Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8c4531a-16b4-3467-9917-bebe77cc93df.roa
File:                     f8c4531a-16b4-3467-9917-bebe77cc93df.roa (raw, json)
Hash identifier:          tqF+XGE66KTSLLIGZ2NlVPY/nzJ7FI2Xu3M+If3ueDA=
Subject key identifier:   47:61:9E:E2:CF:B2:EB:BD:92:B3:0E:02:41:99:69:71:A0:AF:9E:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB13EB20DD0129DC0B61BE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8c4531a-16b4-3467-9917-bebe77cc93df.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        73.9.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:3e:b2:0d:d0:12:9d:c0:b6:1b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=6a381988-52f6-41fc-acb0-6550508170a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8d:99:d0:80:88:86:14:3b:54:7d:86:01:d0:
                    42:97:56:f7:59:64:cf:59:da:78:ca:c9:1f:d2:60:
                    7c:b9:24:6a:3d:da:c9:70:36:bc:d4:bc:63:69:8a:
                    6e:aa:52:f8:9e:c6:d2:07:6d:f2:8d:e0:9e:e1:03:
                    cb:02:f8:92:d6:46:59:b1:4c:80:2c:ac:3f:e6:5d:
                    20:ed:58:b1:b0:a5:46:19:33:6f:73:4e:17:ea:c9:
                    38:cb:16:19:c5:3a:8c:28:3a:5f:f2:3a:81:23:e1:
                    11:d9:bb:5b:13:8e:e6:a9:29:5f:50:78:cc:59:c7:
                    bf:04:ab:9f:8a:da:05:62:ce:e2:c1:0c:36:59:76:
                    ee:60:00:91:bd:3e:99:03:81:67:e6:35:77:b0:6b:
                    1a:53:66:0b:7c:64:bf:5f:4e:68:fc:92:f6:3d:8e:
                    3e:2c:09:e8:d1:83:23:e7:d2:ba:cd:3f:71:65:55:
                    b0:cd:7e:2f:45:26:dd:55:4a:06:b8:54:f3:99:fc:
                    0e:d0:a5:62:fa:70:e9:ab:55:6c:18:de:6c:85:f2:
                    fc:4a:5f:0e:b9:f2:37:6a:6f:78:fc:4b:9e:82:35:
                    f3:23:b4:9c:07:6c:d8:88:c7:f8:45:46:12:78:88:
                    f3:87:8d:30:f6:80:cd:00:b1:37:c6:31:be:c5:9a:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:61:9E:E2:CF:B2:EB:BD:92:B3:0E:02:41:99:69:71:A0:AF:9E:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8c4531a-16b4-3467-9917-bebe77cc93df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.9.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:86:9a:a4:6c:79:09:01:fa:72:c0:9d:60:14:db:fc:c1:bf:
         58:ff:52:ac:55:4b:e1:30:37:29:7d:f6:71:cb:9e:cc:87:f2:
         a9:ca:35:aa:52:51:a7:d2:1f:89:7e:95:08:42:f0:3c:7a:5b:
         17:f1:4c:64:35:e3:69:59:54:d3:a4:00:e8:1c:a7:04:b1:2a:
         db:cc:e0:38:a1:a1:4d:4f:8d:7b:9c:85:f2:92:ce:ea:2a:c1:
         51:a0:fe:5e:8c:09:8a:34:c5:73:10:e3:d4:bd:3d:ce:06:76:
         f7:78:06:21:2c:cb:7a:f4:48:8a:fe:ed:b4:3d:93:22:f1:fe:
         09:9c:7b:4c:b7:26:cd:0e:ce:39:2f:be:6c:d7:20:74:40:c5:
         c0:b8:51:60:af:d8:df:53:ae:66:2e:76:fe:42:51:78:5f:23:
         e2:55:bd:30:64:d7:e3:53:67:ea:26:9e:89:08:fe:ad:c4:41:
         12:99:c4:6d:85:73:e2:9a:85:80:78:be:74:2c:85:7d:4e:f8:
         7e:1d:ff:1a:22:39:eb:66:99:bb:1d:03:c2:2e:c8:12:0b:8d:
         ae:29:5d:5a:75:d6:65:b6:1a:78:c5:e9:6b:b6:ca:11:cd:09:
         c3:2d:e9:0f:7c:0f:f1:fa:27:a2:00:e8:5a:16:9a:dc:5c:05:
         d2:41:a2:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssT6yDdASncC2G+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NmEzODE5ODgtNTJmNi00MWZjLWFjYjAtNjU1MDUwODE3MGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY2Z0ICIhhQ7VH2GAdBCl1b3WWTPWdp4yskf
0mB8uSRqPdrJcDa81LxjaYpuqlL4nsbSB23yjeCe4QPLAviS1kZZsUyALKw/5l0g
7VixsKVGGTNvc04X6sk4yxYZxTqMKDpf8jqBI+ER2btbE47mqSlfUHjMWce/BKuf
itoFYs7iwQw2WXbuYACRvT6ZA4Fn5jV3sGsaU2YLfGS/X05o/JL2PY4+LAno0YMj
59K6zT9xZVWwzX4vRSbdVUoGuFTzmfwO0KVi+nDpq1VsGN5shfL8Sl8OufI3am94
/EuegjXzI7ScB2zYiMf4RUYSeIjzh40w9oDNALE3xjG+xZrvYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEdhnuLPsuu9krMOAkGZaXGgr54pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjhjNDUzMWEtMTZiNC0z
NDY3LTk5MTctYmViZTc3Y2M5M2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSQnYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALWGmqRseQkB+nLAnWAU2/zBv1j/UqxVS+EwNyl99nHLnsyH8qnKNapS
UafSH4l+lQhC8Dx6WxfxTGQ142lZVNOkAOgcpwSxKtvM4DihoU1PjXuchfKSzuoq
wVGg/l6MCYo0xXMQ49S9Pc4Gdvd4BiEsy3r0SIr+7bQ9kyLx/gmce0y3Js0Ozjkv
vmzXIHRAxcC4UWCv2N9TrmYudv5CUXhfI+JVvTBk1+NTZ+omnokI/q3EQRKZxG2F
c+KahYB4vnQshX1O+H4d/xoiOetmmbsdA8IuyBILja4pXVp11mW2GnjF6Wu2yhHN
CcMt6Q98D/H6J6IA6FoWmtxcBdJBors=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:06:35 2025 by rpki-client