Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5eb63cf7-aea0-3314-9180-cad032fffe15.roa
File:                     5eb63cf7-aea0-3314-9180-cad032fffe15.roa (raw, json)
Hash identifier:          4K7+qMRQuZIYpgErBErCuZlTUPJitg9cYfifX5knhIw=
Subject key identifier:   57:7C:E6:CE:2E:A2:55:C9:36:C1:12:4B:BB:D9:96:DF:CE:8C:A2:3E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB00DDE9FA7790F543ED7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5eb63cf7-aea0-3314-9180-cad032fffe15.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        73.70.236.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:0d:de:9f:a7:79:0f:54:3e:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=7bc36c02-bcc2-4e66-acfe-234699887ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:94:db:0f:83:7e:4a:64:15:71:a3:84:07:3f:
                    72:e0:0c:2a:d8:06:42:bd:55:3f:aa:71:d6:63:7e:
                    c5:f8:3e:ab:79:86:87:11:79:b4:79:4d:a9:e9:b2:
                    44:cd:6e:0a:20:67:54:5c:61:e9:04:67:1f:9c:8f:
                    5e:ab:17:97:5b:38:ca:24:3e:93:b5:0b:3c:4d:ec:
                    c8:4a:4c:b6:08:25:18:6b:a1:d8:4e:ba:3c:4f:1e:
                    02:84:78:15:76:7f:2f:a3:ba:4b:77:ec:6e:71:dd:
                    e5:3a:c8:bf:3f:ab:97:cc:db:64:5d:41:44:6d:53:
                    40:13:f9:da:b4:51:80:7c:20:e6:7d:95:73:1d:63:
                    a5:bc:e2:5b:83:a6:31:be:c4:d5:51:2c:95:0c:5e:
                    b3:41:e1:1b:37:09:2b:ca:1e:76:25:3f:8f:7c:37:
                    17:6f:76:3f:f0:1a:c6:4a:f4:8c:54:bd:d6:55:57:
                    ea:e6:3d:4c:d3:91:9d:ea:09:25:06:05:c6:59:b8:
                    bb:77:e7:58:38:63:11:dd:3d:64:fd:24:28:35:45:
                    25:ad:ea:15:ff:97:b3:ef:08:b8:b4:02:ef:97:dd:
                    b9:99:2d:bd:a8:20:6d:94:f9:b0:ff:78:ce:92:a8:
                    5f:b1:0d:7c:3f:cb:35:92:f0:67:f7:cf:48:8a:46:
                    17:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7C:E6:CE:2E:A2:55:C9:36:C1:12:4B:BB:D9:96:DF:CE:8C:A2:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5eb63cf7-aea0-3314-9180-cad032fffe15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.70.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:ab:12:00:c4:fe:df:94:46:5a:de:3f:8e:c8:c6:e8:1d:0d:
         5a:bb:32:04:33:c6:18:cf:01:7a:79:64:47:83:83:66:93:16:
         50:bd:cd:50:cc:b2:00:87:fd:c4:e7:b5:da:e7:eb:32:ce:59:
         4c:f9:3a:6c:d2:b3:20:02:6e:a2:86:47:b6:7e:1f:47:a2:78:
         a3:21:6a:67:da:3c:e9:05:49:d3:b2:d1:9e:4b:16:70:d5:6b:
         26:e6:60:1b:e2:e2:57:4c:79:a1:ae:3d:50:56:50:0c:98:b6:
         9e:5a:47:db:20:8d:46:b8:c4:18:30:b3:77:7b:c0:32:68:59:
         33:02:b2:50:01:05:3c:1d:88:51:18:6c:63:64:c0:94:38:71:
         85:5f:3a:88:e6:05:94:56:5f:4e:bb:33:b7:8f:17:ca:56:26:
         f7:a2:09:af:d0:68:02:86:cf:8d:e3:52:61:3c:d4:c5:89:9d:
         cd:f3:53:56:d7:17:57:23:99:39:4a:c9:7d:77:42:0c:24:f0:
         42:8b:70:ce:87:62:26:01:50:4e:d8:26:16:4f:ec:0b:98:67:
         7c:64:98:5b:44:16:1a:63:59:69:a1:f9:f3:47:e5:1f:73:68:
         f5:44:2b:14:c2:dc:27:44:9e:0c:cf:9b:e6:7b:f1:da:39:b0:
         5e:5a:78:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----