Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91bed992-f038-3f9c-8de3-c42fcc824e4d.roa
File:                     91bed992-f038-3f9c-8de3-c42fcc824e4d.roa (raw, json)
Hash identifier:          l3OZoQGZu/lZdQ1rO0zi1WRuna/Wm/jj9Byx521Tp+4=
Subject key identifier:   F5:33:9D:33:52:3B:B4:91:48:49:0F:C7:E7:5B:8E:22:A8:89:4D:41
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C11455258F02C343CE86F30
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91bed992-f038-3f9c-8de3-c42fcc824e4d.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        76.29.46.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:45:52:58:f0:2c:34:3c:e8:6f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=839ccf32-69f9-43c5-8afc-2fbc0a9f79d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cc:9d:d9:4f:37:3d:e1:cc:63:e3:36:4b:6c:
                    2c:34:42:4b:de:44:75:b8:12:35:c6:83:6f:e6:0f:
                    27:6d:64:a2:e1:56:6a:c7:83:9e:1e:12:bd:45:73:
                    76:a6:61:3d:13:ed:ae:6d:36:a2:49:1d:87:70:eb:
                    5e:04:49:14:97:e5:6d:69:89:9f:5f:50:22:a5:e8:
                    fa:c1:ab:47:73:7a:60:55:7e:d1:29:84:2d:da:2c:
                    db:56:bd:ce:4e:24:9a:ff:00:2a:04:2f:bb:36:58:
                    c9:01:73:7c:e6:f0:f5:15:51:4a:f9:ba:11:da:25:
                    a5:70:9d:1b:23:5d:d2:2a:16:00:45:d6:93:cb:94:
                    e5:70:56:23:b1:c0:35:00:d2:dc:9c:8d:f1:b7:b5:
                    59:c0:85:d9:c9:60:bd:e3:f1:2a:4e:8e:0e:27:88:
                    b1:96:ae:48:95:f0:c2:47:ef:4f:9f:8e:f8:e6:1c:
                    aa:4b:d2:cf:83:a0:59:c1:45:aa:53:b9:63:9b:0c:
                    38:d3:1b:1e:90:ba:a0:6e:11:c7:ee:18:a7:0b:c1:
                    26:81:25:ed:57:c9:b8:0a:62:a7:91:2a:4e:33:e2:
                    34:b2:48:41:38:90:98:ea:60:95:e4:a5:fb:dc:5e:
                    6e:41:b4:59:af:8d:4f:09:b4:1c:45:45:7f:4b:11:
                    cc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:33:9D:33:52:3B:B4:91:48:49:0F:C7:E7:5B:8E:22:A8:89:4D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91bed992-f038-3f9c-8de3-c42fcc824e4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.29.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:91:c5:fe:62:32:08:f6:a9:e9:1a:4d:60:8f:88:47:ab:a6:
         69:39:21:8e:de:61:f3:bc:48:e0:ff:c5:09:df:c3:e8:11:28:
         0f:fe:11:5d:5d:2e:f1:1d:53:da:52:53:73:ed:32:ca:20:9b:
         d4:b2:3d:55:20:98:7d:aa:5c:bb:b7:55:90:06:ab:70:cf:15:
         e6:61:18:5f:cf:d9:59:ba:49:a1:41:10:05:1b:34:93:8c:eb:
         3d:72:4a:48:c8:0e:a8:f2:03:93:25:f7:d8:46:98:c0:47:4f:
         73:06:0a:73:80:d5:e0:7f:88:9c:3c:1e:20:68:95:85:1b:29:
         9b:78:ff:b4:6e:00:80:a4:23:72:21:b7:0f:2a:00:72:df:4e:
         c6:c0:a7:13:25:b1:08:ec:4d:44:47:cd:34:58:e7:26:d7:ab:
         37:56:b7:07:a6:7d:40:6c:c1:67:69:f8:d2:52:f6:71:55:dc:
         44:fd:46:5d:ed:15:98:a8:03:8e:c0:23:92:cf:75:e5:df:ed:
         58:fc:ed:2d:c4:15:5f:0a:c9:07:7d:15:44:95:9f:36:a7:69:
         f0:bc:77:60:1b:59:a4:0d:cd:8b:b1:4f:9a:0f:e7:89:07:f7:
         0b:15:01:13:b5:ed:5e:01:9d:a3:00:5d:27:63:a4:48:74:58:
         da:0b:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:28:54 2025 by rpki-client