Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17058ab2-596e-3d81-aed8-593862110301.roa
File:                     17058ab2-596e-3d81-aed8-593862110301.roa (raw, json)
Hash identifier:          XctLQ4tWOHxUIhTrsT3h/iFH1CIHE1+grx0KAKxjbgU=
Subject key identifier:   D4:9E:EC:89:EB:FF:1B:1C:D8:A9:1D:B9:17:CC:F9:3D:75:94:B6:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B26237D9E7E53D834CA32E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17058ab2-596e-3d81-aed8-593862110301.roa
Signing time:             Tue 28 Jan 2025 17:38:40 +0000
ROA not before:           Tue 28 Jan 2025 17:38:40 +0000
ROA not after:            Mon 28 Apr 2025 16:38:40 +0000
asID:                     33491
IP address blocks:        73.146.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:62:37:d9:e7:e5:3d:83:4c:a3:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:38:40 2025 GMT
            Not After : Apr 28 16:38:40 2025 GMT
        Subject: CN=582c872c-a81a-414c-a2e2-08ea3d20a45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:96:c4:9a:bf:cd:c9:5c:02:b2:50:e6:85:
                    27:57:e5:43:56:f4:12:71:76:db:6e:27:cf:eb:0d:
                    1a:00:29:ca:1d:97:3d:0b:85:e9:95:91:f4:c7:70:
                    19:38:04:75:6a:8b:12:34:c8:7b:09:9f:43:b8:14:
                    8e:9f:45:c5:0e:b2:d6:d7:f5:0e:d7:a3:08:74:35:
                    25:26:de:7e:54:ba:32:69:bd:ef:c5:47:5f:2d:db:
                    3b:d6:74:34:cd:4d:1a:29:3e:f6:bc:ce:f6:06:2c:
                    6c:35:d8:22:2b:cf:0b:d8:c9:85:d1:de:e1:4f:08:
                    d8:f0:0d:9b:09:3f:a0:d9:5e:bf:cf:15:b3:c8:d4:
                    ab:ba:93:5b:ee:bb:67:5c:0d:7f:0a:28:9a:52:a1:
                    fe:f0:0a:2d:b7:1e:a0:25:82:01:d6:28:30:06:ce:
                    51:87:42:44:cd:76:0a:ed:59:63:ea:ee:35:ce:b2:
                    08:ee:ee:64:3c:58:7d:5f:cd:cb:4f:24:a1:81:3c:
                    c8:ef:dc:d5:10:89:66:fb:15:4d:1c:b0:ce:b2:d1:
                    a6:92:ce:49:4e:72:2f:e3:64:a5:b7:01:9e:c0:9d:
                    e4:e2:89:8a:1d:ac:e0:5a:55:b2:ac:d4:1d:dd:5e:
                    3b:67:f0:03:0a:78:fc:bf:9a:fc:d6:8c:21:cb:50:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9E:EC:89:EB:FF:1B:1C:D8:A9:1D:B9:17:CC:F9:3D:75:94:B6:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17058ab2-596e-3d81-aed8-593862110301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.146.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:2b:0a:c9:5f:6b:3b:55:b4:55:08:50:96:9d:33:38:ae:6b:
         69:c3:35:fe:dd:49:2e:44:47:b9:42:f1:af:5e:4c:f9:d4:96:
         29:5f:1d:2b:b8:b2:06:46:b9:d9:d5:79:16:b1:30:e5:85:ef:
         23:f7:60:2d:bd:08:9d:e3:32:2c:58:d7:05:1e:46:49:fb:72:
         37:af:5a:92:97:17:16:7a:5d:e3:8c:0c:44:69:9c:fd:e9:35:
         c0:73:7a:48:3c:36:ad:82:7f:41:95:14:83:dd:3a:de:b9:6d:
         5d:ff:25:dd:a1:22:5d:c5:de:81:7f:3d:c6:60:e8:bc:9e:c5:
         7e:f5:dd:74:21:35:6b:c5:42:01:a5:a4:7d:88:4b:cb:71:06:
         6e:1a:f6:60:5b:49:ad:c7:00:fb:20:99:50:d3:a7:33:32:63:
         6d:80:46:a8:61:4d:fa:ac:33:8e:8d:d2:0a:15:16:e9:b8:0f:
         3e:ab:c6:ae:51:9e:c0:80:06:aa:9e:6c:bf:c2:e0:ca:79:07:
         25:f1:d6:5a:25:51:b6:85:8b:e6:0a:ec:74:ff:87:43:04:a7:
         e5:c6:61:1c:40:3c:13:78:4b:3e:45:0c:2e:73:5d:62:ad:69:
         8a:d6:92:bf:7a:3f:e9:47:45:79:53:7a:bc:ab:7f:02:60:03:
         c3:26:39:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiyYjfZ5+U9g0yjLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyODE3Mzg0MFoXDTI1MDQyODE2Mzg0MFowLzEtMCsGA1UEAxMk
NTgyYzg3MmMtYTgxYS00MTRjLWEyZTItMDhlYTNkMjBhNDVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufCWxJq/zclcArJQ5oUnV+VDVvQScXbbbifP
6w0aACnKHZc9C4XplZH0x3AZOAR1aosSNMh7CZ9DuBSOn0XFDrLW1/UO16MIdDUl
Jt5+VLoyab3vxUdfLds71nQ0zU0aKT72vM72BixsNdgiK88L2MmF0d7hTwjY8A2b
CT+g2V6/zxWzyNSrupNb7rtnXA1/CiiaUqH+8Aottx6gJYIB1igwBs5Rh0JEzXYK
7Vlj6u41zrII7u5kPFh9X83LTyShgTzI79zVEIlm+xVNHLDOstGmks5JTnIv42Sl
twGewJ3k4omKHazgWlWyrNQd3V47Z/ADCnj8v5r81owhy1DyoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNSe7Inr/xsc2KkduRfM+T11lLZIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTcwNThhYjItNTk2ZS0z
ZDgxLWFlZDgtNTkzODYyMTEwMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASZJdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHsrCslfaztVtFUIUJadMziua2nDNf7dSS5ER7lC8a9eTPnUlilfHSu4
sgZGudnVeRaxMOWF7yP3YC29CJ3jMixY1wUeRkn7cjevWpKXFxZ6XeOMDERpnP3p
NcBzekg8Nq2Cf0GVFIPdOt65bV3/Jd2hIl3F3oF/PcZg6LyexX713XQhNWvFQgGl
pH2IS8txBm4a9mBbSa3HAPsgmVDTpzMyY22ARqhhTfqsM46N0goVFum4Dz6rxq5R
nsCABqqebL/C4Mp5ByXx1lolUbaFi+YK7HT/h0MEp+XGYRxAPBN4Sz5FDC5zXWKt
aYrWkr96P+lHRXlTeryrfwJgA8MmOSk=
-----END CERTIFICATE-----