Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06569f3d-dfd3-3134-b1c5-7d4415ff9030.roa
File:                     06569f3d-dfd3-3134-b1c5-7d4415ff9030.roa (raw, json)
Hash identifier:          IoGLPdlN19d1tL22+p7+szOlP3ePnWWnJ5K2LkRwTEc=
Subject key identifier:   09:91:40:87:A0:A3:20:7C:DD:86:F6:F5:14:EF:CF:A7:58:D5:40:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C11E9482D5038137DB46280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06569f3d-dfd3-3134-b1c5-7d4415ff9030.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33660
IP address blocks:        98.33.244.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:e9:48:2d:50:38:13:7d:b4:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=fac86658-8076-460c-95fe-25a83d85f55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:aa:fb:c8:3c:99:22:b7:8d:fa:29:ff:1f:16:
                    a4:b2:a7:41:c7:3f:99:22:41:5a:e1:ab:eb:3d:60:
                    82:9a:f5:a8:bd:8a:20:1c:36:0f:a2:65:fb:32:fc:
                    63:eb:95:81:b1:f4:4c:6c:77:01:bd:2e:72:ae:d5:
                    9c:f2:57:31:c2:7d:40:e4:31:dc:0e:df:da:cd:58:
                    4c:f8:06:72:5e:00:6d:b8:15:24:c4:a2:89:b6:d3:
                    b7:8b:a8:8f:9e:44:77:33:c0:4e:e0:e2:97:92:a8:
                    6d:f7:55:54:72:11:36:3b:f5:ab:d8:5e:c3:0c:60:
                    49:7f:11:61:72:6c:db:66:fa:54:76:8e:bc:51:bc:
                    87:37:7f:49:94:23:2f:c3:9a:53:25:c1:e0:11:45:
                    3e:34:0b:42:a3:f2:5e:2b:c2:17:fc:8e:20:04:02:
                    ba:67:7c:9e:bc:9f:15:e2:ad:d2:f9:99:59:3f:bc:
                    97:01:fb:0b:91:1b:ea:64:32:e2:86:1a:d1:3b:67:
                    04:27:6b:4c:f9:c5:d0:c4:32:06:01:a4:10:e0:21:
                    8c:25:52:39:29:9d:08:40:4f:d5:37:4f:6d:99:4f:
                    89:8a:ad:58:c6:37:e8:09:11:3f:2b:b1:87:f8:91:
                    e8:9a:10:2f:86:80:a5:78:05:81:ce:7f:7a:61:77:
                    01:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:91:40:87:A0:A3:20:7C:DD:86:F6:F5:14:EF:CF:A7:58:D5:40:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06569f3d-dfd3-3134-b1c5-7d4415ff9030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.33.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:cd:c8:07:4e:b2:c3:64:2b:6e:9f:eb:66:d4:c1:e8:1d:a9:
         f6:73:60:30:e2:65:74:0f:8f:a6:63:fc:ec:6b:4c:0b:5b:64:
         bc:24:71:ae:76:3d:fe:d1:87:ac:f9:d4:b8:cd:b7:7b:64:fa:
         3c:11:83:00:d6:5e:19:d3:02:71:f6:17:1c:91:1a:ac:a4:fb:
         e0:7a:02:76:71:56:f7:19:d5:73:2e:a7:47:7d:a8:96:03:0f:
         87:1c:be:ec:cd:f3:b6:94:c3:ee:b3:fb:62:16:01:4e:8f:dc:
         39:fb:81:fd:ce:92:2a:4a:fd:03:27:a2:f2:ac:dc:4a:6b:90:
         06:aa:b7:6f:5b:32:03:aa:1c:a2:af:f7:fc:e3:50:94:fa:5a:
         b1:61:81:0c:98:a3:f1:60:3e:cf:5e:2c:31:14:25:dc:ac:b1:
         04:7d:8a:03:0b:03:4f:ee:b4:3d:59:cd:60:e5:70:bb:93:1a:
         1c:0c:52:cd:d7:1e:91:b7:71:94:73:b7:01:01:d0:de:c8:70:
         f0:f2:1f:74:b5:3e:33:ca:e7:68:09:dc:be:1e:00:11:46:16:
         1e:37:b3:68:79:33:05:d1:3b:b1:54:9f:08:02:a8:9a:01:85:
         a3:c4:8e:8a:ea:93:78:30:45:f7:fe:21:69:ed:ae:8e:b7:1f:
         ad:20:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:07 2025 by rpki-client