Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ba3f287-fefe-30dc-a558-5c416f3da4ee.roa
File:                     4ba3f287-fefe-30dc-a558-5c416f3da4ee.roa (raw, json)
Hash identifier:          iQ29xx1xA2P5eqrk78cK3V7ui9N2nKU4gYczJ4gYE7k=
Subject key identifier:   CC:85:4E:8F:53:7A:8C:42:66:0E:F9:E1:BB:12:E2:AE:83:38:EB:06
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F9269397A6DAD18B3A2100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ba3f287-fefe-30dc-a558-5c416f3da4ee.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        73.206.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:26:93:97:a6:da:d1:8b:3a:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=5baa6001-9520-4384-9451-3bc36e9aeaf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:49:9d:b3:7b:5d:78:fe:4c:c8:18:4f:9a:fa:
                    11:48:3c:66:9f:16:e3:42:d2:0b:65:45:fe:4b:cf:
                    11:d0:52:a7:62:a7:62:66:30:74:bb:40:ce:1e:31:
                    1d:9e:b0:5b:d0:61:48:10:57:54:49:e8:fb:81:ad:
                    d9:1a:a3:fe:30:fb:a0:4d:ed:62:6d:33:ba:e3:27:
                    b8:de:5d:f9:cc:72:58:e2:6c:1b:4c:68:0d:bd:0c:
                    60:58:0b:aa:7f:f3:6e:62:d1:73:28:d8:48:11:37:
                    05:06:99:c9:54:48:df:78:cc:69:78:06:79:11:7a:
                    32:1e:02:39:a3:e7:2c:46:82:0e:58:4b:5e:82:1e:
                    c0:c9:5e:81:22:ad:1b:07:36:56:a4:a8:14:3e:be:
                    31:f7:ba:a5:cd:33:d3:27:83:a1:38:2b:8a:95:fa:
                    94:ed:9f:12:8e:68:fa:e2:ec:c6:a3:3a:44:43:c9:
                    cc:08:d6:5a:64:43:a7:81:ba:d9:98:62:0e:ab:f4:
                    a8:9e:95:9d:b8:52:23:1d:01:5c:42:08:9d:c2:bd:
                    28:8a:cd:08:86:15:cf:d4:8a:ef:85:66:fc:3c:c2:
                    e4:d1:73:e5:a2:74:21:b8:2e:e2:33:db:35:d5:4a:
                    de:d3:81:98:7d:f0:db:60:37:01:c5:a0:df:d4:c7:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:85:4E:8F:53:7A:8C:42:66:0E:F9:E1:BB:12:E2:AE:83:38:EB:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ba3f287-fefe-30dc-a558-5c416f3da4ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.206.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:5d:b2:0b:a5:53:8b:36:64:85:51:d7:dc:be:41:18:a2:f9:
         3d:44:b2:a9:da:51:17:52:9d:5e:b9:cc:34:a6:e3:fa:2d:fd:
         ea:25:ae:3a:10:32:5b:c7:ef:32:bb:a2:90:ed:c2:09:9e:55:
         22:a6:9f:c2:16:55:b4:ca:4a:69:b6:ec:11:7b:30:f6:b3:08:
         9d:68:52:a7:f6:73:24:14:6e:e0:39:bb:2f:4e:75:d7:37:8f:
         d7:31:69:f6:3b:31:15:8c:9c:79:38:5a:9f:b0:9a:eb:2e:10:
         44:df:b9:3a:2b:a7:61:f7:9b:ee:90:12:40:5b:13:11:d2:2b:
         5c:c0:16:f3:22:bf:b0:e9:f5:54:ab:48:fb:9b:36:82:16:27:
         7f:b2:7f:11:64:79:e3:23:34:53:69:4f:28:c8:8c:92:4c:e2:
         1d:fb:d4:51:87:e9:8b:97:ed:e5:ce:ae:b4:68:2f:37:02:a7:
         73:6c:81:b5:fd:44:a7:14:05:c8:70:c9:24:24:c8:25:de:02:
         3a:80:c8:50:8a:28:37:fd:6a:82:0b:d0:45:7e:b8:79:64:a6:
         59:fe:42:76:5f:e0:9b:17:87:61:21:0b:2d:cd:2e:65:4a:2a:
         fb:c2:38:b7:7d:d2:59:d9:12:3d:c3:7a:f0:25:a2:6e:24:4e:
         a4:34:c8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----