Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6156c4e6-c565-3f40-ab45-30a56d94dff6.roa
File:                     6156c4e6-c565-3f40-ab45-30a56d94dff6.roa (raw, json)
Hash identifier:          WRFVLP7Sm0pw+9zOUcwDFXaojH8M1OqsiYfUhmqVY3o=
Subject key identifier:   C4:85:C8:BD:0A:33:EB:C0:EB:3F:9D:00:D9:C7:6B:A7:6D:27:4A:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA62E21AE55FEEFC27E8280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6156c4e6-c565-3f40-ab45-30a56d94dff6.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33651
IP address blocks:        73.15.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:2e:21:ae:55:fe:ef:c2:7e:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=49de2ecc-0950-40a2-affc-22d3ce631ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d6:5f:68:bf:91:ef:bb:5e:fb:5f:10:8d:ef:
                    56:dd:ee:03:48:90:09:15:a3:0e:c8:46:aa:71:b1:
                    de:f6:a8:44:64:26:18:78:94:51:f1:ac:f2:29:1a:
                    ce:19:06:a5:2c:31:eb:1c:ae:16:0e:43:3e:bb:82:
                    64:3b:e8:fc:56:0b:d0:61:43:e3:6c:51:f5:54:f1:
                    71:cf:cc:97:57:64:02:66:01:8a:2e:97:1d:31:82:
                    a2:a3:13:1f:92:6d:12:f1:28:72:d7:9e:77:9b:25:
                    fe:a4:e9:18:08:cb:a2:c3:77:2d:0b:2e:1c:54:55:
                    3b:ca:c4:f4:92:1f:26:1b:e6:46:cd:3b:20:8f:7f:
                    8e:6e:81:d7:aa:ca:ff:48:a7:c0:a7:2a:2f:68:7f:
                    f9:a9:19:58:e0:5a:aa:b1:44:cf:21:10:3d:a0:69:
                    95:b0:e1:6c:c5:7d:1e:2f:f7:b7:c9:ad:ab:ba:80:
                    31:37:d4:1a:db:4d:71:f5:fb:a4:6f:21:df:e0:61:
                    cc:a4:33:e8:4b:35:6d:b0:2d:71:cd:64:29:ca:3a:
                    85:fd:3d:ee:a5:57:f6:55:ba:c5:9b:2a:38:dc:06:
                    c8:8e:4f:dc:b7:56:21:ae:7d:1c:05:54:81:e9:4f:
                    cf:df:c0:e3:b6:84:79:5f:86:a0:d1:82:ee:55:e7:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:85:C8:BD:0A:33:EB:C0:EB:3F:9D:00:D9:C7:6B:A7:6D:27:4A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6156c4e6-c565-3f40-ab45-30a56d94dff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:90:1d:69:f4:9e:72:05:19:84:74:7d:5d:c7:4e:0a:59:e8:
         fa:3d:53:08:7f:6b:7c:6f:1b:60:3f:a5:b5:37:75:ff:c5:dd:
         2d:75:77:05:9e:c1:5a:07:2c:73:4d:13:5d:be:83:46:44:92:
         52:be:e5:93:2a:3f:bc:43:53:d9:99:1a:97:21:96:46:50:11:
         bb:71:cf:4d:e9:b9:9b:0e:8a:78:68:c2:a3:67:45:c1:31:aa:
         8b:45:3b:a4:2c:7e:38:fb:6e:ae:b3:4d:79:06:a5:48:52:3d:
         f0:f4:42:cd:ef:f5:45:b6:54:c8:fa:86:67:d8:76:d4:de:3e:
         66:cf:eb:0b:1d:1b:dd:86:ed:42:76:1d:4b:6e:33:60:68:39:
         e2:59:21:b1:19:3f:5d:5e:1d:ca:f5:c9:61:2f:a0:88:ed:73:
         04:f2:bc:0f:56:6d:41:18:a7:21:a1:30:4e:9e:17:ea:e3:a0:
         46:87:f8:73:a6:7b:2a:11:dd:fd:c7:0f:ae:11:90:bc:25:7e:
         7b:c8:f4:c2:28:f4:7e:56:77:be:9e:85:dd:84:c8:e1:7a:84:
         68:fb:3b:b1:20:ac:de:dd:ae:de:6b:68:d9:cc:d8:ea:f3:99:
         ea:0e:12:b4:60:89:a0:a3:05:25:4c:3f:91:3a:6e:65:5f:cc:
         ed:f8:cd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----