Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/986308ff-8dfc-3a48-86d2-de0c54d2217b.roa
File:                     986308ff-8dfc-3a48-86d2-de0c54d2217b.roa (raw, json)
Hash identifier:          4SvIoRjXjlgO4jAQkXSVrGEYzBPt9+SnKMDkGT0FdFU=
Subject key identifier:   8A:67:0A:34:4A:E9:A4:25:BD:36:18:63:3F:2F:76:CC:A5:88:2A:AB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6876BED311401CF5A5280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/986308ff-8dfc-3a48-86d2-de0c54d2217b.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        73.228.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:87:6b:ed:31:14:01:cf:5a:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=eee8360c-432d-47ec-be13-7bc21dbdb216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ea:59:a5:93:52:94:a9:25:18:15:29:19:fd:
                    ae:0b:75:3b:b2:42:83:4d:ee:cc:63:79:49:b1:7d:
                    3c:da:02:77:95:08:90:e4:c3:cc:08:8c:51:12:51:
                    73:12:7d:97:11:a4:9f:93:06:d7:e7:be:09:b6:ab:
                    9c:40:c2:0c:66:a1:0f:92:aa:f3:85:10:87:ab:ec:
                    80:6d:a6:cc:16:ab:a7:44:45:86:23:e7:ef:c2:48:
                    94:77:9f:30:c0:f2:b5:4e:20:cb:2a:87:55:dc:e0:
                    8e:3f:3e:5d:f6:99:79:53:ec:c6:74:63:06:62:38:
                    60:94:cc:70:4a:29:52:bc:cd:df:d2:d2:27:df:6d:
                    27:17:20:35:ae:68:ef:86:1f:db:74:79:38:e3:b4:
                    27:22:5d:ee:31:d9:c0:05:48:1c:d8:96:a4:7b:f0:
                    11:79:65:1a:a6:d1:fa:dc:fe:dd:34:f9:3f:2c:90:
                    81:7c:7b:45:13:2d:ea:ab:b4:ae:16:87:7f:c5:7d:
                    03:68:a5:7b:8a:03:15:ae:0f:4b:29:18:69:46:77:
                    d9:64:ce:10:22:d8:07:09:8a:51:5f:17:60:8a:21:
                    a5:be:d7:3a:a4:d7:88:5d:5a:24:00:e9:17:97:6e:
                    65:e6:87:da:07:d6:ba:83:5a:44:23:76:21:cd:77:
                    e4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:67:0A:34:4A:E9:A4:25:BD:36:18:63:3F:2F:76:CC:A5:88:2A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/986308ff-8dfc-3a48-86d2-de0c54d2217b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.228.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:31:4c:69:a7:84:32:0b:c6:ae:93:57:a2:2a:9b:9e:e5:63:
         7a:00:3c:c7:9a:71:e9:df:32:13:72:54:f9:d1:1e:de:15:44:
         11:8b:83:e1:b2:8c:01:69:69:61:fa:3a:9e:04:a8:60:9a:96:
         7a:60:0a:6f:42:5b:ee:9c:08:1f:33:ae:76:3b:39:23:f7:67:
         ea:6c:98:67:51:99:b5:a1:81:91:20:dc:5d:7f:dd:fb:5c:ba:
         38:4e:3d:de:cc:36:72:bb:af:56:4d:25:f9:e8:23:95:f7:b0:
         e8:e9:0f:5a:49:b7:69:e8:44:c8:ed:f6:53:00:87:4d:b3:96:
         b9:6b:e6:d3:e9:db:55:9e:cb:ca:e0:ef:47:f6:f5:fa:95:c4:
         fc:80:07:13:75:b6:38:ef:cd:7a:a0:1c:8d:68:b1:8c:ca:bd:
         f1:c3:f1:c9:69:c4:09:8b:f7:90:f6:90:24:7e:d2:53:2e:ee:
         6b:1c:63:8b:4f:61:8c:68:7b:bf:9c:ba:c9:31:5c:81:b6:63:
         a6:42:cb:d2:6e:b7:cb:dc:78:0c:6a:a8:5b:80:b5:01:4b:81:
         fa:5e:e9:36:a6:c2:b5:4f:ce:39:37:06:eb:60:b8:29:64:93:
         23:f1:24:3c:90:28:69:58:65:ec:cb:57:a9:a1:51:0c:d1:6d:
         a4:01:ef:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----