Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70e0a448-b713-3809-a65f-e8120942d3ca.roa
File:                     70e0a448-b713-3809-a65f-e8120942d3ca.roa (raw, json)
Hash identifier:          EoKoUoA9zMlXrnv9eFdyykMnhJZYuzBrzZej97rlXSA=
Subject key identifier:   96:60:16:AD:A7:74:31:D9:01:CF:D3:57:CD:0B:1D:9C:90:BE:24:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4930F62C570C8E9FD6780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70e0a448-b713-3809-a65f-e8120942d3ca.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        73.113.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:93:0f:62:c5:70:c8:e9:fd:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=73744366-78e0-4558-b31c-e56b84ffa551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:91:fc:6a:d2:a1:78:25:34:08:37:6d:67:
                    0f:93:5a:55:66:17:c1:5c:e7:64:b2:9d:41:1a:a6:
                    ed:41:1b:6b:16:06:d0:8b:43:14:60:3f:79:ff:85:
                    ad:81:36:92:f1:e2:12:08:c2:1d:0d:ed:94:9a:31:
                    d6:df:d0:87:5c:91:dd:6d:c2:3e:1d:1b:f6:33:65:
                    ae:1e:d4:86:64:78:6b:49:01:41:eb:6c:8a:8a:a7:
                    89:fa:c0:c7:c1:18:e4:ed:2e:1a:34:f9:f8:b4:08:
                    62:74:be:81:a5:10:ff:17:99:22:f2:d8:06:64:3e:
                    1e:b3:b0:7c:ab:43:83:81:9e:25:98:9b:b5:61:c2:
                    5b:0e:38:54:31:d5:4d:1a:bc:1b:93:d4:cd:36:02:
                    48:b6:33:5f:52:60:a4:82:f6:02:ae:32:1d:bf:53:
                    44:e6:cd:d3:b9:e5:76:8b:69:c8:30:64:4b:be:c0:
                    e0:4b:ac:bf:8a:81:4f:69:c2:cc:a3:f2:db:4b:5c:
                    7b:5a:81:a1:1f:66:f5:5a:a1:ce:af:be:36:85:32:
                    f5:df:22:03:ab:91:6a:62:c7:71:ff:8d:a0:58:53:
                    42:6c:a3:aa:5d:79:6f:96:53:4a:d4:79:98:7e:9c:
                    95:d2:0d:01:d0:1d:e9:ac:b6:47:42:a0:34:09:5a:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:60:16:AD:A7:74:31:D9:01:CF:D3:57:CD:0B:1D:9C:90:BE:24:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70e0a448-b713-3809-a65f-e8120942d3ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.113.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:45:fa:63:de:27:31:26:31:d6:23:45:46:22:77:4a:0f:46:
         28:fd:cc:c7:fc:b8:b1:cf:09:49:4e:62:61:c2:fb:b6:bf:1a:
         4e:17:91:70:17:cd:a5:50:b6:5f:6f:81:cf:7e:9f:fb:0b:63:
         fb:6b:dd:38:50:93:78:63:87:40:68:eb:49:ae:45:01:ff:0d:
         c0:fc:25:ff:a9:57:f5:84:31:70:c5:a4:ba:24:86:1e:5c:7c:
         2e:e1:3a:cb:fa:88:16:bd:e5:c5:7a:5b:fd:eb:94:97:2e:b5:
         25:80:29:e4:ce:30:0e:03:84:80:31:c6:e7:0b:e6:3f:1f:eb:
         b8:13:68:04:d6:81:3a:fb:f9:fa:29:6c:9c:e7:57:8a:af:44:
         c6:e9:69:cc:03:a2:c9:7f:09:4d:4d:a4:fa:74:3a:bd:10:5b:
         0b:f6:f3:c7:26:4e:68:e3:7c:ac:78:bb:35:e0:3f:57:4b:ea:
         7f:7a:6c:84:7c:6b:b4:5b:6e:26:9a:b9:42:28:b7:57:7f:e8:
         34:3b:45:d0:5f:a1:3c:46:42:b1:9d:ef:77:28:91:9b:a3:5d:
         f9:93:51:08:50:42:65:1e:31:c0:8f:42:c5:8c:70:de:39:6e:
         dc:4a:c7:5f:16:c2:a8:e7:9c:f1:65:9e:97:55:64:94:0a:b4:
         1d:f7:87:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----