Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dffc0b13-355d-38d3-8cb3-79b63bba134d.roa
File:                     dffc0b13-355d-38d3-8cb3-79b63bba134d.roa (raw, json)
Hash identifier:          tKKnDkpQDBwOGV27OjV9BtyhInhRwFwGrHRWEXlU+1g=
Subject key identifier:   33:E3:17:E1:26:65:9D:88:FD:1D:38:9E:FC:54:88:F8:B4:2F:1E:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA65D082767E74B988FF080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dffc0b13-355d-38d3-8cb3-79b63bba134d.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.238.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:5d:08:27:67:e7:4b:98:8f:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=ddc120b8-bf17-456c-bd10-5930730bc8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5a:f1:77:89:8c:e7:e9:6b:bd:5f:93:18:3a:
                    a4:8f:56:59:f3:e1:81:5a:4a:e6:96:96:35:f0:39:
                    c2:95:78:68:c8:66:13:19:05:f8:65:16:21:7f:e4:
                    9b:b2:41:11:f3:b9:70:dd:fb:0b:26:0b:b4:95:fc:
                    8b:ea:64:15:16:83:ae:22:3e:15:df:9c:a2:6b:47:
                    b1:13:1c:d0:74:a3:79:a2:30:0b:c4:0f:40:c1:3e:
                    b6:d1:27:5b:68:2c:46:cf:13:d9:8c:c7:0e:48:6f:
                    62:30:c3:0e:8a:66:27:c4:91:dc:b7:2d:df:8c:58:
                    7c:8b:fc:fe:0b:9a:50:a2:9b:9d:de:c2:20:17:96:
                    a8:56:a2:6e:67:5c:13:8e:85:83:2f:d1:5c:78:3c:
                    5c:f1:ab:65:3f:a9:00:cc:41:18:af:9a:14:68:9d:
                    fb:ef:28:d0:ac:d3:ec:40:e8:84:ed:89:a9:c6:35:
                    52:13:29:86:81:40:ff:53:40:fc:e9:2e:ba:a2:cc:
                    b6:89:f9:e3:d9:14:2e:d1:30:c6:9a:a2:e1:20:4b:
                    46:da:ef:7f:1e:5b:76:8f:1b:13:9f:57:81:8d:4a:
                    5d:aa:02:2f:f7:4c:b2:86:f4:6a:2a:e2:6a:6b:dc:
                    80:fc:65:14:07:d0:43:79:d8:51:c1:fa:4a:e5:0a:
                    83:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E3:17:E1:26:65:9D:88:FD:1D:38:9E:FC:54:88:F8:B4:2F:1E:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dffc0b13-355d-38d3-8cb3-79b63bba134d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.238.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:17:92:70:09:eb:55:6d:f3:1c:00:6a:ce:3f:26:d5:3e:8e:
         1a:bb:73:de:91:f0:17:7a:4c:5f:e6:8a:70:c9:03:14:59:f1:
         c1:f2:4b:f4:ef:6c:4e:c5:2a:aa:1d:e2:f1:2b:c1:96:a3:60:
         82:d3:b6:e3:3b:7b:2c:7d:23:cb:4a:11:64:50:1d:52:3c:48:
         4d:69:d3:96:7d:4c:54:83:3c:c4:b3:14:ee:1d:41:6a:fb:b9:
         d3:ce:90:df:a0:89:4a:4c:3e:0c:08:66:50:38:3b:e4:88:13:
         e4:1a:42:32:64:71:80:65:c9:39:ad:1a:2f:f3:30:3a:dc:f1:
         1a:19:40:b8:4e:62:e3:b7:0c:f4:5a:42:6a:eb:d8:4f:d0:ef:
         e9:73:c0:ef:90:4b:96:29:5c:5d:97:64:cf:27:0a:ad:eb:a6:
         7f:14:ee:3b:73:37:e8:11:45:01:3d:7d:51:75:97:ee:b5:be:
         bf:41:b3:a9:6d:e9:15:a9:3d:db:b5:58:77:f6:1f:6a:d8:28:
         f6:0f:25:3f:6c:b6:21:2d:0c:b7:57:2c:3f:bb:fb:6f:16:1c:
         ad:85:af:a5:f0:2e:ce:5f:ab:9a:9a:9b:5d:fc:58:07:bc:96:
         ec:94:50:15:e6:ac:3e:9f:37:42:54:f8:4a:e3:b9:96:87:06:
         70:45:aa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----