
         0d:b3:7a:f9:d4:85:2b:d9:f8:63:35:a8:11:fc:c6:88:a3:8d:
         37:a2:57:25:dc:f0:20:a5:b4:b1:9b:b5:f0:97:f6:cf:03:c3:
         cf:9f:f2:7e:3f:2b:43:70:7b:eb:49:c8:b2:55:d5:57:86:41:
         6d:6a:d8:b4:48:0e:07:3d:70:98:64:10:71:a2:04:e2:4b:a4:
         65:b3:f0:1b:29:49:86:37:4a:14:af:d4:20:80:a9:d5:7b:b5:
         2f:78:20:5e:0e:83:e7:b4:ba:24:f5:1e:4a:d3:d3:74:76:79:
         1a:28:a2:06:b2:49:55:05:4a:2a:23:2f:e9:48:c3:da:12:d4:
         2e:cb:bd:4e:d5:60:38:14:0e:43:5c:9d:95:27:ed:76:37:a9:
         50:ff:87:bf:12:07:95:2b:b6:56:b4:69:88:5c:38:8d:fb:49:
         b4:96:bd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----