Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f8c3d0f-6066-3296-bd19-d1b1e903b1ec.roa
File:                     6f8c3d0f-6066-3296-bd19-d1b1e903b1ec.roa (raw, json)
Hash identifier:          Y0GBKXyOBBQuoa1bBZpUQE/6XCxtsj86Kez8ebfXVao=
Subject key identifier:   AB:A2:53:CD:C2:4B:61:6D:EA:87:D5:D9:71:78:E0:2F:AF:B9:5A:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143C22C2BA31DF32F4C13940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f8c3d0f-6066-3296-bd19-d1b1e903b1ec.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        76.143.228.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3c:22:c2:ba:31:df:32:f4:c1:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=9f58a989-894b-4bc6-a140-bb031773c171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:2d:2f:41:71:0a:c2:1c:f0:6d:be:6d:3a:
                    a3:b3:f9:0b:af:ed:1e:45:f5:a8:b3:36:b7:36:be:
                    b2:e1:1a:61:d1:97:39:ce:d7:61:51:aa:21:63:74:
                    ef:70:37:f9:6f:7d:83:43:76:09:3e:3b:10:18:2f:
                    bb:ef:93:f5:cb:53:1a:6a:4f:cc:f4:65:4f:d2:57:
                    68:1e:bf:8f:51:aa:2b:04:a2:04:3a:78:35:5b:2c:
                    ca:b5:0d:23:db:e1:ad:e4:10:77:85:86:eb:cd:8c:
                    32:73:96:4f:8c:41:de:fa:0c:3e:10:cf:78:62:54:
                    86:6b:28:be:e1:8d:99:b8:b3:d1:df:07:91:f7:99:
                    c0:7a:70:20:58:1e:90:3b:d4:d6:9d:5e:47:60:ae:
                    ac:fb:3a:dd:4a:37:98:45:70:ed:d2:52:74:8b:df:
                    97:d3:4d:bc:58:f4:7a:05:d3:fc:cf:eb:ce:2b:71:
                    61:ab:6b:f9:5e:8f:44:4d:dc:c3:91:76:41:9b:2c:
                    73:4a:47:f4:60:98:76:47:83:40:6a:82:3f:c5:de:
                    c4:d7:c8:67:f0:a4:8b:07:ad:df:a7:24:e4:ec:a3:
                    ff:a7:9f:7c:bf:8f:3f:8c:4e:68:17:ae:4b:48:35:
                    02:b5:d1:ac:ad:27:b8:42:62:af:60:48:11:c5:24:
                    dc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A2:53:CD:C2:4B:61:6D:EA:87:D5:D9:71:78:E0:2F:AF:B9:5A:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f8c3d0f-6066-3296-bd19-d1b1e903b1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.143.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:f7:3f:f7:ea:bd:76:7d:02:f4:77:e3:9b:fb:48:67:fc:d4:
         a7:09:54:c6:4f:8d:17:92:1d:39:6c:62:3d:fd:53:65:fb:e0:
         3a:64:3d:09:92:e0:56:2a:5b:0a:5e:4d:a4:cd:29:ea:47:df:
         b6:22:a1:38:3c:37:c5:88:a2:5c:47:66:ef:bc:d2:f7:29:8b:
         a1:a1:b2:ea:80:7f:36:f4:58:70:b8:bd:a2:ee:ab:61:1f:eb:
         2f:c3:28:b6:22:97:fc:a8:b3:76:b0:2f:e2:d8:5d:17:5c:83:
         61:ea:c0:f9:20:e7:59:36:b5:3e:89:da:aa:dc:75:77:92:09:
         b0:06:12:57:73:60:1c:c1:1c:14:8a:76:f2:43:db:3e:08:2c:
         ce:46:96:76:34:ac:be:d9:be:da:d0:4c:50:0b:bf:7e:c6:8b:
         07:d0:88:90:a7:60:cc:e2:d5:ea:9a:12:7f:d9:f7:16:1d:ed:
         de:35:56:ab:c4:49:75:e0:0e:a7:c2:d4:a0:ab:5a:a4:f6:5c:
         b7:12:7f:98:6e:2e:ab:9b:cd:53:3d:61:47:b5:79:7f:76:f8:
         53:3c:fe:fb:95:04:ee:eb:ec:9d:5a:b2:c3:49:5e:21:67:92:
         e0:09:7a:85:c8:61:6b:56:5c:66:be:d8:86:7a:a8:5c:cc:42:
         48:d4:53:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:05:19 2025 by rpki-client