Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27a3e653-fb11-3f9e-bbb3-6d0a010b3ec9.roa
File:                     27a3e653-fb11-3f9e-bbb3-6d0a010b3ec9.roa (raw, json)
Hash identifier:          RyEycXJkZb+NK9dltr0f624OD78zd/OAZmcQMYMEPxA=
Subject key identifier:   9D:AB:E9:7E:2F:1A:B0:D5:F5:2E:38:5C:78:23:98:DF:0B:E6:96:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C11CB9DD9CC2D4106183E6A
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27a3e653-fb11-3f9e-bbb3-6d0a010b3ec9.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        98.51.160.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:cb:9d:d9:cc:2d:41:06:18:3e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=a9251e60-79fb-4e0e-acc2-31eec1814333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:05:aa:e5:9c:f9:e3:11:ca:8b:14:61:20:86:
                    b9:a4:68:9d:1c:ef:26:c3:42:8e:fa:37:85:e7:e5:
                    9c:f1:fc:68:4d:df:6b:6b:ae:6a:a8:b9:5b:99:30:
                    62:c6:da:cd:4e:43:7b:f7:8a:29:8e:5a:17:d8:21:
                    10:54:e4:c2:19:e1:9a:2e:d4:be:f5:79:73:a1:a6:
                    63:9d:72:5f:47:55:9a:a4:78:2f:56:0c:e6:af:4f:
                    06:e0:2f:f8:88:e3:8a:8b:82:c0:9f:40:ac:f3:25:
                    48:e5:4c:cd:87:ac:4d:98:e6:a0:ce:1a:64:7b:7a:
                    43:be:3a:e0:b4:5d:d6:84:11:15:ad:ca:fd:cf:fb:
                    32:b2:c3:fd:5e:8d:40:86:ba:7e:84:4a:11:13:e7:
                    3c:be:09:30:ee:b3:77:fa:fc:b6:72:71:e3:c2:33:
                    cd:25:39:83:80:45:64:2a:65:cd:93:42:4c:8f:64:
                    d6:ba:7f:0b:93:6b:08:22:06:f4:48:56:4d:e2:16:
                    cb:fc:53:90:b5:aa:cf:7c:f8:8a:56:21:e8:9a:e1:
                    ba:f0:7b:1d:0c:df:94:4c:cb:9d:c3:f1:e8:cc:d3:
                    c0:eb:c6:e2:3b:0e:34:d1:d2:47:5c:7c:cb:b5:9d:
                    32:67:df:a9:fd:30:f3:a4:09:4e:e0:93:0a:91:23:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AB:E9:7E:2F:1A:B0:D5:F5:2E:38:5C:78:23:98:DF:0B:E6:96:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27a3e653-fb11-3f9e-bbb3-6d0a010b3ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.51.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:33:4f:2b:45:94:be:3f:68:54:73:c5:3b:fd:79:0e:bc:f3:
         76:9c:f6:7f:08:07:87:3e:81:4b:12:36:c5:56:0d:79:e2:18:
         03:fd:99:85:cd:75:8c:5a:af:16:d4:15:32:33:62:85:03:fb:
         87:d5:86:e6:81:a4:87:23:03:98:d4:2f:b0:09:2f:9d:ce:cb:
         bd:a0:16:24:81:42:cd:1b:0b:49:e2:61:29:cc:a2:11:35:5e:
         c4:24:90:c3:e4:55:38:7a:18:01:ee:02:65:86:f4:e5:f4:c4:
         bc:61:e3:ec:98:7e:d1:88:49:51:f0:4d:14:5b:ce:35:d7:a8:
         d2:f3:61:2a:45:cd:f0:e7:7b:3f:dc:c2:82:fa:d5:20:70:ee:
         58:7a:53:5a:41:37:8e:01:91:19:1f:a2:76:30:d9:88:67:2e:
         92:61:18:a1:cd:e1:0a:94:84:19:c2:31:b9:9e:38:e1:32:8c:
         65:fc:d4:8a:be:b5:1e:c3:8a:92:85:a6:81:22:24:c4:cb:12:
         92:36:fb:75:8e:d6:52:1f:5f:51:90:d4:b4:55:73:b3:b7:68:
         65:6f:b4:29:ba:61:a7:45:4f:da:bd:c0:ea:2f:65:0a:98:93:
         fd:6c:77:d1:c9:4a:cf:fd:e3:89:6e:ab:0b:55:97:39:7e:eb:
         64:06:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:52:38 2025 by rpki-client