Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76c6ef3a-5973-3672-8926-730b1db025ad.roa
File:                     76c6ef3a-5973-3672-8926-730b1db025ad.roa (raw, json)
Hash identifier:          lz0Ug9ZPrqEmtQcpr4VV/bss0ar0P0K2M5abfDTnX9k=
Subject key identifier:   1A:48:19:BF:AB:AE:67:1E:2C:E3:BF:B2:E6:8B:84:7A:F2:90:82:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C12FC97484682FD33045E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76c6ef3a-5973-3672-8926-730b1db025ad.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        98.193.26.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:fc:97:48:46:82:fd:33:04:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=374bc2d5-c3a6-4550-a78c-a745c5e86bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0b:c3:88:b9:f0:96:d7:50:9c:26:bf:62:10:
                    0c:91:30:71:ed:07:cd:9c:bc:3d:4e:dc:fc:1f:82:
                    d7:ac:3d:f7:be:76:06:be:97:32:85:88:e4:a4:2e:
                    51:de:fa:02:8c:14:dc:af:35:0c:08:72:e8:87:43:
                    c3:e1:e6:0c:ff:66:a9:0f:00:93:92:ad:7a:ad:b2:
                    4a:6b:82:30:64:67:d3:58:f2:25:8d:0f:80:4f:9a:
                    cc:c3:27:cb:9c:d1:27:dc:7f:8c:2c:f7:bf:6e:8e:
                    d4:b4:38:3d:9f:b9:91:15:13:5e:18:a2:7b:e8:ab:
                    e5:cd:dc:af:e9:33:b6:58:d8:40:ec:aa:7a:26:96:
                    25:48:b3:fa:7e:91:33:bb:af:74:90:10:c2:36:34:
                    38:20:dc:f9:6a:84:8e:47:cf:0f:8a:e6:2a:14:61:
                    09:7f:66:43:68:71:c0:74:90:19:84:2d:16:ad:8f:
                    32:5b:72:50:15:9c:b3:3d:c1:fd:1d:da:7b:1d:ff:
                    55:c9:3b:89:7b:37:ac:69:05:d0:06:91:49:85:9b:
                    fe:0b:ac:2a:63:62:44:dc:25:5e:a4:f4:46:b8:9f:
                    d4:9c:6e:f8:e8:cc:5b:65:56:37:16:5c:26:d7:5d:
                    32:59:94:cf:7f:63:1d:4e:9d:ae:d0:80:2f:94:e5:
                    db:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:48:19:BF:AB:AE:67:1E:2C:E3:BF:B2:E6:8B:84:7A:F2:90:82:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76c6ef3a-5973-3672-8926-730b1db025ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.193.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:8f:f6:42:b8:ae:be:8a:0d:47:5d:49:2f:fc:ba:8c:6b:b1:
         d3:79:7e:2b:53:66:a2:49:46:0a:1e:48:80:c5:21:6a:47:14:
         43:80:68:aa:48:71:2a:93:0f:80:e1:89:a9:f0:65:1d:75:47:
         e8:3b:ab:44:35:13:0e:ca:b3:c2:07:8b:29:bc:bb:e6:9a:8c:
         39:05:9d:f6:70:1a:68:69:7a:c3:eb:09:32:33:68:5b:a5:c7:
         f0:03:5a:6f:cb:c8:02:9c:84:f9:50:a2:8d:9a:c9:40:e9:de:
         f1:34:30:f4:54:7d:8e:b1:62:89:7c:5c:23:07:b2:34:7c:ee:
         5f:3b:0f:6b:0c:fa:e9:ec:ec:56:01:de:10:95:7a:a8:f4:a0:
         dd:56:e5:f3:f7:b9:03:a8:d6:32:e7:3a:bf:52:0d:5b:c4:5d:
         0b:a0:9d:21:da:c3:0b:58:a1:4d:c7:f9:c1:5f:96:91:a2:ff:
         6a:27:60:84:f5:df:1e:5f:1d:fb:e7:27:67:2e:24:50:a0:22:
         cd:60:4c:99:dd:6c:77:bd:e8:3a:95:d2:df:79:34:49:f0:20:
         57:fc:e4:c1:4e:60:2c:f2:3b:2b:bf:fe:2c:3a:5f:d9:e6:9e:
         5e:cf:be:3a:62:29:ae:fb:d2:d9:e1:1a:b3:c3:f6:26:03:4c:
         41:6b:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:27 2025 by rpki-client