Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77083ac8-3eab-3af6-ae84-9c853d048898.roa
File:                     77083ac8-3eab-3af6-ae84-9c853d048898.roa (raw, json)
Hash identifier:          ztiU6dMxaOw2Jiesw9hKsAaJY5rxnKAkf0b+22QlGc0=
Subject key identifier:   80:79:70:AE:97:3D:A7:42:59:AC:64:5C:61:3F:78:BF:34:CD:CE:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1510EBE7EDD1AFC15A8B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77083ac8-3eab-3af6-ae84-9c853d048898.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        98.33.0.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:15:10:eb:e7:ed:d1:af:c1:5a:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=59128144-1eaf-4ced-b823-627746250dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:33:19:f2:47:5d:d4:41:fc:cf:12:8b:e3:a8:
                    03:b0:8f:bb:f6:d1:8e:d3:18:be:ff:a2:19:bb:8f:
                    ae:37:ba:87:ab:26:c0:7d:8a:fd:0b:14:73:33:6c:
                    c9:3b:7f:02:af:bc:2c:e6:94:0b:08:29:6f:b4:05:
                    f6:64:74:f8:df:f4:d3:06:de:22:64:69:dd:e8:87:
                    5b:4f:18:f5:7e:c5:6a:c6:76:84:0c:0f:0e:59:3e:
                    b9:84:0b:38:22:b6:33:e5:4d:d8:45:2a:74:fc:5c:
                    46:56:11:02:b9:50:ed:85:f1:8e:a2:74:6a:4f:8e:
                    96:84:14:4a:37:71:c7:e1:0f:a8:e2:7b:89:b7:a9:
                    41:4e:92:59:fb:9d:50:72:39:91:3b:99:b7:15:b6:
                    8f:e6:47:36:49:b9:98:51:a8:ac:fa:5b:86:80:80:
                    57:f6:06:a6:7f:83:9b:8b:4f:00:42:e2:9a:ba:83:
                    b4:b6:9d:97:4c:c4:d8:38:b1:5a:a5:18:4e:73:fe:
                    68:c1:7e:14:39:1d:fa:ae:96:a5:24:0d:60:6a:53:
                    a2:16:7a:05:d8:70:71:68:45:d7:ce:10:99:1e:90:
                    e6:8c:32:dd:3e:42:b6:8a:b7:06:db:2f:b6:a5:94:
                    58:f6:4a:6b:d3:a1:62:d7:33:9c:07:80:12:37:9c:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:79:70:AE:97:3D:A7:42:59:AC:64:5C:61:3F:78:BF:34:CD:CE:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77083ac8-3eab-3af6-ae84-9c853d048898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.33.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e8:83:bd:55:e0:6f:37:10:98:6d:c7:23:12:66:60:15:ea:
         dd:8e:b2:55:e6:f7:e5:b9:1c:ad:dc:8c:43:af:4f:10:b4:2e:
         05:60:78:dd:2c:f6:cd:a3:34:d0:00:f2:16:84:eb:c8:77:bd:
         b7:4e:e6:d6:0f:c2:b6:91:77:36:23:84:9c:86:9f:16:28:09:
         0d:e9:38:86:9c:dc:dd:4d:81:38:77:2d:fb:15:2b:fc:bc:f6:
         3d:21:d8:50:ca:95:97:d5:8e:2b:57:2e:94:17:06:42:c6:d2:
         7b:9d:55:cc:cf:b8:02:98:40:a6:1a:39:fe:5e:09:59:d0:8e:
         53:49:10:da:86:c7:14:07:83:ec:f2:b7:34:f7:9a:7e:21:ce:
         5a:e1:43:ad:d0:17:34:97:0d:03:ea:97:1a:8d:6d:de:ab:7a:
         ce:8f:e2:cd:a9:bf:26:f8:07:7d:40:a8:41:ab:b0:34:af:ef:
         c2:28:c9:b3:57:7e:e7:fa:dd:a2:87:3f:be:aa:7b:c7:eb:2b:
         fc:cd:4a:4a:f5:a6:c6:93:52:b3:9e:69:27:4b:de:d4:59:1e:
         d3:08:1e:f9:5d:c3:3e:05:51:f9:f5:3f:48:db:cc:7c:a9:48:
         60:73:be:71:57:08:6e:e8:a6:fc:4a:75:94:45:e6:11:83:5b:
         fe:7c:fe:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:32:17 2025 by rpki-client