Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15378865-f84d-34a0-8a40-31892ca1713d.roa
File:                     15378865-f84d-34a0-8a40-31892ca1713d.roa (raw, json)
Hash identifier:          oQNZqST4uIgiE326+IkXnPkhq0IjvdEcFD76abahyeo=
Subject key identifier:   AF:0D:D2:14:7B:67:B3:5D:2A:6A:61:5A:0C:9B:4A:DA:43:63:0A:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C134B63F2251A109D19BC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15378865-f84d-34a0-8a40-31892ca1713d.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        24.5.28.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:13:4b:63:f2:25:1a:10:9d:19:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=0f2dbe5a-6e47-4b5d-adba-0b6adb4020cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:7e:aa:5e:a0:fe:4e:e7:db:80:fd:14:d3:
                    42:89:c3:70:78:2b:46:dc:2c:d1:74:a2:71:01:d5:
                    aa:78:ba:3c:63:1e:50:96:b9:79:2f:ad:13:e9:86:
                    af:14:8b:03:21:4e:f6:30:d5:a4:05:34:dc:6c:54:
                    77:51:7f:a4:3a:5b:e5:18:2e:35:9e:11:42:c5:3b:
                    f8:d6:e2:69:0e:d9:36:3e:5e:cc:b6:c2:38:88:ed:
                    70:46:44:6d:63:1f:ce:14:54:0c:73:7c:3f:4a:85:
                    61:11:6c:31:9d:e1:28:c0:e4:aa:f4:c6:ab:40:94:
                    73:23:70:9c:6e:02:a2:13:00:34:8a:8b:16:ec:d8:
                    1f:59:be:56:9c:76:fb:4a:89:90:8b:4a:16:f2:66:
                    17:95:0d:da:98:97:79:f3:84:45:ee:68:98:ed:82:
                    65:69:65:68:d9:66:3a:c6:2f:7a:ff:df:a4:86:3d:
                    74:53:59:8c:f2:02:84:59:76:98:9c:d0:e2:98:d8:
                    1e:72:de:00:13:ee:be:3d:9a:c9:e6:ac:c5:80:22:
                    1f:b7:ee:06:a6:5d:b5:af:31:ed:b8:5c:c5:c7:71:
                    a2:39:30:76:6a:2d:62:95:16:f1:c7:15:48:c2:05:
                    80:88:05:66:98:f4:4c:55:b8:43:5c:57:cc:01:00:
                    b9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0D:D2:14:7B:67:B3:5D:2A:6A:61:5A:0C:9B:4A:DA:43:63:0A:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15378865-f84d-34a0-8a40-31892ca1713d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.5.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:35:6a:72:db:5f:82:19:85:94:3a:c8:b3:d0:b7:6d:1d:3a:
         df:4b:c5:7b:0a:16:9b:ce:92:8c:7d:d8:83:21:04:30:1f:4f:
         81:f4:30:61:df:72:e5:8e:64:af:b9:cb:83:1b:15:47:f8:21:
         e2:d6:f3:b5:cc:f2:dc:6e:01:bd:39:09:7a:38:d4:fe:66:51:
         6b:c1:73:89:f6:6f:ff:53:2c:5a:07:7f:89:df:6c:14:b1:b3:
         0a:cf:d2:13:32:73:81:f7:18:de:ef:26:5d:bc:c3:55:f2:b1:
         07:ad:64:a9:e5:90:a8:5e:cb:31:f0:bd:2e:7b:1b:11:a6:26:
         55:74:39:89:46:82:c5:8b:1a:9e:0f:b8:39:d4:70:86:21:20:
         3b:49:db:6e:a5:74:c4:46:ed:45:bc:a2:53:25:0c:83:2f:e1:
         8e:a1:43:32:ff:4d:1b:39:53:4c:1d:b1:a3:f5:b9:dd:9d:36:
         6a:47:d0:5e:b1:a4:2a:6d:e2:37:71:b8:67:57:e4:33:8b:3a:
         b6:9e:24:af:80:2a:28:38:7e:61:4b:fe:eb:de:78:4d:88:1a:
         13:33:a0:71:b7:69:ca:68:ed:fa:19:a5:30:d9:7f:47:f1:24:
         86:38:29:6e:a7:69:93:15:bc:1c:90:c6:50:c6:11:f2:f6:b5:
         f0:dd:46:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:14 2025 by rpki-client