Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6c3a2b0-eb1c-3d1e-b6e9-c4bf92672f9e.roa
File:                     e6c3a2b0-eb1c-3d1e-b6e9-c4bf92672f9e.roa (raw, json)
Hash identifier:          B4pNOQA0i16KevzI5cKxkwvYW3Qjq1QSAzsRpyilaOE=
Subject key identifier:   4E:0D:61:CA:E4:CB:DB:88:90:F2:C5:2F:15:24:43:48:A5:00:EE:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA64E015BCAF0A2F1F08398
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6c3a2b0-eb1c-3d1e-b6e9-c4bf92672f9e.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33667
IP address blocks:        73.12.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:4e:01:5b:ca:f0:a2:f1:f0:83:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=9ad348cd-d2a5-4ce6-8481-cbb748f8baf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ce:55:7f:a5:7e:eb:9a:52:30:48:98:f9:5f:
                    e7:78:34:4f:a3:78:fd:91:9e:1c:eb:86:fb:a7:c5:
                    c2:88:96:8d:8c:df:de:1e:41:ee:40:ee:08:be:a0:
                    6a:4e:cc:b8:de:75:79:a8:c4:25:68:3d:ba:c3:5e:
                    9b:b5:a1:b5:c2:f2:be:7f:75:de:8a:64:9b:4c:f0:
                    9f:ff:41:7d:57:a2:d0:5b:63:18:c3:bc:67:de:5f:
                    33:df:d7:6f:87:4a:81:01:45:e3:9e:5a:8f:34:56:
                    07:16:9a:6c:02:d8:35:2d:ac:67:02:4a:ed:92:46:
                    60:1c:be:e1:f3:1b:b8:15:bc:6c:d7:e6:35:a4:77:
                    98:20:ea:10:1b:43:96:0c:03:22:37:71:30:a8:5e:
                    cb:93:b9:6f:67:d5:76:ca:8f:c1:ee:d7:58:79:70:
                    76:9b:16:af:3b:9f:56:78:a0:18:c2:82:cc:5c:48:
                    9a:74:6b:e1:c4:a3:a1:f6:40:7d:c5:2a:2c:ba:b3:
                    fa:f1:99:89:d2:82:9d:4d:49:5e:48:05:73:d8:75:
                    ac:71:90:58:30:fd:bd:f7:a4:4c:29:e9:88:b1:08:
                    91:22:db:55:c6:98:93:25:8c:13:6f:44:5a:f7:8d:
                    58:15:a4:11:9c:17:07:08:3a:01:48:25:16:5f:2c:
                    f0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0D:61:CA:E4:CB:DB:88:90:F2:C5:2F:15:24:43:48:A5:00:EE:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6c3a2b0-eb1c-3d1e-b6e9-c4bf92672f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.12.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:15:3a:68:a9:5c:42:0a:77:dc:5e:a9:76:09:fa:b9:48:8a:
         58:aa:37:c4:b9:ea:b9:9d:92:eb:1d:d8:83:2c:c6:62:c6:08:
         01:f9:92:b9:66:dc:78:83:ff:df:8a:40:01:a8:40:3d:de:25:
         12:71:5f:07:3a:3c:47:ba:a2:a4:58:3c:36:1d:f7:10:32:fd:
         30:fa:15:e5:d9:6f:e2:27:71:a8:ef:b5:c4:10:ea:58:a0:22:
         a0:e0:c5:c7:4f:22:22:10:6d:16:6b:4a:ee:3b:eb:6f:3e:44:
         b1:9e:fc:90:40:ad:e3:35:0b:f3:b7:b4:7d:57:f5:01:57:69:
         03:a6:71:f0:54:ee:23:2f:4a:6c:94:0f:4d:9a:81:2b:69:52:
         2b:9c:59:e2:31:e8:39:86:f2:5c:2a:1a:74:ca:ae:b5:77:38:
         dd:c5:83:2f:4a:35:b5:dd:55:6c:90:54:34:c9:81:af:5a:1b:
         f8:83:fd:df:bb:82:f4:c9:cd:82:d7:19:ba:6c:08:77:06:a0:
         6d:42:df:b0:88:cc:6e:96:4b:b7:b1:6f:51:a3:90:dc:7f:b6:
         70:e1:82:ee:3a:58:a5:31:eb:5b:ed:4f:be:ec:c8:57:c5:a0:
         c5:5f:f1:dc:90:6c:3e:90:b6:95:fb:67:24:b8:44:5b:e0:38:
         14:73:bf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----