Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b051d7e-a46d-3f3f-9aed-f479b6152ac7.roa
File:                     3b051d7e-a46d-3f3f-9aed-f479b6152ac7.roa (raw, json)
Hash identifier:          S6CFgBD2OzPy/gYKi+EQFqp+YNvp/i+D/VOYRjaT3+Y=
Subject key identifier:   A7:43:A9:EA:F8:CD:07:23:92:54:1F:A7:60:D9:7E:C5:0A:0D:3E:41
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143A9A8AC55F7556C5D19E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b051d7e-a46d-3f3f-9aed-f479b6152ac7.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33490
IP address blocks:        71.237.128.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:9a:8a:c5:5f:75:56:c5:d1:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=6972f7c8-78ab-4f17-a743-9dfd0e2ef96f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:45:c5:a1:a8:38:c8:d1:df:eb:0c:e9:e9:
                    54:e5:5f:07:da:e2:12:6d:a1:27:32:af:54:c2:7e:
                    06:57:45:ef:72:9d:ed:24:24:ae:4c:1d:f6:1a:85:
                    a3:8b:b7:e1:c7:c7:06:9d:b5:d6:f5:5e:75:f3:5f:
                    24:7d:9e:59:a6:65:aa:f2:5e:86:7f:a5:dd:b9:f8:
                    8b:85:fd:58:c6:14:6d:ba:c0:c5:6f:38:f4:2b:0c:
                    cd:3f:da:01:6d:28:1b:ca:22:ed:08:1e:57:8a:3c:
                    bd:85:39:43:ec:a8:67:d3:58:7c:34:7e:dd:45:6f:
                    1c:c7:d3:99:fe:b6:e7:6b:10:78:d9:4d:87:9a:8e:
                    9d:11:18:ce:cf:9c:1a:09:a4:a4:be:4a:7a:ac:10:
                    8b:3e:f4:2e:69:91:99:bb:7a:04:b0:d4:46:07:c8:
                    33:9d:ed:e7:34:05:3f:2e:2e:ec:1a:b3:b9:06:fb:
                    5b:34:da:ed:ad:4b:92:a6:a4:3c:80:f4:4f:1b:70:
                    a5:5d:4d:54:76:99:c6:ac:e4:96:1b:9c:8a:ca:23:
                    05:1d:e7:91:b7:31:51:a6:ad:03:79:69:f1:99:7c:
                    1f:eb:06:40:35:b8:d8:1c:b3:e6:02:94:41:59:7f:
                    b9:21:d9:10:ed:64:a6:be:55:56:b5:86:71:88:ae:
                    b4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:43:A9:EA:F8:CD:07:23:92:54:1F:A7:60:D9:7E:C5:0A:0D:3E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b051d7e-a46d-3f3f-9aed-f479b6152ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.237.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:94:a6:78:a6:f8:a0:f4:3b:0e:ff:67:25:18:3f:33:58:65:
         3f:95:7f:fe:bf:f8:0c:4c:5e:db:d4:7a:33:f4:f2:ad:70:ac:
         15:8c:46:d5:fd:3e:1b:44:f3:a7:12:f2:4d:57:66:94:2d:8b:
         56:6c:20:22:a7:a9:55:4e:18:89:eb:7a:73:43:17:94:f4:d7:
         ff:bf:59:9d:5a:0a:bd:82:9b:14:70:d4:7d:6b:04:04:ef:ba:
         54:1a:4d:29:8b:3b:83:98:84:91:e5:6f:e2:82:a6:52:f1:9f:
         9e:12:22:66:3e:dd:9f:cb:11:98:62:96:f3:7b:fd:48:1d:bc:
         0e:52:88:a7:af:8d:7e:ae:e1:b0:2d:10:58:17:f4:e5:4b:22:
         bf:8a:86:a8:25:d0:91:4a:31:74:35:5a:71:4b:05:5d:b7:20:
         9f:c7:e3:32:87:6f:23:8d:84:5b:35:b9:01:2e:ff:d9:2e:aa:
         90:cd:d1:cc:6f:fe:3a:75:7b:e5:27:d6:9f:41:fe:cb:49:f3:
         39:5c:1e:83:7f:e7:96:cd:fc:8d:6d:5b:de:41:c9:71:e6:a7:
         63:6d:3d:7c:02:8b:d3:78:76:f8:74:50:76:16:1e:6c:70:16:
         01:39:9d:e3:11:17:65:2a:19:7b:67:d5:86:4a:93:f6:3a:6c:
         99:16:5f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:18:52 2025 by rpki-client