Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d812ab7-8b4e-3df6-a6d5-f05fa6ca7d50.roa
File:                     6d812ab7-8b4e-3df6-a6d5-f05fa6ca7d50.roa (raw, json)
Hash identifier:          DpH7OtAYe0c2wuOJiANwZBYeeLutbBQrqJPfVO98VH0=
Subject key identifier:   43:D0:C6:E2:89:DF:10:76:C0:AC:8E:D6:AE:2F:B8:E7:B5:1E:A6:3C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C11C395ADC25C822E036780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d812ab7-8b4e-3df6-a6d5-f05fa6ca7d50.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        98.37.12.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:c3:95:ad:c2:5c:82:2e:03:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=b6435e52-633c-40a2-a24c-9e8adb53f5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:02:d9:99:bf:fd:28:82:b3:81:ea:19:18:bd:
                    6c:ff:c7:a4:20:b7:58:8f:fc:46:38:d5:45:49:f6:
                    4b:15:11:29:05:5c:79:26:83:2e:26:ed:45:bd:f6:
                    05:47:ab:52:c8:c6:23:85:67:d2:56:9d:3b:1d:aa:
                    b8:ce:37:05:fa:87:50:20:21:11:e0:d4:1c:39:78:
                    ce:c4:18:08:cd:d8:86:9d:8d:56:30:11:e1:73:7b:
                    57:9d:0c:a4:d8:83:c3:d3:f1:8d:d6:6c:f3:83:b3:
                    b3:18:2d:1a:36:11:d0:69:ab:e8:69:17:1c:aa:7b:
                    b2:86:ac:83:37:c3:bf:8e:46:95:16:82:ea:5d:2e:
                    ef:9a:06:6e:47:75:72:d0:01:81:46:5f:47:00:6c:
                    5e:8c:8f:99:fb:21:df:5c:50:6b:91:11:93:52:9a:
                    eb:08:4a:ec:09:ba:11:79:52:9c:79:b2:f4:8e:31:
                    bf:7d:9f:48:27:f4:c3:aa:d3:5e:dd:b7:6d:8b:83:
                    2a:ef:16:b2:7e:be:98:a0:1c:05:b9:55:27:ec:de:
                    35:d3:88:c2:f1:8c:e9:64:2a:93:cf:f6:1f:cd:6c:
                    ba:ac:a6:91:13:96:72:2f:3d:2b:6d:e6:1b:05:a6:
                    6a:a9:f5:84:2d:19:1d:dd:63:8c:e9:37:07:81:64:
                    0d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D0:C6:E2:89:DF:10:76:C0:AC:8E:D6:AE:2F:B8:E7:B5:1E:A6:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d812ab7-8b4e-3df6-a6d5-f05fa6ca7d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.37.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:5c:ac:f8:a5:0f:b9:9c:c0:ec:3a:a3:f1:5d:98:2e:27:88:
         b6:df:08:43:2d:e5:c5:a8:7a:1f:e6:a8:5d:38:3e:36:de:20:
         44:94:74:da:84:b8:c9:74:47:6a:a5:d9:6c:8b:a7:63:54:64:
         3f:50:b7:8e:0d:54:5b:94:82:ce:4b:38:93:3e:1e:9f:cf:d0:
         f3:1f:83:0e:94:36:6b:54:7e:3e:e1:8a:55:91:40:9f:0d:3b:
         c2:14:8d:a9:0f:87:3c:64:b7:13:69:7a:8d:11:67:fa:50:6d:
         8f:79:c3:cc:7d:f8:b3:17:5d:a6:de:3e:c6:4a:c3:cf:72:8a:
         d4:78:cd:76:cc:f6:04:bb:d4:14:9b:02:5e:d1:06:35:f1:a4:
         ae:b7:e3:21:dc:73:95:8c:95:e6:c4:ff:b5:b9:35:b3:85:2a:
         53:bc:0e:b8:17:08:33:78:9e:2a:3d:49:66:62:87:0c:c9:a7:
         3e:7c:c7:d4:92:a3:6d:bd:be:8b:30:e9:da:fb:40:3c:bb:df:
         ed:de:56:5d:ec:45:56:dc:e2:d3:c7:b2:3d:eb:14:3f:3e:ec:
         97:da:34:ad:bd:4f:02:4f:7e:55:25:60:89:7c:e3:64:fb:07:
         26:89:9f:31:1e:54:9e:13:ad:75:98:46:f9:88:eb:5b:78:bd:
         de:c6:2f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:55 2025 by rpki-client