Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa
File:                     a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa (raw, json)
Hash identifier:          VGFVeP3XzKjdAjkAc3XEA0ZQhnNfqF/SsVSpcs+dpEI=
Subject key identifier:   B9:BE:E9:E9:02:CB:5F:4A:3D:8C:97:F0:18:F3:1E:E5:F1:71:C9:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858481440822942162ED1EF99D110
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        98.34.184.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:40:82:29:42:16:2e:d1:ef:99:d1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=235dbd4f-e0b3-4d8c-b816-c559ee5c90c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:33:e3:8e:23:40:46:a3:c6:f4:7e:29:24:a5:
                    6f:00:8e:34:39:f6:97:23:82:bf:7d:fb:e0:df:5b:
                    d7:bb:2e:29:ed:02:3d:cc:6c:b0:dc:aa:91:02:7b:
                    f4:cc:a2:2b:15:e0:94:cd:61:a7:51:06:5e:42:7b:
                    e5:06:46:db:31:67:72:f4:28:73:1a:66:5c:52:f0:
                    b2:5f:03:37:f6:ba:7e:97:58:0a:06:0f:af:1f:66:
                    fc:d0:db:50:eb:c6:1f:29:5e:43:bf:8f:13:ae:27:
                    a7:27:3f:a7:01:cd:e7:71:5a:05:70:ba:75:87:30:
                    91:6f:14:f9:ca:53:90:11:e8:18:d0:4d:0c:54:79:
                    69:c0:51:38:38:9f:5d:d6:4a:d0:e7:1e:4c:8d:f9:
                    e2:fc:a4:f5:0f:89:a7:2a:af:39:9c:63:41:2b:af:
                    c9:d9:bb:e8:cf:b5:8b:20:a4:04:98:fc:fe:73:60:
                    17:c8:9a:b8:ee:b0:bd:44:12:b0:bb:bb:a4:1a:1e:
                    02:47:74:8b:57:ba:27:ff:6a:57:7c:cd:4d:73:7e:
                    9c:d8:27:b4:9a:5f:fd:58:d6:5b:ca:36:bb:bf:d2:
                    83:11:50:17:f7:60:19:9e:57:72:d9:a3:f8:1c:39:
                    20:2a:60:60:f3:ef:09:25:54:07:ca:6d:ac:e1:72:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BE:E9:E9:02:CB:5F:4A:3D:8C:97:F0:18:F3:1E:E5:F1:71:C9:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.34.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:66:5c:71:d8:45:6f:d9:a8:8c:b6:4b:7a:7c:2a:57:06:3a:
         36:92:d1:6d:7d:ae:cb:c8:d3:0e:f4:54:d9:cf:51:83:cb:dd:
         0e:be:00:1f:dd:50:e6:0d:3a:e9:17:73:8f:03:54:a8:e0:9e:
         18:91:4e:08:48:1d:fd:7c:22:2e:af:43:44:8f:89:28:60:82:
         7d:7e:7f:03:2b:49:0a:57:47:52:19:fb:ff:06:f9:f8:25:2b:
         17:a4:7f:e1:ad:83:62:e7:79:a8:92:49:20:9c:73:d5:8b:d3:
         04:48:52:9b:e1:ee:10:ba:0a:89:db:47:20:47:a4:33:67:e1:
         cd:39:fb:27:16:7a:a6:d4:61:b1:bf:24:a4:15:86:20:cd:ed:
         ab:0d:b3:f9:07:ab:4c:8f:7d:6b:43:d1:4b:7a:b8:5b:b3:18:
         1d:6f:da:6e:33:5a:82:37:e3:92:1e:45:da:cc:bf:57:49:19:
         bb:24:b8:e3:75:e0:ef:d7:1e:3a:02:ac:a3:65:e5:a8:c5:a9:
         f3:68:c9:5b:3b:a9:f4:92:a4:32:29:7a:34:a2:a2:43:cc:fa:
         c9:d9:3e:be:d3:aa:25:f0:bc:ce:e4:35:77:2b:66:ac:fa:e6:
         36:de:e1:39:6a:f5:a0:b7:f9:3a:c7:96:d0:7d:cd:83:84:12:
         19:87:e0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:00:41 2025 by rpki-client