Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/407dc2a0-3ccd-3d09-8ea6-1e9740db97ef.roa
File:                     407dc2a0-3ccd-3d09-8ea6-1e9740db97ef.roa (raw, json)
Hash identifier:          4X1JLsV/yJpJFe50daiqjvI6StRsSeIfok4HtWH75pM=
Subject key identifier:   29:C3:1E:34:EF:8A:A1:06:1B:AC:E8:E7:0A:13:36:BD:E8:34:CF:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143CAFCA1BF5116033393080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/407dc2a0-3ccd-3d09-8ea6-1e9740db97ef.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        98.39.32.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3c:af:ca:1b:f5:11:60:33:39:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=ead7c817-21a3-49f2-b7e5-6cdac61c7e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:76:0f:46:5d:7e:95:3c:24:18:98:65:38:a5:
                    68:d5:62:4e:0d:7a:07:1d:dc:4c:b9:73:15:07:ab:
                    96:15:10:57:e1:97:2a:cc:f7:47:0f:09:e5:58:3c:
                    cd:16:1d:c0:c4:49:01:b9:8e:c1:da:df:36:41:ca:
                    03:9e:7d:27:0b:f9:46:77:91:6f:5b:8e:b0:cf:7e:
                    9f:cb:b6:cb:3b:7c:ea:ea:1a:2c:0e:89:93:4a:6b:
                    c4:38:cb:e0:db:4f:45:be:b7:5c:27:71:e9:a7:3c:
                    f7:15:2c:97:eb:e9:fc:66:78:96:82:d6:f4:fc:f9:
                    e3:15:82:9f:5f:64:46:ca:c0:54:ab:e1:4f:7c:30:
                    fe:15:6d:de:b3:80:e3:2a:8e:ac:a2:92:8d:cf:74:
                    99:82:0a:05:ba:1f:90:e0:49:fe:41:6e:70:6a:96:
                    fa:ee:12:82:96:3f:3a:b3:35:bf:e9:f3:2c:3d:3f:
                    e3:ca:12:0d:40:7b:a5:b6:44:16:61:33:ee:d4:c5:
                    98:51:b2:14:14:46:1c:e0:58:83:50:0b:e1:4f:ee:
                    fe:f2:16:01:9e:24:6e:fb:9e:dc:e1:3c:a0:50:d5:
                    fb:c7:4d:24:6b:91:ec:4e:7a:37:7b:9b:18:63:b5:
                    ee:e9:1d:1d:f7:ba:ed:d3:03:7f:e3:6a:eb:91:b0:
                    b6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C3:1E:34:EF:8A:A1:06:1B:AC:E8:E7:0A:13:36:BD:E8:34:CF:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/407dc2a0-3ccd-3d09-8ea6-1e9740db97ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.39.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a5:d2:4e:c9:67:9e:05:42:3c:cd:8d:df:4d:27:79:16:d5:
         23:3f:0c:4f:00:b6:17:10:6b:54:49:6d:96:0c:e0:85:bd:8e:
         01:6c:6f:d4:ae:1c:89:b3:a5:84:04:e7:d3:75:4a:cf:0a:de:
         c8:1a:70:00:f8:a5:34:ba:b7:c6:91:2d:70:f7:c0:2a:ea:90:
         22:bc:4c:0e:29:52:44:32:22:e2:ac:37:ea:db:38:d6:6d:42:
         d0:d7:43:eb:5b:b2:50:d1:33:98:56:ed:49:ef:e9:c0:80:58:
         6e:dd:6e:de:ad:b2:ac:90:23:97:06:79:eb:b8:47:73:ad:48:
         33:cd:08:29:db:84:d8:c6:8d:34:89:21:a7:7f:ac:78:2c:57:
         58:3c:87:7f:39:08:04:6b:e8:09:73:9b:ef:31:d5:b5:ac:2d:
         40:f2:fd:cc:60:10:12:59:a6:09:27:d7:8b:a9:97:3f:50:7c:
         f8:24:5f:92:d0:7c:f0:48:6f:bb:aa:ba:36:ab:1d:45:07:bb:
         4c:be:4e:c0:21:27:20:13:b5:3d:43:47:d8:fa:f8:11:7d:8e:
         00:b2:15:d1:c3:45:ac:29:9f:3e:2e:47:b4:92:19:94:83:97:
         17:e0:74:86:53:2b:a2:cc:3c:ea:96:83:0a:67:90:90:b5:29:
         99:b6:9b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:05:49 2025 by rpki-client