Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4644e945-defa-352f-8205-4288df70c19b.roa
File:                     4644e945-defa-352f-8205-4288df70c19b.roa (raw, json)
Hash identifier:          4enQffCvtO+tY9OAzNZDaK56jk/zPTiVb2EnV90K5OY=
Subject key identifier:   F4:F6:61:63:65:79:C7:FD:88:81:4F:0B:AC:DC:78:62:C0:8D:B3:8B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143A9BB7157DC9178423F8C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4644e945-defa-352f-8205-4288df70c19b.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33490
IP address blocks:        71.237.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:9b:b7:15:7d:c9:17:84:23:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=54389542-6910-4767-896b-38342a63c97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d9:f6:d0:65:ce:8b:97:28:e6:74:8a:c8:e9:
                    9b:ad:25:1c:b5:5e:fa:4a:e4:5b:4a:c5:d6:e3:94:
                    c9:35:ab:83:70:e5:1e:4a:fb:50:8f:c1:c0:81:16:
                    f5:8f:59:82:fa:aa:82:02:f2:47:4c:88:aa:6e:ae:
                    08:de:fc:31:b2:67:ad:52:35:03:7d:d3:97:fc:9b:
                    a1:bf:04:68:ab:7f:90:28:f9:7d:c6:9c:7f:2b:0d:
                    fc:3d:81:0d:53:8e:21:c8:ec:0a:2a:c1:2c:d9:18:
                    eb:13:9c:58:4d:13:0a:28:32:75:30:81:df:f7:a3:
                    5b:63:77:c6:ec:3d:42:7c:6b:55:36:5c:73:d4:01:
                    55:7c:b2:39:fe:88:07:4d:6e:5e:9c:24:8f:b9:30:
                    16:7b:8e:8d:5a:e7:0e:15:1f:02:8c:cc:48:1c:a9:
                    b0:62:5f:10:9d:15:62:40:34:2f:43:81:4d:aa:bb:
                    02:b1:7b:66:3d:97:4a:cc:4a:10:bb:7b:f4:11:58:
                    ea:75:3c:23:81:bf:0b:34:01:3d:09:12:39:89:29:
                    4f:1c:37:46:10:10:88:39:b7:7d:80:9b:36:11:e6:
                    a9:b1:89:de:23:77:a5:52:eb:a2:5f:3c:46:26:9f:
                    fe:84:0f:ac:35:f0:98:f3:7f:6c:3b:97:e8:ca:fd:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F6:61:63:65:79:C7:FD:88:81:4F:0B:AC:DC:78:62:C0:8D:B3:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4644e945-defa-352f-8205-4288df70c19b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.237.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c3:7a:f3:d9:3d:cd:02:49:4c:9f:13:06:04:5a:e6:f1:b3:
         ee:6b:61:98:b1:da:64:59:24:a5:87:53:90:50:7a:dc:fb:65:
         45:ac:97:02:0c:52:94:09:45:06:5a:8f:02:4b:c5:96:fc:5c:
         db:0f:7a:bc:7a:28:ba:67:3e:80:f4:36:e7:1f:8d:46:d6:a2:
         d8:ae:2e:e1:5a:59:40:c4:c3:dc:92:98:ed:e7:04:39:61:fb:
         7e:38:48:a4:17:6f:25:98:cc:3d:08:a0:f0:87:e8:98:7a:9e:
         93:68:15:c4:2a:87:3c:19:0b:ef:9d:36:c6:82:7d:47:5e:09:
         a4:1b:25:22:64:cc:c6:46:01:50:98:a4:3c:b5:8e:89:fd:ae:
         e1:70:bd:52:56:ce:1d:b5:be:43:04:56:b0:95:7d:7f:65:5a:
         db:6b:3a:b9:c3:5f:9d:99:45:a5:61:4f:78:b3:7e:84:4a:54:
         ba:47:7d:73:2d:62:7d:cd:5f:c5:fb:90:bf:55:8a:e8:c0:cc:
         5d:bc:ff:21:30:62:0d:1f:d4:c5:ec:6d:21:69:7a:cc:cf:f9:
         d7:ae:21:91:d2:0d:1a:79:28:70:b8:ed:93:17:d1:14:d8:7e:
         44:c7:eb:30:63:bd:32:89:2b:b6:73:61:48:63:2e:eb:83:ea:
         c3:e1:94:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:49:18 2025 by rpki-client