Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a5936ef-25b3-319d-bc23-1e1905972d27.roa
File:                     9a5936ef-25b3-319d-bc23-1e1905972d27.roa (raw, json)
Hash identifier:          pFsNySOAeYOr/7szCOlh0esb+Ft+4NhQgsP3rN+vfes=
Subject key identifier:   8F:A2:45:13:4B:15:59:FF:19:6A:96:22:E6:44:A4:71:CA:E5:AE:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C14B3EB5CB4EF647B413800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a5936ef-25b3-319d-bc23-1e1905972d27.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        76.102.44.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:14:b3:eb:5c:b4:ef:64:7b:41:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=c7ea07e7-f448-4a34-8aa1-e16d6235b9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:d0:ca:35:4d:72:dd:cb:ba:b1:5d:6f:cc:
                    74:2a:45:0a:a3:d5:1c:3f:46:41:11:42:00:29:d8:
                    2f:57:d4:97:cc:5c:4a:c3:d1:8d:b5:9c:1b:4e:08:
                    18:92:3e:c1:60:83:23:f4:e0:3d:c7:f9:b5:d2:80:
                    29:be:01:f9:cc:20:84:74:c7:8f:c6:6e:ba:e0:6d:
                    95:2e:2e:01:ec:28:1b:43:00:41:0d:7a:9f:c6:ef:
                    28:ba:12:9c:7d:0f:14:f2:38:4d:ae:58:22:1a:05:
                    a1:1e:85:11:5a:8c:58:c5:b9:47:d1:f4:a4:87:c4:
                    b0:05:a6:b2:27:de:a4:72:6f:18:42:24:8d:a4:e5:
                    0c:b9:73:42:c7:bf:1f:c8:75:49:21:6c:ec:16:6d:
                    d3:5d:7c:78:39:e9:f3:5e:c0:40:86:cd:88:18:1c:
                    25:d6:89:bc:cb:b3:23:f6:81:39:68:31:8a:60:3d:
                    bc:43:4c:15:5a:80:4a:e9:6f:53:8c:c8:14:f2:86:
                    b6:0f:2c:7c:0c:cc:ac:09:b1:8f:ba:6c:df:c6:63:
                    be:a7:a4:85:ad:ec:ad:3f:39:e6:ee:20:39:70:94:
                    23:55:f8:bd:72:12:9a:c1:f5:a4:f0:08:52:23:58:
                    39:7a:ec:e1:8b:80:04:91:9d:85:80:70:31:4a:cd:
                    6a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A2:45:13:4B:15:59:FF:19:6A:96:22:E6:44:A4:71:CA:E5:AE:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a5936ef-25b3-319d-bc23-1e1905972d27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.102.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:9f:4e:52:d7:cd:8f:f2:e9:df:d7:17:15:4d:0f:ea:89:67:
         c2:94:6a:e7:7f:28:62:83:05:3a:fc:09:0c:ac:a6:10:4b:55:
         9f:df:43:43:62:f1:16:25:6c:15:a0:78:68:19:57:5b:b1:3a:
         d4:1e:2b:66:59:37:f8:33:f5:29:9d:6a:e0:ee:65:df:86:7c:
         87:9a:ea:d4:2a:77:f1:42:9f:14:a1:da:09:52:16:b7:b7:a3:
         6b:68:2a:e8:bd:42:fa:a2:44:50:d6:23:6f:4a:d3:70:16:b3:
         65:e8:6a:a0:79:db:66:1b:1b:e2:50:a1:71:88:21:2e:85:8f:
         80:2e:ff:8b:06:2b:f1:5e:7e:69:bd:90:87:a6:0c:8b:1f:f0:
         cd:86:5d:82:72:22:39:9f:5f:25:ff:b8:49:54:1c:c0:a7:05:
         76:aa:87:3f:e3:e0:e8:11:0c:af:1c:eb:56:8c:b4:a4:29:6e:
         3b:15:ec:dc:1b:2b:48:d3:16:f9:2f:2b:0d:5a:a5:e2:97:df:
         6b:29:37:90:9f:e7:78:03:27:8d:b9:f2:93:b5:49:f8:14:c3:
         70:f9:3c:3c:92:af:fa:38:45:22:46:ac:92:7f:02:e7:31:c7:
         75:df:c6:c0:18:24:24:da:73:11:62:be:8e:08:9e:e5:26:71:
         d8:24:13:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:00:48 2025 by rpki-client