Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/966253e9-3d1d-34fb-a403-f77974593a63.roa
File:                     966253e9-3d1d-34fb-a403-f77974593a63.roa (raw, json)
Hash identifier:          DYL1m2ELkZBFCpOBP0FWRD+RdgzfWmSaBwkG29dVdlA=
Subject key identifier:   95:C0:D1:6B:FC:62:64:87:50:56:7E:62:29:68:EC:70:21:09:79:2F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C14B857D28DB05AFF11BE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/966253e9-3d1d-34fb-a403-f77974593a63.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        76.103.156.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:14:b8:57:d2:8d:b0:5a:ff:11:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=5fed5c22-0444-40e9-9fe8-5f8d84abff86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:ec:c2:78:b8:7b:30:7e:51:66:82:16:72:
                    90:81:c7:e3:4f:31:3b:c7:bf:ad:38:55:f4:f9:74:
                    77:74:8f:ee:27:ef:c4:1e:6f:ac:c5:d9:7e:2b:14:
                    4e:da:0c:75:09:9f:1d:aa:59:e2:da:d3:65:40:24:
                    2f:ab:d7:72:67:14:bb:90:a1:25:87:f5:c4:1a:d9:
                    c0:c5:f7:01:f4:41:25:67:9d:f0:b2:6b:fb:15:cd:
                    61:36:57:95:36:28:8b:7b:60:b2:90:5e:94:9a:72:
                    5d:c0:81:3d:69:cf:97:0f:e8:fe:51:59:f6:26:1e:
                    83:50:ef:27:79:91:b9:3f:64:14:4f:84:7d:24:32:
                    f9:27:8a:c3:8b:dc:34:17:bf:c4:5f:4f:5d:5d:58:
                    82:5c:89:81:59:90:f5:3f:ad:e1:91:1b:bb:8a:f5:
                    d4:b9:2c:b4:e0:93:86:8f:8a:dd:0b:61:32:ed:b0:
                    22:a1:8f:5f:9c:44:65:06:65:59:b3:1e:c7:19:23:
                    d5:94:a3:26:02:da:11:8d:72:89:2c:ca:f4:cd:cd:
                    73:a4:89:10:ea:70:8e:25:a0:08:fd:3a:57:76:c7:
                    e9:52:4a:13:b2:c3:97:78:9b:36:26:d8:d5:23:cf:
                    91:a1:a2:c7:48:96:d0:9b:d5:28:5d:c4:17:be:5a:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C0:D1:6B:FC:62:64:87:50:56:7E:62:29:68:EC:70:21:09:79:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/966253e9-3d1d-34fb-a403-f77974593a63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.103.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:23:99:5f:5e:05:57:9d:d6:aa:19:86:f9:f4:44:e2:f7:87:
         9f:31:b5:00:27:fb:f2:2e:1b:99:8f:c2:05:57:02:3d:af:53:
         f0:a3:c1:f6:14:df:cc:3e:02:98:40:59:10:ad:1c:f7:ca:8f:
         72:02:1d:b9:b6:53:ef:7d:12:4e:8a:b3:79:62:70:8e:e2:04:
         48:64:33:e5:6a:73:f5:9a:aa:5d:85:35:5c:ff:37:47:60:c2:
         47:e6:02:ee:3a:b0:1d:de:da:f9:76:ce:d1:bf:42:0f:9a:5f:
         89:fa:03:b3:06:a0:30:a3:c8:61:34:92:f4:f3:4b:f1:44:02:
         7d:ec:eb:a0:22:d8:04:61:20:0f:e4:c8:0a:81:2a:b7:80:50:
         3a:78:62:89:eb:46:25:e6:2a:2a:72:3d:2d:35:7c:be:99:b3:
         04:bd:34:59:e8:a5:fc:7d:67:f3:aa:bb:43:b7:60:10:3e:6b:
         d1:aa:c0:38:b4:96:96:ae:e5:c6:7e:55:56:5b:5e:13:a0:14:
         51:43:19:75:c8:82:60:1f:9f:87:88:65:1e:04:68:34:7c:5a:
         28:2b:b4:0d:38:c4:0d:2e:ca:b9:57:3a:6d:e2:28:0d:65:9a:
         b3:2e:f9:bb:dd:bd:d4:ad:a7:58:55:6f:3f:1f:a4:00:e4:ff:
         4a:b2:ad:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:42:36 2025 by rpki-client