Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6f65e9f-71b0-3203-a7bc-37713f620be1.roa
File:                     f6f65e9f-71b0-3203-a7bc-37713f620be1.roa (raw, json)
Hash identifier:          Lq0jKPlbLqfpwUXYZYoDLQqDKqqI11SMLeLmzW4ZUZQ=
Subject key identifier:   63:9C:D0:87:06:61:BD:80:8B:BC:9A:67:3A:A2:D1:39:9C:7C:7A:DB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0A6B2132C9C9F93811B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6f65e9f-71b0-3203-a7bc-37713f620be1.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        73.188.144.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:a6:b2:13:2c:9c:9f:93:81:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=51f24467-fb6a-4a82-8631-cb5c889277e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8e:1d:8c:de:c1:e4:c4:14:bd:a3:f1:be:4d:
                    95:83:0c:16:7c:aa:eb:3d:36:37:4a:52:ba:ee:56:
                    f6:78:08:e6:25:ad:c3:8d:10:11:1d:6c:d7:7c:36:
                    af:80:e7:0b:d1:52:ee:f1:ec:60:08:96:a9:2f:f0:
                    32:94:a1:e5:cb:f1:05:03:b0:c1:71:87:44:77:5f:
                    08:3c:22:42:5d:bf:c1:17:3d:57:f3:7a:89:d1:de:
                    e7:cc:07:50:2b:df:bf:92:e1:c1:1c:ba:a3:ed:66:
                    d0:fd:69:46:23:93:69:fb:b8:37:5f:23:30:b9:bc:
                    0c:2b:ec:39:ab:94:04:bf:1e:36:92:c8:15:65:95:
                    13:40:fa:20:50:48:8e:b7:70:c7:73:f4:59:d6:4a:
                    98:9e:38:76:fc:1d:8f:43:6c:18:7e:fa:ae:ea:5c:
                    5c:ff:10:ac:04:ba:6b:a3:f6:af:3e:4f:a6:b4:be:
                    de:c4:74:02:c8:c9:a1:e3:51:6c:f3:8e:05:04:8c:
                    a6:fc:cd:bc:fa:fe:d0:05:b2:ff:45:f0:37:b6:08:
                    df:5d:51:27:19:75:ae:6a:65:1c:af:49:ed:18:e9:
                    c2:91:33:48:d2:dd:d7:07:fa:d0:16:67:5b:09:24:
                    17:65:12:e6:75:f4:4c:a1:ca:fe:ef:8b:92:d8:4a:
                    38:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9C:D0:87:06:61:BD:80:8B:BC:9A:67:3A:A2:D1:39:9C:7C:7A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6f65e9f-71b0-3203-a7bc-37713f620be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.188.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f4:53:d0:0f:12:ba:9f:ae:5c:f7:93:c3:d0:28:69:5b:28:
         fb:84:c6:bb:01:d4:25:b7:d7:02:43:90:2c:84:fb:1a:17:4a:
         c3:ad:70:47:c8:cc:50:9b:80:cb:96:b2:de:17:0d:5f:5f:b3:
         5f:55:02:36:6c:8a:2c:e4:a9:32:63:a9:7b:75:0b:a4:8a:e1:
         e4:69:37:9d:2a:33:8f:49:54:7c:6f:73:2b:6f:eb:a8:09:4a:
         05:b1:23:9d:d9:6e:8d:44:4c:4d:2f:0e:d4:a2:87:7a:90:ac:
         d2:5d:b5:8d:9d:8b:a6:d9:42:ca:4e:c8:84:29:f2:71:16:65:
         3a:7d:68:46:98:70:74:d8:2a:50:14:34:08:9e:7d:b9:39:4f:
         f2:41:fa:ae:df:62:0e:39:28:23:e3:19:e9:2f:19:e3:d9:ad:
         82:79:01:85:52:d5:a8:b5:81:ad:be:01:5f:d1:dd:fd:f6:b0:
         2a:1b:09:a7:fe:3b:08:9a:02:0c:c0:e6:8c:6d:83:dc:22:54:
         e3:ab:18:c8:a7:7e:f0:4d:61:c8:e8:d5:bd:9b:5d:6b:59:8d:
         97:3c:00:a3:14:b4:46:85:54:28:80:fb:1a:3d:18:ea:c5:b5:
         fc:5e:c6:55:66:05:4f:9f:c4:13:72:e9:85:bf:4d:1a:64:cd:
         0e:46:b9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----