Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d6c3f7a-c28f-303e-ad78-3d9d9b139afc.roa
File:                     6d6c3f7a-c28f-303e-ad78-3d9d9b139afc.roa (raw, json)
Hash identifier:          QoW9BEqt50c8eTh8okpxnln0wrqH9Vyx3YorVYXwxcU=
Subject key identifier:   B3:41:4B:D7:10:76:5E:DA:7D:6F:47:B7:62:B2:CD:5C:94:4E:C2:FE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B382DD4B27F30C9E58900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d6c3f7a-c28f-303e-ad78-3d9d9b139afc.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        98.216.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:38:2d:d4:b2:7f:30:c9:e5:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=b728b918-abe6-42ce-8ce3-a8e3b6dbcb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f8:7c:89:06:6c:a7:a6:7e:d8:d8:ab:8c:52:
                    53:80:61:38:83:2e:b3:09:f8:a8:27:65:db:6e:08:
                    4f:7a:09:dc:e0:94:8d:03:71:db:2b:70:13:23:cb:
                    b4:53:de:eb:e7:b3:ff:29:bd:0c:e8:02:d2:35:70:
                    30:ac:d0:6b:5e:a4:d4:e8:60:01:0c:b0:30:44:e1:
                    40:68:90:b1:9e:a7:70:e1:dc:d6:d5:d7:e8:55:ed:
                    c7:54:4b:de:d2:ab:4d:0b:3c:1c:82:7a:71:28:5b:
                    95:8d:33:cd:84:07:97:9e:93:d7:cf:e0:7c:95:dc:
                    87:4d:02:8b:14:83:03:62:de:d0:b2:f6:c4:bb:d5:
                    a4:6f:1c:81:3d:e3:1a:d7:e0:27:a1:39:0e:4f:9a:
                    c3:53:a9:dc:36:14:98:5f:ce:a1:53:d2:13:b9:57:
                    fa:6a:10:3f:79:06:5f:c6:d2:86:99:84:35:01:05:
                    94:b9:dd:4c:de:4f:44:1b:bc:23:8d:1c:04:52:cd:
                    ec:88:49:a6:92:03:18:d9:d1:d2:6e:f2:25:16:44:
                    cc:ee:9c:97:8e:d1:03:31:ac:6f:1a:c2:64:0d:e2:
                    f6:bd:d1:14:a2:14:06:73:8b:c8:5a:df:24:5d:a8:
                    91:99:b6:d3:2b:6e:0f:d0:64:40:cb:bd:49:fd:81:
                    ff:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:41:4B:D7:10:76:5E:DA:7D:6F:47:B7:62:B2:CD:5C:94:4E:C2:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d6c3f7a-c28f-303e-ad78-3d9d9b139afc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.216.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:c9:ae:bc:b8:9a:e1:f7:5f:16:7d:a6:0b:27:c6:3c:c7:bb:
         c7:a9:46:59:78:f3:cd:b3:0c:37:62:34:64:cc:1c:74:9e:85:
         88:ff:41:84:6d:d7:76:63:6d:78:85:45:6d:b0:fb:87:9e:36:
         f4:d3:1c:96:4e:0f:7b:1b:6c:91:a6:20:8d:bb:de:a3:07:37:
         5f:9b:46:8c:ea:70:86:99:18:e1:99:41:dd:81:91:c8:19:3b:
         0b:32:b3:38:f2:0d:47:9d:a0:8b:04:32:cb:3b:14:e2:46:e2:
         80:59:b1:65:26:1b:a3:44:78:ef:a4:2e:3c:47:9b:66:97:2b:
         25:2a:17:bc:3b:67:fe:29:11:eb:26:65:7b:ad:9f:85:99:f4:
         ec:2c:ec:9f:5f:c9:a2:23:7c:8f:88:65:2d:9f:a0:f5:c6:dd:
         17:81:d1:60:c8:58:54:e6:b8:84:a2:85:2c:cc:fd:9b:88:3a:
         c9:d8:a0:33:f6:f7:d3:6c:a2:c8:0e:98:61:4a:d6:d5:fa:99:
         dd:fa:73:c5:88:62:64:75:f7:8d:f2:b9:4b:62:a8:6f:4f:c6:
         c2:b9:66:9c:58:85:b4:31:8b:b1:ba:41:3f:07:33:87:e0:d4:
         c2:35:96:e8:04:7f:fe:e4:55:f9:93:a7:78:df:2e:47:de:93:
         c8:08:ca:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:39 2025 by rpki-client