Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcade176-48f4-361a-81cc-48fa7eba376b.roa
File:                     fcade176-48f4-361a-81cc-48fa7eba376b.roa (raw, json)
Hash identifier:          XJLMCN2LCLEy/foCMkQV+8PzUzFi6FDhEjpcsqm7juM=
Subject key identifier:   91:3D:19:13:F3:77:D5:28:67:21:2C:38:65:60:A7:10:C9:BB:F2:AA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB03FE904C8D5579DBF1000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcade176-48f4-361a-81cc-48fa7eba376b.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33660
IP address blocks:        73.228.70.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:3f:e9:04:c8:d5:57:9d:bf:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=9248c23d-4203-4de0-a939-cc104d27f387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:9b:b3:dd:72:54:fa:20:15:79:c6:30:92:
                    0d:d6:e9:aa:56:96:29:e8:be:bb:d6:93:5f:fe:69:
                    17:c1:44:8c:92:ea:54:94:14:51:03:03:e0:93:34:
                    58:96:fe:35:a7:97:ea:b6:29:0c:ea:69:2c:95:3d:
                    12:89:ac:e3:23:b7:c9:9d:b4:b0:bd:b1:5e:2f:2c:
                    db:6f:a3:03:0a:27:01:17:52:af:d4:16:bd:3d:70:
                    28:48:d5:60:cf:fc:5e:d1:fc:8e:e1:7d:3a:02:2c:
                    f9:20:43:85:d1:59:dd:6c:18:c0:bd:84:e8:37:d5:
                    cf:7f:d6:04:d3:40:5b:29:30:21:d1:06:63:70:50:
                    21:8f:5f:71:ab:40:29:6a:9d:06:91:ec:f0:04:dc:
                    c7:f8:f8:cd:6a:b6:22:6e:79:63:48:cd:9a:18:af:
                    8e:da:f6:00:8f:d0:16:8c:91:29:e7:9a:54:a9:96:
                    d5:18:5b:17:86:90:9a:e2:af:79:cc:82:56:f1:19:
                    f4:30:e0:8b:0f:96:c2:50:22:dc:a5:ab:5b:1c:99:
                    d0:41:8b:ae:06:df:0b:47:69:00:46:b9:0c:ce:3a:
                    e0:0c:71:a0:1a:94:03:c6:77:9d:26:08:b3:3e:61:
                    2d:e6:ee:d8:d6:a1:60:2a:2c:0a:1d:c1:f7:5d:55:
                    df:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3D:19:13:F3:77:D5:28:67:21:2C:38:65:60:A7:10:C9:BB:F2:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcade176-48f4-361a-81cc-48fa7eba376b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.228.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:25:2f:8f:04:f6:02:28:cd:74:3c:49:e3:7a:fe:1d:d9:70:
         7f:4b:80:0a:0d:3b:69:0e:33:91:59:81:c8:23:09:b0:d0:44:
         d4:12:33:6c:6d:6a:3b:02:17:68:12:c1:cd:8a:74:16:21:20:
         1d:fc:76:13:71:8d:6a:9f:29:39:c8:e4:b6:a0:28:86:a9:d7:
         f6:13:7d:08:24:fe:e3:1b:cc:34:c6:ff:d8:32:82:af:94:7d:
         0a:3a:4f:ec:8e:38:ad:86:ca:f6:42:01:cb:98:2b:bf:de:5e:
         02:63:df:e8:4d:9e:aa:14:67:e7:e6:39:d8:67:f0:73:e4:7a:
         7f:78:5d:60:f2:05:4f:81:8c:ed:1b:07:26:c1:ff:e7:d0:5f:
         4a:d7:19:e6:90:db:2f:df:e1:28:0a:cb:e6:cb:7b:b2:87:af:
         47:52:0d:5b:3b:4c:ed:d2:7c:91:5f:64:73:06:db:0d:5e:76:
         37:83:ce:23:39:9e:d7:5c:31:67:d5:6c:b4:33:63:a7:d6:90:
         01:4a:57:a2:6f:a0:04:a8:c3:28:87:e5:bd:73:12:08:dc:43:
         9b:a5:d2:52:e5:9b:9b:f6:04:1a:8e:5a:68:24:ee:e7:ea:b8:
         37:af:47:f3:be:c1:34:3f:0c:ac:d6:82:8a:7d:85:a8:b2:9f:
         79:22:14:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssD/pBMjVV52/EAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
OTI0OGMyM2QtNDIwMy00ZGUwLWE5MzktY2MxMDRkMjdmMzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWybs91yVPogFXnGMJIN1umqVpYp6L671pNf
/mkXwUSMkupUlBRRAwPgkzRYlv41p5fqtikM6mkslT0SiazjI7fJnbSwvbFeLyzb
b6MDCicBF1Kv1Ba9PXAoSNVgz/xe0fyO4X06Aiz5IEOF0VndbBjAvYToN9XPf9YE
00BbKTAh0QZjcFAhj19xq0Apap0GkezwBNzH+PjNarYibnljSM2aGK+O2vYAj9AW
jJEp55pUqZbVGFsXhpCa4q95zIJW8Rn0MOCLD5bCUCLcpatbHJnQQYuuBt8LR2kA
RrkMzjrgDHGgGpQDxnedJgizPmEt5u7Y1qFgKiwKHcH3XVXffQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJE9GRPzd9UoZyEsOGVgpxDJu/KqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmNhZGUxNzYtNDhmNC0z
NjFhLTgxY2MtNDhmYTdlYmEzNzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeRGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA4lL48E9gIozXQ8SeN6/h3ZcH9LgAoNO2kOM5FZgcgjCbDQRNQSM2xt
ajsCF2gSwc2KdBYhIB38dhNxjWqfKTnI5LagKIap1/YTfQgk/uMbzDTG/9gygq+U
fQo6T+yOOK2GyvZCAcuYK7/eXgJj3+hNnqoUZ+fmOdhn8HPken94XWDyBU+BjO0b
BybB/+fQX0rXGeaQ2y/f4SgKy+bLe7KHr0dSDVs7TO3SfJFfZHMG2w1edjeDziM5
ntdcMWfVbLQzY6fWkAFKV6JvoASowyiH5b1zEgjcQ5ul0lLlm5v2BBqOWmgk7ufq
uDevR/O+wTQ/DKzWgop9haiyn3kiFPc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:32:00 2025 by rpki-client