Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3995f66a-4dfd-3361-82b4-7e6968b4bab9.roa
File:                     3995f66a-4dfd-3361-82b4-7e6968b4bab9.roa (raw, json)
Hash identifier:          t7Ds/GeDrlNkOIt/9S1LrD4Bx/W3Fp62l4a7mCxL/2c=
Subject key identifier:   FE:FB:48:AA:1E:18:E1:4D:4B:59:76:2A:61:3B:C2:19:6D:62:A9:FE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D877E6ED660F1D85727E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3995f66a-4dfd-3361-82b4-7e6968b4bab9.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33662
IP address blocks:        98.57.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:87:7e:6e:d6:60:f1:d8:57:27:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=75931eab-04d0-44c5-9dd0-2e83fbb9b390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:02:77:2b:11:a1:a8:fb:75:aa:2d:a4:a2:80:
                    71:64:cd:a8:91:79:1f:e9:42:f6:01:6c:ba:1f:9c:
                    55:43:6f:65:39:fc:6d:cb:95:02:ef:34:47:bf:d4:
                    8e:a1:8e:c7:b3:aa:93:bb:98:6d:f9:17:3e:a6:a3:
                    74:d1:08:a1:e7:ac:38:4a:51:1b:69:88:e0:29:8a:
                    1a:eb:0f:eb:90:5b:9b:3a:03:59:24:73:e4:c2:e9:
                    29:d9:55:c9:2a:d6:e4:3a:b6:00:d3:4e:02:03:c8:
                    8a:91:61:2b:6a:90:9a:35:6d:b0:3b:c5:f1:5e:6a:
                    76:34:82:e3:9f:5a:34:9e:c0:f0:4c:16:25:9e:fd:
                    61:42:c0:14:80:10:2d:87:dd:b7:da:d5:63:fc:10:
                    a3:e1:e6:8e:a8:25:ba:de:6e:45:e7:04:43:ed:28:
                    22:88:15:6d:b6:dc:c5:55:46:38:b0:75:7f:35:57:
                    da:35:09:e0:47:37:ed:df:e8:f1:08:bd:12:47:35:
                    0f:25:3a:35:75:80:2e:99:da:55:78:6a:56:28:0e:
                    e8:53:0e:0d:a9:5b:6f:67:66:37:0a:ec:40:f2:5c:
                    f4:92:bb:9d:5b:3a:47:f9:ff:44:14:40:48:f3:a1:
                    17:fc:c8:55:a3:f5:e8:63:00:2b:b1:29:34:a4:45:
                    ee:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FB:48:AA:1E:18:E1:4D:4B:59:76:2A:61:3B:C2:19:6D:62:A9:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3995f66a-4dfd-3361-82b4-7e6968b4bab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:bd:1b:11:ee:63:54:80:76:03:25:4d:69:ce:23:b6:e0:f4:
         46:9c:00:2b:62:d7:2c:8f:45:47:fb:3e:bc:39:6d:81:fd:a6:
         0a:df:d5:15:fd:36:3e:aa:0f:a9:0d:3e:40:25:ee:a4:e4:bc:
         85:f6:56:7e:62:11:5d:60:5b:90:3f:46:77:fc:05:69:d2:ee:
         8c:f3:e3:f7:af:c0:af:e4:61:95:b0:fd:a9:3b:59:d5:e1:9c:
         21:e6:27:d7:1a:ca:51:2e:23:0f:e4:b2:a2:1a:bd:e1:3f:ac:
         bc:46:e6:fb:f7:f9:49:59:ea:28:19:f8:cb:9d:58:32:dc:1c:
         a8:ae:5d:4f:06:7c:23:db:1b:83:a7:f0:a4:28:00:e9:c4:bb:
         b5:d4:db:ab:31:7b:e3:87:84:73:13:00:5a:89:f8:46:8d:fe:
         6e:69:18:70:aa:43:d7:52:a6:06:fb:98:51:1a:7d:1d:69:3a:
         89:5b:9f:61:b3:fe:a3:d2:29:b1:18:b9:02:b1:d7:03:ba:4d:
         93:b7:b8:83:40:1f:ce:ab:44:eb:e5:7e:90:cd:64:d6:cc:37:
         f3:a1:31:59:a7:dd:91:c4:58:59:c5:45:2d:88:0b:ca:8c:75:
         0c:3f:6f:9c:19:7f:04:73:d4:de:67:1d:0e:d8:8a:5a:a8:1e:
         25:1b:83:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----