Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25ea0f11-c7ff-3e99-b9fd-0ad82c366a33.roa
File:                     25ea0f11-c7ff-3e99-b9fd-0ad82c366a33.roa (raw, json)
Hash identifier:          Iu77lzEgQ87vF/NXjJdNG2OKKjKbO0JtEhKbgNyl8Uc=
Subject key identifier:   B4:FC:45:9F:8C:83:34:48:9C:6E:65:CF:81:05:4B:63:B1:72:A7:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4E42D18E468533AB65920
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25ea0f11-c7ff-3e99-b9fd-0ad82c366a33.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33651
IP address blocks:        24.104.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:e4:2d:18:e4:68:53:3a:b6:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=887bc4bc-c78f-461e-a1c4-d23f09926751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:69:13:9c:b7:05:ef:50:3f:a8:82:ee:bc:60:
                    97:56:c4:1d:ac:c3:06:9e:26:97:79:a3:af:7c:53:
                    da:89:30:58:98:0c:f3:c2:4b:e0:53:a3:93:ec:97:
                    b7:77:97:c1:22:72:4d:8c:2a:16:54:59:eb:ae:77:
                    5e:cb:a1:0b:a4:ad:e3:66:1b:5a:0a:22:8e:36:e4:
                    40:50:34:6f:2e:ac:4d:24:20:79:df:cc:b6:fe:36:
                    a5:55:a6:29:54:90:ef:77:11:6c:a9:58:c4:03:f9:
                    7d:1f:ec:4b:67:81:e2:49:75:2e:a3:59:9a:6b:06:
                    e3:a4:01:25:32:fa:49:b5:05:ff:d1:69:49:49:21:
                    b0:0f:be:cc:a0:5b:ed:14:af:e8:79:9b:21:18:7f:
                    8f:a2:78:8d:b1:8d:7b:38:bc:c2:e3:82:fe:96:90:
                    89:b0:9b:b8:02:a9:61:9a:be:55:8c:d7:3e:e9:e4:
                    ae:b4:66:78:04:b0:2e:68:09:e7:0d:71:b8:87:53:
                    f7:bc:81:4b:8e:29:3b:0b:62:68:d2:80:f8:49:ac:
                    fc:9f:b7:30:d1:6a:60:45:6f:22:a6:0e:32:77:d4:
                    db:19:3a:02:06:5b:af:7c:86:2c:9d:f5:91:d6:cb:
                    f7:44:61:a1:60:26:42:d3:4d:85:14:c4:22:f6:5c:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FC:45:9F:8C:83:34:48:9C:6E:65:CF:81:05:4B:63:B1:72:A7:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25ea0f11-c7ff-3e99-b9fd-0ad82c366a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.104.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:26:47:6d:2f:a4:5e:64:ab:ef:55:6e:71:cd:8a:42:1b:0e:
         2e:27:a2:76:ae:0d:46:45:17:92:f7:6e:35:ed:59:93:1e:ec:
         74:6b:f4:17:1e:a6:48:a2:ad:f0:52:a4:2f:8c:28:6b:42:a1:
         0a:da:ef:65:86:46:07:b8:87:a0:c6:36:26:a1:3f:a2:7b:b9:
         a5:37:ca:36:09:7f:f7:34:df:bc:fe:50:4c:42:d4:55:58:80:
         bc:61:49:76:65:0c:41:05:b4:06:73:c4:d7:47:c1:ef:a8:9b:
         c4:ac:b2:c1:95:58:7e:ae:66:c8:7b:f7:ec:7e:68:26:6c:ad:
         bc:eb:73:02:76:22:f1:ef:f0:d6:b1:a1:c5:bd:39:05:b1:28:
         b9:b4:30:7f:79:c2:89:c3:ba:2a:41:25:fd:cc:7b:02:ed:47:
         a6:ec:1b:26:39:13:64:86:1b:ba:51:cb:53:51:08:05:5a:d4:
         e4:76:87:47:7a:60:6a:68:e5:ba:43:7e:a6:6f:9c:e2:f4:a8:
         a0:fa:32:cc:49:a6:47:04:c5:35:c3:28:f3:6a:0a:7f:ad:61:
         9e:91:b0:53:aa:c3:5f:6e:78:20:2b:e9:99:42:19:2f:ca:9d:
         68:d7:ea:55:bc:c1:39:6a:d9:81:8e:f0:cc:df:fb:99:e5:d2:
         75:59:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----