Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03d9972a-3f56-37ef-973a-b27a99fd0ccc.roa
File:                     03d9972a-3f56-37ef-973a-b27a99fd0ccc.roa (raw, json)
Hash identifier:          a4w581oUyAbp0ZKG9fx+E6C5PoFzR0qCPNBJcBb/Dwo=
Subject key identifier:   D9:3E:57:D6:AB:D5:07:84:C7:21:77:B8:DF:52:E6:31:2C:EC:94:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1167DFD700538A73E8B780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03d9972a-3f56-37ef-973a-b27a99fd0ccc.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        98.253.104.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:67:df:d7:00:53:8a:73:e8:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=77c31e93-cc9c-4e0c-97bd-4f6d5332503c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:af:b7:ba:b0:34:12:40:ff:ed:79:13:22:
                    cb:65:5d:5e:29:b9:cd:60:c9:36:69:43:47:17:a5:
                    28:40:cc:90:20:5e:db:35:c9:5d:21:fb:b7:32:fd:
                    97:f5:ad:fe:cb:8b:3f:2c:45:1f:84:18:09:8d:57:
                    22:0e:82:b8:33:dc:cb:19:9c:68:d1:0b:e8:8b:09:
                    00:35:21:14:e5:16:d2:c0:66:93:46:64:66:53:65:
                    e5:05:7e:25:33:0f:f9:33:13:ed:c2:81:d0:ee:24:
                    eb:15:cd:0a:a6:29:a9:65:a1:dd:17:4b:de:33:a6:
                    33:96:6e:dc:fc:89:f9:c8:a3:00:e3:53:7e:f0:2f:
                    35:af:4e:5c:d6:80:bb:1b:24:f4:b8:bd:a5:14:86:
                    fd:e9:19:1f:a2:60:fd:36:d6:69:cb:45:5e:84:ed:
                    3a:40:87:ce:1e:76:28:7e:0a:4e:56:74:52:78:81:
                    5c:68:9f:de:8f:72:8f:41:de:7f:d8:59:a2:ca:50:
                    e3:ac:39:7f:de:3d:ec:ed:44:0c:4a:75:1b:ff:a0:
                    56:ab:27:7f:b1:08:e0:0f:1d:42:da:89:45:c7:f4:
                    23:0e:55:b7:db:3c:9f:fd:a1:26:e1:95:9f:6f:46:
                    f8:37:a6:ce:d6:18:ad:ea:b0:27:91:13:2f:b5:ab:
                    ba:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3E:57:D6:AB:D5:07:84:C7:21:77:B8:DF:52:E6:31:2C:EC:94:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03d9972a-3f56-37ef-973a-b27a99fd0ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.253.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:e4:4c:45:7d:26:a4:8d:84:99:66:82:05:b6:f7:cd:1d:c9:
         c2:56:2b:3a:b0:7e:ed:29:c4:6c:89:bf:21:30:e4:38:3b:b0:
         06:10:e0:4f:29:04:aa:c5:d7:85:e7:97:c6:57:bd:7a:e4:e2:
         36:35:6e:05:a7:db:2b:73:cd:f7:6f:da:da:0c:ca:92:60:7d:
         ae:0d:0e:dd:71:b2:7b:6a:ef:dc:bb:5e:f4:f5:a4:79:e5:73:
         6e:66:23:d9:82:b7:47:e4:bc:41:1e:2e:63:9a:aa:e4:53:ca:
         30:b8:97:cd:4d:86:f5:de:92:79:26:6d:9d:31:bc:fb:7c:fc:
         ca:29:a5:1d:d6:80:4b:33:8f:34:77:e4:8e:ab:ca:71:bb:d0:
         b5:cc:36:d4:91:d0:23:e2:ef:df:32:55:06:3c:89:42:78:6f:
         78:3e:2a:7d:64:9f:9a:90:e5:cc:79:78:db:3b:0e:c0:c2:cd:
         d4:2c:24:47:11:12:19:0f:dd:40:0c:ea:16:34:3e:b5:ce:ba:
         41:47:5e:07:82:3b:3c:88:9e:d0:3a:cb:5a:b4:49:52:93:b0:
         c4:a9:bc:13:84:43:21:e6:bd:b4:c4:2d:66:e0:19:8e:aa:39:
         cd:94:26:82:63:04:0b:18:05:b7:1d:65:68:d6:ff:fd:df:6e:
         64:4e:ec:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:51:02 2025 by rpki-client