Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b0786a5-011f-3065-bb5a-42ab4f2180dd.roa
File:                     8b0786a5-011f-3065-bb5a-42ab4f2180dd.roa (raw, json)
Hash identifier:          3oIoeWRKv9gJPUKvAD+W4tYCfysZlboPNjrrkVEgl0E=
Subject key identifier:   3F:C5:0E:A7:2B:41:E0:D9:78:51:E9:DF:B1:E9:1F:82:F9:04:DD:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C14B4140A219031F98EFB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b0786a5-011f-3065-bb5a-42ab4f2180dd.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        76.102.48.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:14:b4:14:0a:21:90:31:f9:8e:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=d359e407-6d8e-4f7b-a8d3-e20952d9b1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:3d:6a:47:0b:73:c9:ad:05:3b:4a:b7:1e:
                    ff:1c:51:6d:57:c0:ba:4e:a9:d0:e7:64:cd:3a:c4:
                    c3:4e:7f:70:0c:2e:58:d9:92:32:20:2c:cf:d9:9b:
                    7f:a0:52:8e:92:af:f2:f3:92:8e:be:2a:ae:58:15:
                    9e:d4:f3:e1:59:e4:78:5f:00:c6:41:f4:24:a8:9a:
                    40:ae:82:8f:cf:a7:7e:98:9e:63:c4:2d:a2:59:84:
                    a7:3d:94:e4:53:a9:5f:bd:8b:93:18:08:c1:2b:d5:
                    61:37:fa:cc:1c:a7:59:a9:60:5b:51:75:e8:ea:08:
                    f3:77:99:b4:78:ea:3e:e2:9b:95:f4:ee:b0:f4:9b:
                    9e:ee:f6:4f:54:a9:f7:e5:2e:d1:c2:80:88:3b:27:
                    6d:c1:84:e7:10:96:bc:1c:53:cd:d2:5a:c8:bd:d0:
                    ad:e4:75:1b:4a:ff:20:92:0c:ee:b4:a5:19:01:97:
                    de:83:d9:57:e3:84:1c:11:77:39:88:4e:43:1b:d2:
                    9d:2e:e4:9c:f9:19:ce:1e:73:9d:d7:95:21:85:22:
                    4c:70:ad:37:77:37:ab:23:2a:95:b6:af:33:89:6c:
                    81:c0:78:27:43:60:40:e2:50:fd:ef:6c:f9:cc:97:
                    60:2b:4b:d8:5b:59:6a:e1:d8:b9:19:25:e1:16:5c:
                    89:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C5:0E:A7:2B:41:E0:D9:78:51:E9:DF:B1:E9:1F:82:F9:04:DD:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b0786a5-011f-3065-bb5a-42ab4f2180dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.102.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:bc:12:e4:2a:39:02:6f:b5:54:01:8f:4c:1f:26:ec:b0:7c:
         ba:2d:33:94:a0:b3:a4:b8:05:14:31:df:25:5b:63:c9:a1:b9:
         47:d5:c3:b5:a0:28:cc:42:8c:bb:88:ec:94:e8:76:3c:ba:8c:
         d6:74:cc:33:1b:06:6f:25:58:b6:20:16:83:51:f6:03:9f:65:
         2b:27:10:ff:61:07:a0:e8:04:f8:c5:6e:f6:e0:76:ab:74:91:
         ec:a6:9b:48:4a:d5:16:6f:f5:c9:1c:79:3b:31:bb:30:cf:2f:
         a5:07:87:4c:3b:c6:7c:b6:fe:bf:7a:a9:44:fb:b3:41:5e:dc:
         c9:24:55:3d:30:34:04:cb:de:ed:79:03:65:be:c8:e4:4f:6f:
         6f:86:fe:f2:76:ae:f1:88:85:6d:7d:5a:5c:d5:fc:86:9b:b5:
         65:e7:b5:8f:82:7e:25:79:f2:ed:01:75:50:65:d1:17:f9:29:
         4d:14:c1:9d:b2:70:8a:bc:dd:46:70:77:05:d2:25:cf:98:2c:
         18:48:57:d2:67:5b:62:5a:79:8e:26:5d:4e:c6:c9:19:81:b4:
         ab:67:14:76:39:51:1b:d0:ba:07:ef:c6:c1:1e:73:52:a5:dc:
         15:e4:d1:b9:49:8a:75:07:18:5c:c3:60:c2:74:fa:c7:ff:9c:
         2b:c2:93:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:31:39 2025 by rpki-client