Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c38f888-0926-3710-ab66-10548abaee2b.roa
File:                     6c38f888-0926-3710-ab66-10548abaee2b.roa (raw, json)
Hash identifier:          RZSWWtCdOGVnP3LdsCPuP0XlvcCTo9jqxZaMRGfa2UM=
Subject key identifier:   53:12:8B:16:A9:68:6E:06:48:31:61:B9:96:6E:7A:95:A7:CA:FF:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143C418A2931648BC3DF7B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c38f888-0926-3710-ab66-10548abaee2b.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        98.194.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3c:41:8a:29:31:64:8b:c3:df:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=eec922a7-63fb-4db9-aa8c-9db01f8164a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2d:52:e4:1b:bb:e7:45:1b:8b:c1:45:54:0b:
                    7d:f3:7b:3b:b8:0f:e2:b9:51:3a:bd:ac:3d:d3:df:
                    79:fd:2b:44:3c:a0:2a:18:f5:9c:f4:21:c9:5f:8e:
                    5d:a7:fa:ea:85:7b:21:82:72:0e:1d:68:d6:88:65:
                    3e:b8:3c:5d:00:be:6e:02:e2:a8:a5:aa:06:59:e6:
                    9c:c8:27:a1:b1:55:dc:aa:4b:18:a7:d2:25:0e:73:
                    16:93:94:ca:b6:39:a5:00:09:50:b9:65:34:1a:53:
                    33:f4:9f:a9:da:57:cb:75:39:f4:2c:4f:51:db:59:
                    38:87:96:f9:4e:65:f0:c6:6a:80:55:b2:ec:5d:e0:
                    37:5e:74:37:30:d3:47:aa:4b:33:f3:30:e6:aa:ee:
                    5c:8c:8d:54:ef:f7:39:10:86:b8:38:11:20:9c:28:
                    89:5a:2c:e0:02:97:61:55:a1:8a:cf:e2:0f:46:7b:
                    c4:10:fd:b4:ba:80:3c:d0:35:86:1c:92:c7:be:10:
                    66:70:d8:03:bc:73:8b:d4:1b:fc:1e:33:9f:fe:77:
                    68:dd:20:d6:0b:fd:7e:ba:01:9c:1c:27:5d:27:6c:
                    17:fc:b4:ab:0a:39:ff:03:07:08:61:23:ae:52:f4:
                    d8:97:fc:97:8c:83:58:ae:d0:8f:22:ee:52:04:e7:
                    34:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:12:8B:16:A9:68:6E:06:48:31:61:B9:96:6E:7A:95:A7:CA:FF:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c38f888-0926-3710-ab66-10548abaee2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.194.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:c7:c6:04:a7:8f:2b:72:ed:ab:42:1d:fe:6b:1e:80:3d:ec:
         06:a5:3d:41:d8:ce:c0:72:8d:5e:e6:99:9c:58:f2:be:a0:14:
         24:3f:ec:60:13:77:60:af:32:8f:ab:4b:13:e1:5b:e3:cd:e6:
         83:27:b2:7c:3e:cf:a9:92:c0:85:3a:e9:e3:f7:15:87:de:91:
         a7:74:c3:c8:4c:3e:97:5a:17:d3:57:7a:1c:e2:46:8a:2d:32:
         df:6c:14:ad:4d:3d:4a:b0:b4:b4:56:39:a5:8e:b1:54:64:04:
         6c:41:ef:a7:ee:4d:a4:b7:a7:39:e2:b7:f9:00:d3:2d:d7:d9:
         f5:78:d7:ce:bf:e9:06:5a:80:e0:2d:a8:b3:a3:7f:d8:36:eb:
         83:f2:69:5d:f1:a9:1c:a8:f7:87:18:4b:5a:53:e9:99:93:12:
         49:3b:93:b2:ba:19:b8:7f:79:37:de:5a:92:cb:da:2c:4c:69:
         78:ed:38:05:88:08:2a:6a:4a:52:79:50:e8:90:36:4b:26:14:
         96:6e:c9:bf:4f:38:22:50:90:b6:03:69:e6:6b:1d:3b:1f:6f:
         f1:23:70:33:4c:21:a5:c5:9b:59:ed:9d:d8:27:96:30:09:dc:
         f3:8d:ab:79:44:c1:c2:86:61:ae:37:55:21:c3:66:14:2a:f7:
         b4:59:4b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:25:28 2025 by rpki-client