Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a7bf619-b27d-3221-8538-4e814b7a8b67.roa
File:                     7a7bf619-b27d-3221-8538-4e814b7a8b67.roa (raw, json)
Hash identifier:          MDVL9KiMoQaMEzwzE3PA1vY/pqQ3DU34A1ar8NmU9jk=
Subject key identifier:   DF:A8:2C:EE:91:30:E8:2D:2B:0B:BF:C9:9F:E3:F6:58:F5:55:ED:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C11C4C9160E31055D972200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a7bf619-b27d-3221-8538-4e814b7a8b67.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        98.37.204.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:c4:c9:16:0e:31:05:5d:97:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=66c913e7-7b6c-4f59-ac3d-b96741683d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bc:39:4b:ac:7f:59:ff:bc:5d:d6:97:da:ce:
                    9c:52:61:c8:ac:df:e0:b4:0c:9d:af:bd:86:02:27:
                    da:d5:44:27:0a:0d:68:3e:4a:6c:18:01:5b:d2:55:
                    70:8b:1b:67:33:43:16:d4:dc:cf:e8:01:6d:4e:fe:
                    b3:53:8e:d3:8d:1e:a3:e3:26:44:d9:f5:f0:23:8b:
                    25:bc:e6:eb:3b:44:70:c9:d3:4d:81:a8:c4:57:10:
                    27:81:c0:0a:70:0a:ae:7b:ee:11:17:73:78:9a:d7:
                    c8:49:cd:21:ba:95:42:3a:4a:7c:dc:96:50:cc:1f:
                    40:2c:85:6e:91:1e:e7:1c:99:be:78:7a:76:72:1e:
                    31:7b:20:74:51:3f:6c:bb:8f:13:83:a9:be:c6:21:
                    7a:17:17:70:3f:2e:f3:41:64:f8:e5:4e:d7:72:d1:
                    dc:a8:69:61:93:be:67:76:61:08:80:c7:ec:94:b8:
                    8d:2f:5a:c1:e9:96:d0:52:64:db:b8:97:00:8f:74:
                    ec:3d:a8:e2:a9:0b:82:96:2a:10:fb:38:dc:be:62:
                    26:24:02:f0:82:ad:ff:33:ab:54:d8:b4:58:2f:3f:
                    73:34:b2:81:86:16:8a:e3:ff:3f:82:23:24:5c:00:
                    db:bf:22:ef:37:51:60:aa:c1:bf:47:ac:56:bd:ea:
                    06:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A8:2C:EE:91:30:E8:2D:2B:0B:BF:C9:9F:E3:F6:58:F5:55:ED:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a7bf619-b27d-3221-8538-4e814b7a8b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.37.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e4:5a:e4:46:04:06:b3:86:38:62:df:ad:83:eb:1b:1b:2a:
         d6:7b:00:8c:36:84:96:56:8d:54:61:0f:35:f2:21:ee:a0:00:
         6e:79:ce:1d:4a:81:4b:9f:39:fe:b6:86:71:51:1f:61:f5:de:
         9b:1e:f3:73:10:a3:9a:b0:ac:a6:c8:83:67:03:e2:08:48:40:
         50:7c:13:12:e6:af:01:81:a6:aa:5c:dc:99:8e:68:3e:22:27:
         8f:18:b8:6a:b5:ff:b6:e3:58:f0:ff:bf:84:0d:f7:b5:6b:d3:
         9b:de:7a:50:33:8b:d5:23:fc:5f:c7:a7:01:84:28:be:ba:d8:
         f4:93:28:ad:e7:35:70:f3:8a:9a:96:6f:ad:72:6e:0a:0a:40:
         6f:c6:90:bb:96:1c:d5:c2:95:c2:15:ec:35:5b:5e:ea:bc:09:
         8b:29:80:46:04:74:29:cd:17:0b:d5:a5:1b:3f:50:5c:fe:7a:
         61:d9:42:a8:6e:e3:6d:bc:0b:54:fd:3e:e9:0c:7a:68:3d:38:
         6b:94:63:18:a1:80:ba:23:92:80:f5:c9:1a:c6:68:14:09:e3:
         1f:74:34:e9:0c:d3:1e:ed:b3:6e:40:4e:e3:30:98:97:34:77:
         65:29:08:05:78:bf:ee:03:2f:34:e3:32:c2:6f:e6:87:1e:d8:
         82:e7:45:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:20 2025 by rpki-client