Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/569a5690-9ec1-3942-a862-9ccda22ba2af.roa
File:                     569a5690-9ec1-3942-a862-9ccda22ba2af.roa (raw, json)
Hash identifier:          8fcHlbSR39g3zr5ZOFLh4KkLF9+zOhjmMVWJgl48X7o=
Subject key identifier:   4A:48:A8:EF:0B:95:3D:2C:2F:E5:B0:23:38:4E:AF:58:98:52:75:3F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C116C8D5000C53DA0059D30
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/569a5690-9ec1-3942-a862-9ccda22ba2af.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        98.52.100.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:6c:8d:50:00:c5:3d:a0:05:9d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=d1b819e0-bc76-4b2f-b390-941541da801c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:19:e8:9c:f3:0c:fa:c5:e0:12:b9:11:ac:
                    0f:1f:a3:cd:43:99:74:b1:d0:a9:7f:5a:fe:06:9c:
                    5d:ba:52:ba:49:3f:e5:c0:97:2b:80:19:f4:7f:c8:
                    3e:27:ea:bb:2e:ad:cd:af:3f:43:74:35:7f:b8:0a:
                    08:e3:b8:78:ea:2b:7f:7d:aa:9c:a1:de:bc:4f:a0:
                    a3:ae:60:aa:74:e2:b3:fc:5e:0f:70:58:b8:50:95:
                    b6:71:a5:11:38:a6:07:46:9b:c9:08:d4:66:68:8e:
                    58:c1:c0:fd:48:a5:c6:f4:eb:ec:6e:20:9d:01:29:
                    73:99:03:9b:88:07:e7:ae:50:68:81:15:2e:18:20:
                    9c:90:fa:dd:90:2b:6b:de:f1:22:4f:ce:db:42:e9:
                    be:eb:8e:5a:10:ff:a5:46:2d:6b:23:37:ce:df:47:
                    c2:e0:7f:ad:d4:08:78:8d:24:0a:53:91:18:71:b6:
                    b6:6c:72:d0:ba:e2:47:c4:5d:ef:d1:e3:22:5b:43:
                    64:70:21:b6:3f:8f:7e:ed:4c:6b:ec:44:b5:25:3c:
                    61:f2:35:aa:74:49:bf:6c:65:b4:32:b1:22:1c:fc:
                    cf:47:01:b9:bf:14:45:f4:dd:97:d6:65:68:2f:9e:
                    8e:1a:81:76:45:15:26:81:c2:aa:82:45:94:62:98:
                    70:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:48:A8:EF:0B:95:3D:2C:2F:E5:B0:23:38:4E:AF:58:98:52:75:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/569a5690-9ec1-3942-a862-9ccda22ba2af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.52.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:17:94:54:40:8b:1a:95:c0:33:37:5e:9a:be:bc:b1:33:f2:
         8e:c2:87:79:d6:84:ef:63:8f:72:cd:b6:7f:7f:13:5d:9f:90:
         b3:9e:f6:b6:11:ab:6d:a4:98:4b:02:18:ae:8c:80:70:b6:88:
         58:e0:52:ff:fd:14:e2:9f:bf:bb:03:27:85:81:96:c1:17:e0:
         dd:36:55:66:5e:63:35:50:34:84:ef:e9:ca:e5:b8:48:e8:3b:
         a7:9e:09:25:44:3f:7f:8e:14:9a:09:6d:68:c8:21:d1:37:84:
         67:f6:e7:6e:b9:6b:c8:77:e4:42:2b:62:0e:b3:f2:09:76:5b:
         92:b1:4b:11:91:85:cf:31:7f:9a:2c:f3:cb:f5:3c:fd:76:21:
         be:3d:7d:c9:aa:f8:20:36:a6:95:8f:65:cd:a8:60:fe:2a:0b:
         9a:80:fc:cc:5a:9a:13:c8:a8:91:eb:94:8b:37:0f:79:4e:53:
         6e:a5:9d:7f:e4:e8:03:41:23:65:a7:51:f0:5a:b6:85:cd:b8:
         f6:fb:77:76:dd:5c:23:f6:61:d5:ac:55:e6:df:9e:d2:ca:74:
         57:e1:c0:b8:bb:15:21:a7:6a:49:cb:76:d4:a4:a6:7c:97:fd:
         8a:5c:92:00:b5:1b:04:4b:7e:29:7e:7a:f5:aa:24:34:94:a2:
         dd:d1:18:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----