Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80961124-03e4-3927-a127-3c6a5fd5827d.roa
File:                     80961124-03e4-3927-a127-3c6a5fd5827d.roa (raw, json)
Hash identifier:          INp4qUqz07BMyS40O/glaCJQpt7jKWicZsD4JxzxmM0=
Subject key identifier:   A2:04:1E:1B:88:17:67:28:01:62:9B:A6:56:54:6B:1B:8D:E7:5F:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858481440818F5145D90A374E5900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80961124-03e4-3927-a127-3c6a5fd5827d.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        98.34.172.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:40:81:8f:51:45:d9:0a:37:4e:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=41a02595-3ee9-47f7-87b4-ce52fa0ac1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b8:a2:4e:df:27:18:28:3e:f3:4d:a2:36:85:
                    7e:f3:3f:b8:96:3e:31:7a:62:c9:cc:94:65:4a:03:
                    c0:f8:6d:f4:77:85:bc:df:b2:49:e8:4a:f4:66:da:
                    4d:4a:c1:19:26:a3:04:1e:0c:c3:2c:6f:b9:8f:af:
                    67:e2:fe:df:a2:7a:78:75:59:0b:94:3d:d3:27:d9:
                    af:93:ca:61:8e:d5:62:fe:69:56:71:04:08:d5:50:
                    a7:59:c0:99:0a:d7:40:ef:92:7e:89:1c:23:bd:74:
                    0b:f9:e4:1d:ba:07:38:f5:3d:51:f0:55:76:6c:20:
                    0d:40:27:2e:a1:69:70:ae:97:99:30:ad:c0:e5:0c:
                    16:7b:84:0f:1f:09:0a:a5:0d:ae:de:f8:ce:6d:d5:
                    99:db:08:22:ad:3b:e0:49:7f:ef:ce:e1:58:77:f4:
                    37:40:3b:c3:ca:09:44:94:72:37:76:f6:6d:8f:35:
                    07:02:74:dd:68:2d:06:a3:cb:f9:39:1a:2d:34:88:
                    bc:6b:85:aa:f6:ed:3e:bf:68:3e:84:02:59:e7:13:
                    5a:d6:54:f1:05:52:b8:fb:9b:e8:83:5d:3b:4b:4c:
                    c8:90:64:f8:f4:18:8d:60:3f:16:f1:cd:e6:30:e8:
                    2d:9b:94:a3:0f:03:49:0a:29:ea:6d:9f:b2:a8:52:
                    0c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:04:1E:1B:88:17:67:28:01:62:9B:A6:56:54:6B:1B:8D:E7:5F:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80961124-03e4-3927-a127-3c6a5fd5827d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.34.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:4e:52:98:93:61:cf:38:50:18:de:74:94:c1:fe:05:43:ff:
         14:ba:5d:a7:2c:31:1f:fa:bf:98:bf:bd:22:4a:8c:39:8c:4d:
         e1:54:f3:c6:b2:3d:08:a6:c8:c9:40:ec:1a:b9:bb:29:0a:09:
         ba:9e:d0:ec:dd:3a:4a:2f:11:e4:48:bf:ab:6e:d0:f3:d1:32:
         d3:6e:8d:9a:3b:cf:1c:cc:2c:c7:fb:d8:18:84:09:11:f8:ce:
         3c:66:49:d0:55:0f:f8:79:ff:74:0e:57:20:37:24:d6:7c:07:
         7f:8f:a9:78:ec:97:98:05:3f:8e:4d:1d:8a:70:d6:4e:af:63:
         c2:d0:ff:28:fe:41:3f:9f:54:52:b0:bd:ae:62:a3:e1:c3:ff:
         ee:11:2b:c8:bb:87:70:be:05:9f:54:4c:ee:33:83:0c:65:09:
         2b:c9:f2:2a:0a:fb:df:a6:12:60:03:49:e5:a6:d3:8b:98:48:
         0d:9b:ca:98:19:8d:44:1b:af:76:57:93:cb:8a:d2:c9:c3:28:
         87:d4:43:ce:90:e0:71:2c:92:28:f4:f0:2d:73:d2:b7:34:34:
         71:70:06:e0:3f:88:8e:95:86:be:ca:d0:f5:fa:d4:1c:f9:ca:
         df:b0:4b:c7:32:55:8f:99:e7:03:5e:59:40:d1:18:68:37:94:
         2e:2f:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:57:50 2025 by rpki-client