Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eddd4193-b5fa-3301-a066-fef98bc53b32.roa
File:                     eddd4193-b5fa-3301-a066-fef98bc53b32.roa (raw, json)
Hash identifier:          Ak8CGN4zECbmRuY2NbYBLHS3ha1ZeC85E3ryjnVaR/Q=
Subject key identifier:   B5:CF:FC:F3:1F:F0:98:56:FD:B5:01:DE:C7:91:10:52:96:65:24:E0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7E3160DCC5CA368160340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eddd4193-b5fa-3301-a066-fef98bc53b32.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        73.155.42.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:e3:16:0d:cc:5c:a3:68:16:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=01cdf392-34bf-493c-bc2e-adf89c434c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d0:9b:96:21:ba:b9:50:58:00:1f:53:b4:dc:
                    ae:26:fe:40:6e:c9:d9:c8:e8:e8:ca:c5:00:c3:d9:
                    d3:13:f3:4c:ea:42:92:35:9c:cf:41:5f:25:87:fc:
                    e5:71:79:4f:2c:78:71:92:cb:fc:15:51:12:39:37:
                    f1:0b:82:db:b1:68:78:d1:ba:08:02:d3:6a:c1:7b:
                    15:cc:d9:42:5a:4c:25:1e:90:24:4f:6a:75:42:ec:
                    12:e1:67:a9:b9:59:3e:a7:e7:40:d9:31:6c:32:17:
                    cd:14:d1:d2:c7:3c:bf:6f:82:6f:c8:4e:99:13:49:
                    46:34:f1:04:32:a0:35:a0:b9:1e:2c:a5:68:23:fc:
                    fc:80:92:a2:ae:54:39:f3:f0:a3:c6:69:7a:9b:84:
                    55:64:d8:ac:9f:45:02:1c:cf:e3:fb:7f:42:b9:c5:
                    64:d9:57:f4:9f:24:62:bb:5d:00:e9:51:ac:6c:84:
                    23:09:35:35:e5:70:99:c9:92:ec:d8:46:89:11:28:
                    22:44:45:e7:cd:66:fa:5c:52:2f:4f:bf:b4:53:a1:
                    80:c2:1f:8f:21:5b:74:22:7e:e9:a3:63:a4:82:c2:
                    09:c8:ee:c0:5d:2c:98:b5:58:ca:b6:a9:7c:48:21:
                    8a:2a:d9:12:80:00:aa:16:ce:6b:fe:3e:0e:2d:59:
                    27:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CF:FC:F3:1F:F0:98:56:FD:B5:01:DE:C7:91:10:52:96:65:24:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eddd4193-b5fa-3301-a066-fef98bc53b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.155.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ce:93:70:21:e7:b8:57:a8:3b:6f:95:92:50:7f:23:56:51:
         09:bc:ee:37:d6:8d:2e:28:5d:27:eb:b1:b6:24:76:08:31:df:
         d7:de:e4:3a:45:4c:ae:bd:6c:6a:70:6c:0f:cb:1c:54:86:e4:
         5f:fd:db:af:e8:c5:28:83:f8:37:4b:c9:3d:ad:08:40:ee:95:
         0a:99:6b:05:14:5e:d0:a8:b4:a1:1b:80:11:6b:af:c0:8c:3d:
         aa:6b:7a:c4:a5:52:09:78:c2:17:d6:a6:e2:36:d7:3f:cf:3c:
         41:4e:04:f1:5b:32:53:f4:18:31:5c:5b:ec:8a:95:ed:06:75:
         a3:1b:f3:dd:eb:c1:25:f6:1c:68:9c:31:8e:e0:34:7f:db:ad:
         a3:72:61:d4:b7:c2:b7:dc:11:51:e2:27:de:fc:b0:20:ce:3b:
         13:00:92:cb:46:bf:c7:71:85:47:1f:06:01:6b:e2:a9:75:19:
         93:86:ba:a9:07:92:12:68:d5:79:5b:e6:5c:08:00:09:47:e5:
         b5:a0:7e:ee:2b:82:82:10:ee:85:13:aa:f4:42:07:ec:19:60:
         95:c8:75:b8:b3:92:78:e5:b6:97:b5:73:93:f5:a1:f6:1f:01:
         ca:db:a0:a2:30:af:a5:3b:32:d0:66:01:2f:12:77:8e:1a:7b:
         a6:59:4d:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09+MWDcxco2gWA0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MDFjZGYzOTItMzRiZi00OTNjLWJjMmUtYWRmODljNDM0YzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdCbliG6uVBYAB9TtNyuJv5AbsnZyOjoysUA
w9nTE/NM6kKSNZzPQV8lh/zlcXlPLHhxksv8FVESOTfxC4LbsWh40boIAtNqwXsV
zNlCWkwlHpAkT2p1QuwS4WepuVk+p+dA2TFsMhfNFNHSxzy/b4JvyE6ZE0lGNPEE
MqA1oLkeLKVoI/z8gJKirlQ58/Cjxml6m4RVZNisn0UCHM/j+39CucVk2Vf0nyRi
u10A6VGsbIQjCTU15XCZyZLs2EaJESgiREXnzWb6XFIvT7+0U6GAwh+PIVt0In7p
o2OkgsIJyO7AXSyYtVjKtql8SCGKKtkSgACqFs5r/j4OLVknLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLXP/PMf8JhW/bUB3seREFKWZSTgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWRkZDQxOTMtYjVmYS0z
MzAxLWEwNjYtZmVmOThiYzUzYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZsqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJzOk3Ah57hXqDtvlZJQfyNWUQm87jfWjS4oXSfrsbYkdggx39fe5DpF
TK69bGpwbA/LHFSG5F/926/oxSiD+DdLyT2tCEDulQqZawUUXtCotKEbgBFrr8CM
PapresSlUgl4whfWpuI21z/PPEFOBPFbMlP0GDFcW+yKle0GdaMb893rwSX2HGic
MY7gNH/braNyYdS3wrfcEVHiJ978sCDOOxMAkstGv8dxhUcfBgFr4ql1GZOGuqkH
khJo1Xlb5lwIAAlH5bWgfu4rgoIQ7oUTqvRCB+wZYJXIdbizknjltpe1c5P1ofYf
AcrboKIwr6U7MtBmAS8Sd44ae6ZZTVc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:25:00 2025 by rpki-client