Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/754efc95-03b1-3c8f-a5cd-8ab2094585a6.roa
File:                     754efc95-03b1-3c8f-a5cd-8ab2094585a6.roa (raw, json)
Hash identifier:          mJwUErukfN1CkNtG9+Xsi8mkBjaCr1LFyyT1eCnrMEw=
Subject key identifier:   5D:52:89:8C:29:A6:76:5E:F9:CE:60:63:67:E0:CC:D6:EB:A4:43:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C113BD6D5ACA6EC922DE4C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/754efc95-03b1-3c8f-a5cd-8ab2094585a6.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        76.150.116.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:3b:d6:d5:ac:a6:ec:92:2d:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=5b07c016-48b6-421e-bd1d-6a0631abfd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:71:f8:60:81:ae:cf:4c:ac:ee:77:9f:11:21:
                    dd:2e:06:4a:ee:df:00:69:5e:9f:51:06:5e:de:93:
                    01:54:77:03:74:e9:43:ab:f7:fd:f5:ec:1b:a7:0b:
                    65:ae:8f:1a:54:01:29:a7:20:ee:c4:e8:8c:98:9f:
                    92:eb:e0:73:4d:42:b7:6e:ba:b2:88:27:f7:49:44:
                    f8:1e:09:6e:94:85:80:a6:d7:8e:bd:6a:13:f1:82:
                    49:0c:99:25:d3:c5:e1:e2:63:6a:4a:0b:5c:52:e8:
                    29:0e:db:cc:4f:c6:23:c6:22:97:11:2a:1f:de:c2:
                    a1:20:34:80:4d:41:73:49:f3:bb:17:18:4a:08:27:
                    5e:5e:17:a2:53:f5:06:35:a1:9f:ba:cf:8a:6d:4a:
                    fe:6b:4b:8f:b3:78:bd:81:a4:8a:b9:4d:a0:c6:1c:
                    24:8e:89:cd:3b:7a:0a:49:e9:72:eb:bb:2f:3f:3c:
                    01:76:8c:d3:cf:ac:dd:d5:a0:7e:5c:1f:c3:b7:6a:
                    7f:1d:77:31:34:2c:a5:d7:1a:1a:3a:e5:70:52:d5:
                    9b:8d:b8:17:a4:e0:81:51:85:bd:27:45:52:58:62:
                    f8:97:b0:78:8e:7a:f8:b5:04:89:d4:e8:cb:03:d8:
                    9a:91:95:4b:c3:d4:c5:95:c7:ec:e6:f2:a2:29:f1:
                    36:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:52:89:8C:29:A6:76:5E:F9:CE:60:63:67:E0:CC:D6:EB:A4:43:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/754efc95-03b1-3c8f-a5cd-8ab2094585a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.150.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a7:f0:8b:61:15:2e:d8:1b:b6:23:e6:c9:97:08:a2:67:36:
         0b:01:87:bb:e6:07:96:9f:31:d9:38:5f:76:74:9f:ee:9f:a1:
         8a:86:92:05:d9:32:56:5f:79:21:6e:ec:60:44:12:62:b6:8f:
         0a:3a:bf:d5:3a:5e:cd:7c:15:09:ba:68:9d:76:72:44:71:99:
         20:ef:10:f7:29:43:b5:8b:30:d9:eb:87:c8:a9:36:4f:39:7e:
         34:e7:18:57:eb:25:d3:bc:75:65:87:71:1d:5e:2a:15:d2:f2:
         6e:9d:19:61:8e:d7:d4:98:ee:d8:6e:12:5f:8c:3d:68:38:50:
         98:99:31:6b:eb:c3:14:24:70:24:fa:32:6b:88:8d:de:7b:83:
         ae:12:09:b8:e2:a7:71:96:63:43:48:80:86:64:aa:af:44:61:
         28:3a:65:1f:bf:7f:ba:84:92:c4:52:18:98:ec:06:ff:11:17:
         09:1c:8f:07:d4:81:0a:2f:c0:4c:54:77:4f:95:74:8b:41:64:
         75:e7:04:67:ec:19:7d:62:27:79:2c:38:df:f2:ee:69:a6:04:
         c5:6c:af:aa:db:eb:a6:86:f9:c1:1c:38:a8:b6:13:98:fd:87:
         67:61:fd:f0:99:3b:a0:29:1f:6b:de:95:75:be:93:51:99:1e:
         4a:35:a9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:14 2025 by rpki-client