Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416b75b4-5058-30a0-b7e5-612f0cd78359.roa
File:                     416b75b4-5058-30a0-b7e5-612f0cd78359.roa (raw, json)
Hash identifier:          aC7+3QBBG0MLPmgERSe8Vwsaadi4iWuKNy/NYPa9/Zs=
Subject key identifier:   9C:8F:88:AD:65:B3:16:05:E4:E4:F3:FC:3C:E5:23:EF:0E:2C:CB:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848144086FE5E6EB20980F08280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416b75b4-5058-30a0-b7e5-612f0cd78359.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        98.39.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:40:86:fe:5e:6e:b2:09:80:f0:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=75d37a6f-bdd9-4e3b-86aa-d5373d66eada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:28:d4:f3:e0:4e:1f:f5:57:3a:4e:97:29:
                    d8:ea:06:0c:50:08:91:99:c9:54:c3:99:0c:91:62:
                    75:61:2f:82:fe:23:d7:5c:d7:1b:9e:7f:68:be:c1:
                    f7:81:ba:5e:40:71:21:2d:1c:c3:03:ad:e2:ea:8c:
                    8c:b0:8e:33:38:c3:a3:23:0d:fc:87:8b:48:27:c4:
                    4f:a1:90:3a:a5:63:b5:04:1c:e6:ac:54:72:50:99:
                    d0:ba:57:33:fb:c1:47:9e:7b:af:a1:26:56:7c:84:
                    c2:a9:00:66:0a:59:d7:cd:d4:3c:a9:38:ec:71:73:
                    20:28:2e:56:59:0c:95:2d:08:84:07:3e:95:15:7b:
                    52:6c:bc:6b:88:95:07:6b:46:72:bb:06:05:4b:9f:
                    b2:e2:ff:b3:14:e1:8f:14:7f:d3:44:a8:4b:07:b1:
                    f4:64:bf:77:c0:ec:26:76:43:5d:94:ea:95:8e:92:
                    2f:80:32:81:59:f3:d8:30:73:99:ae:21:bc:40:30:
                    82:5b:de:e6:f6:c7:e2:e4:29:8c:35:9e:01:b9:b9:
                    20:bf:06:1a:c8:81:ee:87:f8:8c:0c:fd:cc:52:1c:
                    e7:b4:fa:5e:66:66:64:98:08:6d:98:89:40:a9:6a:
                    ab:b0:3f:0e:aa:cc:78:76:54:61:01:77:55:3d:ef:
                    29:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8F:88:AD:65:B3:16:05:E4:E4:F3:FC:3C:E5:23:EF:0E:2C:CB:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416b75b4-5058-30a0-b7e5-612f0cd78359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.39.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:94:f9:d7:69:13:29:49:f9:9b:e8:66:19:26:90:3c:4e:a0:
         e0:a5:c9:5e:f7:53:e4:f5:30:27:a6:80:68:1d:26:01:e2:b2:
         7f:d9:78:0e:f2:20:ab:a3:cb:69:e0:f2:90:75:9d:02:91:d9:
         ff:07:d6:1a:ab:be:67:e9:45:53:7a:84:ff:92:a6:77:2f:d3:
         1b:62:00:9a:83:db:7e:44:42:92:e0:bb:41:e5:9e:98:74:6a:
         9b:b7:44:03:7c:45:42:0a:3e:95:50:ce:15:2c:10:6b:26:71:
         6a:9a:1a:ec:e4:d6:16:fa:08:6d:6f:af:63:13:97:16:15:bf:
         d8:3a:42:5c:d0:46:c1:d8:5c:66:71:de:42:a5:fb:f0:df:40:
         a2:f4:d9:7d:f0:dc:a3:22:c5:5d:4c:96:dd:27:dc:3f:a0:77:
         3b:ae:5b:a4:ae:24:02:ee:82:f3:14:f6:16:02:f6:be:ad:9a:
         7d:85:c6:ba:51:66:0c:a6:12:29:49:e7:5e:b6:66:af:fa:0c:
         f7:a5:65:a8:99:ee:e7:68:3b:99:0d:1b:d4:db:2f:d1:11:63:
         47:6b:f0:03:c0:9e:01:5b:dc:01:26:0a:39:b9:d8:30:e5:25:
         98:d0:9a:a2:d8:26:51:10:8f:de:79:62:06:fe:0d:4a:b7:27:
         e9:4f:fc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:49:27 2025 by rpki-client