Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/901886cf-46c8-3f56-8b1a-75f16d0f815b.roa
File:                     901886cf-46c8-3f56-8b1a-75f16d0f815b.roa (raw, json)
Hash identifier:          wtRcg6KDC4GN5WgeB84496V6+lY4rpVCi88DIIsv/qs=
Subject key identifier:   58:B6:54:FB:21:BD:B7:55:29:73:3B:4A:31:BC:0D:1E:B7:8F:D2:FA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B263562704D9A67D3F1F3968
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/901886cf-46c8-3f56-8b1a-75f16d0f815b.roa
Signing time:             Tue 28 Jan 2025 17:40:55 +0000
ROA not before:           Tue 28 Jan 2025 17:40:55 +0000
ROA not after:            Mon 28 Apr 2025 16:40:55 +0000
asID:                     33491
IP address blocks:        73.44.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:63:56:27:04:d9:a6:7d:3f:1f:39:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:40:55 2025 GMT
            Not After : Apr 28 16:40:55 2025 GMT
        Subject: CN=6a5f39e0-98f2-4d27-8d0a-e5eb44b84cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:bd:6c:36:0f:c1:6d:86:ba:41:d4:90:eb:
                    7c:93:0b:6d:0c:fd:9f:4b:63:43:0c:65:0f:a7:b8:
                    22:47:c6:60:fb:26:f8:25:9a:e9:30:ab:5a:36:cb:
                    e7:5b:16:ff:64:f9:70:cb:75:8a:47:2b:20:a8:8d:
                    06:ba:2c:64:39:7c:6b:68:eb:2c:5f:ee:e7:64:80:
                    d7:9d:71:de:d7:de:cf:0c:b7:7a:4b:e4:11:95:34:
                    f4:8f:cd:1c:ab:d6:b6:20:1d:77:6c:b4:a2:7e:4f:
                    fb:0d:99:fe:75:56:2b:13:80:45:70:fa:3c:b8:ac:
                    e9:41:86:91:ce:db:2b:3f:21:7c:32:d6:ab:d6:1e:
                    25:9c:65:1e:12:d2:e7:d3:96:f4:d7:46:7b:ed:cf:
                    63:6d:16:02:67:3a:a7:fd:df:33:ea:a0:5e:df:60:
                    0b:8f:bf:00:56:a2:c4:d7:90:60:cc:51:81:cd:d7:
                    41:2b:93:b2:c8:9a:ef:aa:c8:a4:98:21:bc:f5:d5:
                    37:1f:61:8d:f5:80:d7:11:61:46:03:f6:aa:c2:32:
                    81:90:32:ca:a1:d8:33:2c:1b:64:f3:73:46:a8:ee:
                    de:f3:9c:bc:ce:90:13:f2:f2:9f:64:4d:ab:fa:61:
                    4a:5a:d2:21:7d:90:76:fc:72:30:1e:fb:88:04:5f:
                    7f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B6:54:FB:21:BD:B7:55:29:73:3B:4A:31:BC:0D:1E:B7:8F:D2:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/901886cf-46c8-3f56-8b1a-75f16d0f815b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.44.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:10:f1:05:7a:eb:46:b1:41:ee:ef:0a:45:cc:6a:b1:e7:f1:
         68:4b:15:09:a3:2b:00:41:31:2a:c0:28:cf:0c:97:30:79:3d:
         81:3a:ca:c3:53:b3:fe:ef:fa:c1:bb:a5:9c:e9:18:79:8c:66:
         93:86:dc:8f:ac:21:35:cd:ad:fb:52:fd:56:8b:d8:9f:1c:95:
         8b:f4:48:82:bc:ca:3b:2e:52:4f:64:cd:8b:d8:7e:1e:98:62:
         3f:c3:87:79:e1:ad:98:46:9e:7a:ec:f8:f6:c0:27:ff:a2:3a:
         c8:c0:4f:a7:4a:cb:24:e6:20:bd:34:b7:3a:cf:79:c2:42:03:
         3f:38:e4:6d:72:20:d3:b0:85:54:25:34:48:07:fe:72:6b:68:
         7d:8a:7b:ff:ee:c9:7d:6e:49:cb:3d:f2:4f:b2:68:b2:a1:aa:
         67:93:f7:ed:f5:60:e0:c0:2c:a5:1a:b8:13:f8:af:89:e7:5b:
         36:de:6b:d4:c9:17:51:04:c5:4c:99:2f:2f:cb:52:60:e8:4f:
         e5:83:22:59:e3:64:a0:67:f9:5d:c4:81:b2:50:3d:76:20:6f:
         ed:44:32:12:f2:d1:4b:93:57:2f:89:71:2d:93:34:c8:d6:2b:
         4e:f3:25:10:a3:bc:c4:16:c3:71:6f:61:55:b3:f2:58:55:87:
         77:73:85:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----