Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64b1975c-41c6-391c-b18a-e92574a1e43b.roa
File:                     64b1975c-41c6-391c-b18a-e92574a1e43b.roa (raw, json)
Hash identifier:          91dedLvMCzRgM7H87xparHxkdd1heYZ+JU4MCTPlwxU=
Subject key identifier:   D1:9C:A3:AE:FA:1C:EF:65:97:D9:8D:65:97:9F:4E:7E:35:FA:E3:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C11E809EF9A94ACE074A120
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64b1975c-41c6-391c-b18a-e92574a1e43b.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33660
IP address blocks:        76.149.212.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:e8:09:ef:9a:94:ac:e0:74:a1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=98f0d11f-7703-425e-879b-52d57cdbca83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:43:f5:12:b7:e8:cc:7c:2e:9d:24:06:7a:f8:
                    0a:b8:a1:20:58:e8:93:f4:d4:85:f1:4c:36:a9:64:
                    7c:c5:21:8e:66:77:b8:1e:f1:35:9f:6b:2d:c1:c1:
                    4c:56:54:80:af:39:96:d6:00:84:c2:1f:2d:d6:dd:
                    65:f7:5f:2e:ae:3a:f2:96:9d:b1:ec:b2:cb:77:e4:
                    31:9a:21:ac:73:8a:e3:96:dc:df:f7:8a:2d:39:05:
                    8c:bd:59:94:1b:ec:c5:3c:c3:41:c2:e8:8b:5c:52:
                    4b:ec:8d:d7:fb:98:12:a3:8d:8f:dd:92:6f:24:69:
                    a3:c7:af:57:27:82:dd:4d:e5:f4:3b:f5:2c:e1:f5:
                    56:a9:01:ce:fb:7a:ee:1f:19:8c:19:c9:dc:38:6e:
                    73:55:1f:4c:76:f0:7b:2f:92:cc:15:c4:ad:c8:1f:
                    4e:fc:22:74:93:da:81:c0:cd:1e:44:cb:af:cc:9b:
                    e4:66:e9:b3:c4:79:da:40:1c:d6:b2:e0:0b:2c:ef:
                    b5:96:9d:11:cb:6d:c0:9b:0f:8e:51:e8:e4:d6:cb:
                    17:2c:08:57:c0:b4:b5:5e:ea:ec:a3:85:ec:ad:2e:
                    f3:ef:80:af:16:b9:5e:86:dd:bf:8f:e2:42:73:35:
                    e0:40:25:cf:4e:a7:3e:73:54:4d:ab:c2:01:8e:33:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9C:A3:AE:FA:1C:EF:65:97:D9:8D:65:97:9F:4E:7E:35:FA:E3:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64b1975c-41c6-391c-b18a-e92574a1e43b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.149.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:24:12:71:b7:f9:95:86:91:16:a6:09:8a:d8:30:b1:d8:31:
         4c:a7:b1:09:75:0e:99:ba:5f:98:48:f6:36:6e:6c:b4:4f:9b:
         20:ac:ae:7d:f6:c3:b3:c3:e1:fd:67:10:00:3a:32:90:b3:ba:
         ce:35:e2:b8:84:35:11:39:1a:e4:83:7a:7e:15:3d:70:ac:ad:
         6a:ff:d3:c7:c2:17:c1:ad:42:29:e7:cf:f9:92:4d:18:19:d0:
         68:07:a2:90:85:2d:f0:72:28:77:dd:0a:ce:2b:5e:41:5d:5e:
         6f:73:86:03:b5:94:65:a8:ba:92:6e:70:5d:a4:72:b7:c8:b6:
         89:ad:29:63:17:b7:44:d2:eb:8f:07:28:fa:f8:a9:3f:46:c8:
         99:bf:d4:c7:64:ff:21:80:4d:57:b8:b6:83:dd:f3:d2:89:cd:
         28:2d:79:6c:60:1e:ac:a5:11:15:51:7f:8c:35:df:6a:ee:d6:
         ac:5e:75:57:02:a0:c4:7a:2c:57:bf:d1:34:84:75:52:d7:fe:
         33:ca:b2:93:cf:f3:56:9b:fd:fe:89:d1:ad:df:b5:46:60:ac:
         79:26:53:31:2e:2a:db:cf:a1:4a:2a:ca:85:b4:bb:e9:3c:ca:
         65:0c:cb:32:e9:82:cb:6d:e4:e0:80:8b:00:7d:8c:5a:04:24:
         df:c1:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:09:44 2025 by rpki-client