Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/326fdc1c-34e8-30c5-8269-15b71eeb8c10.roa
File:                     326fdc1c-34e8-30c5-8269-15b71eeb8c10.roa (raw, json)
Hash identifier:          VwCH8o1r63CrS0XDi3faHOOjQsKRSXL5gmDfKo5ZJLI=
Subject key identifier:   9D:ED:A5:A6:61:11:8A:4F:D0:1D:00:4D:EC:F6:66:15:5D:88:6A:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C12F84E0C511A60AF8480E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/326fdc1c-34e8-30c5-8269-15b71eeb8c10.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        76.150.56.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:f8:4e:0c:51:1a:60:af:84:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=191f3ab1-bff7-4267-a6be-fb1822cef616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:90:16:17:e6:bd:aa:f4:c7:fd:57:e5:cf:de:
                    58:40:1e:c5:31:33:ed:78:6e:8c:a6:f1:f0:5b:1c:
                    8d:48:21:8d:c5:ce:9a:59:95:45:d6:47:09:d6:3d:
                    dd:33:a6:b1:6f:de:19:fc:79:95:f8:83:7b:65:0d:
                    15:6a:ee:67:41:63:5d:ec:94:8a:04:c9:da:ab:0d:
                    05:24:f1:48:16:fb:02:f1:d6:52:f1:17:69:99:f3:
                    c2:7f:8b:76:91:d0:a9:e2:51:18:3f:ec:25:41:7d:
                    3d:2c:16:ca:94:f1:4b:c5:e9:df:74:66:58:c8:c1:
                    a1:42:c2:1a:34:70:96:ef:d9:5a:cb:36:fb:1a:aa:
                    ae:0c:b2:e6:7b:56:67:9b:96:5c:a5:e3:34:0d:6a:
                    0a:f2:1a:d3:a3:2d:5e:a7:69:1b:62:01:60:9c:b1:
                    34:da:17:68:61:64:63:23:ad:6b:08:3e:c7:93:a1:
                    39:cc:95:3b:cb:62:12:b6:ca:0e:5a:2d:92:33:5f:
                    c8:ed:6a:c0:18:86:d5:f1:b1:1b:84:be:f7:d5:6b:
                    6c:58:c4:ca:e7:86:70:92:fd:65:47:09:e3:7a:13:
                    fe:38:25:1b:36:8c:22:74:4b:6d:f1:53:ea:8c:b5:
                    8e:e7:81:83:ad:d7:dd:12:c8:81:b6:4e:6a:cf:33:
                    74:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:ED:A5:A6:61:11:8A:4F:D0:1D:00:4D:EC:F6:66:15:5D:88:6A:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/326fdc1c-34e8-30c5-8269-15b71eeb8c10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.150.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:95:ee:e7:25:a4:88:be:68:b7:5a:72:68:e2:00:aa:01:ba:
         89:26:a4:cf:6d:78:57:3e:99:6e:79:75:d5:61:60:be:b6:2e:
         f8:a9:56:22:f6:b6:33:1f:bd:7b:db:5f:cd:a6:07:7f:ba:3e:
         6b:8c:7b:b5:4c:ca:09:03:de:33:b0:68:67:7d:ca:a2:ff:89:
         d5:c6:8f:bf:5d:52:10:b4:d4:5b:31:20:94:f8:35:d4:b5:49:
         46:2a:f1:21:43:15:d8:a9:1f:7f:86:3f:61:28:fd:56:c7:9b:
         96:78:ef:76:17:24:cc:95:65:de:bb:ff:72:89:77:55:6c:7d:
         7d:aa:e5:e7:ea:7e:91:e3:ed:ea:19:05:74:3a:22:ac:90:81:
         d6:aa:3e:ea:ab:46:86:b0:b1:e5:29:04:66:6d:d5:aa:ad:f7:
         e4:87:12:e4:24:ad:7e:8d:83:c6:83:2b:e1:6e:34:38:50:37:
         8d:8c:dc:ba:9b:00:2c:64:36:ff:ad:e9:cc:2c:c6:4d:3c:61:
         35:7c:34:75:63:aa:e8:16:43:78:af:91:e6:b4:e5:61:16:c5:
         5b:5d:83:b2:ab:b5:fb:8e:ff:a6:e3:e4:45:5f:fb:77:80:8c:
         c3:bc:dd:eb:2b:cd:06:77:9d:8c:38:09:0b:6c:8f:d2:1d:58:
         fd:11:91:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:54:53 2025 by rpki-client