Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41d4df24-6f3f-34d3-846c-2e04fcba0f22.roa
File:                     41d4df24-6f3f-34d3-846c-2e04fcba0f22.roa (raw, json)
Hash identifier:          2LBDo5Gs8RoyP7mT8K/1aNQjbilkpdGvN5Tz8WkIoWQ=
Subject key identifier:   78:DA:7D:8E:A5:4D:42:EC:1E:88:05:6D:E7:5E:AC:97:87:BA:2D:4C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143A8606E71FA321738A1380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41d4df24-6f3f-34d3-846c-2e04fcba0f22.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33490
IP address blocks:        174.174.48.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:86:06:e7:1f:a3:21:73:8a:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=01f4fb9c-050d-4041-b3c0-4f07d4aaa830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a2:9c:c7:ce:d7:fd:33:2e:8a:b8:32:38:a1:
                    3f:10:54:55:28:a4:c7:4e:20:cb:b3:69:ab:9a:6d:
                    b7:15:76:f8:f2:87:5e:35:6f:79:ac:05:6b:9c:3a:
                    f9:b4:03:e3:5c:68:41:96:86:ef:a3:b5:5f:ac:7a:
                    f4:8d:6e:fd:bc:67:1d:bc:02:13:34:bc:88:a0:c3:
                    3f:95:5c:43:40:a0:e8:f0:ff:d5:27:cc:8b:85:56:
                    e9:45:83:e4:11:01:58:e0:c9:77:c1:86:b3:36:a7:
                    37:9c:10:a5:79:12:54:01:ad:95:e5:0f:fe:b9:fd:
                    fd:9f:df:6c:b4:9e:0d:f4:42:2b:fb:4a:b2:08:49:
                    d0:ac:d9:d2:98:5c:13:48:5f:04:90:03:a7:f1:20:
                    b7:e0:fc:b5:0c:eb:32:47:b5:24:e7:a3:70:b2:20:
                    48:6b:1e:8b:9f:9c:38:96:fd:90:45:4f:9b:6e:4c:
                    9f:2c:c3:75:17:01:08:d7:95:a3:84:7f:bf:52:e5:
                    83:1e:79:a7:bd:a3:98:4f:92:02:4e:ca:d5:61:8e:
                    49:49:8d:9a:8b:9a:b3:6e:a9:36:3c:af:2f:19:6e:
                    70:07:1d:3e:83:32:00:55:38:22:8a:d2:53:31:df:
                    4a:1a:f9:43:45:13:f3:4b:c2:51:3e:2a:01:fa:62:
                    19:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DA:7D:8E:A5:4D:42:EC:1E:88:05:6D:E7:5E:AC:97:87:BA:2D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41d4df24-6f3f-34d3-846c-2e04fcba0f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.174.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:cb:dd:df:1e:85:8e:70:c0:2a:72:e0:02:aa:26:8f:1a:fa:
         17:49:67:bb:05:29:64:b3:67:bd:cc:b2:0a:99:0c:bd:a2:8c:
         6f:37:22:e8:38:84:ef:dd:d9:8f:b4:80:3c:da:2f:17:79:1c:
         1b:ca:86:f5:08:66:3a:86:d0:ad:82:a0:9d:05:4c:fc:70:1d:
         09:4d:1e:d9:d3:92:7f:cf:c7:1f:31:6b:34:99:1d:c5:91:6e:
         c4:a5:81:12:df:80:63:1b:9d:a8:87:55:c7:a5:45:be:72:7e:
         6d:2b:20:01:4f:81:ab:24:59:72:40:43:18:0e:39:00:09:21:
         70:30:e8:bd:db:33:84:7a:bc:e9:84:bc:41:e5:8b:fa:bf:ff:
         63:23:94:a4:a0:19:f8:a8:94:a8:4e:3d:f8:d2:4e:7b:95:43:
         2a:75:09:b0:ca:85:f6:f4:2d:65:c6:ec:e7:71:ff:8d:54:3d:
         a4:ab:3c:d2:cc:6a:68:f0:c2:25:24:a7:2b:9f:6e:78:fe:df:
         57:d9:f4:68:38:ca:8a:8b:8a:fa:33:b1:6d:cf:22:e9:47:3c:
         1b:0b:c2:48:7f:01:f7:c5:3e:e0:29:03:19:23:5c:05:0b:50:
         85:90:2b:80:f0:f3:53:b8:d3:fc:32:bb:14:90:0c:3b:5f:20:
         56:e8:e7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:36:56 2025 by rpki-client