Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5287053-cd91-3262-8593-8225068e2afb.roa
File:                     b5287053-cd91-3262-8593-8225068e2afb.roa (raw, json)
Hash identifier:          7qvWxApZIS/ZE5ra0qs5oyWcyDUWxZ8C35kIK73p1YQ=
Subject key identifier:   53:39:4E:79:A6:88:7F:30:EA:16:1A:22:72:AD:CD:D3:06:F1:95:C0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C115AD843F620EAB86DB3E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5287053-cd91-3262-8593-8225068e2afb.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        98.223.184.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:5a:d8:43:f6:20:ea:b8:6d:b3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=2c2a86c6-c38d-4e0d-b3b3-86fd5f719585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:5a:64:78:a1:a3:db:6d:63:d0:cf:cc:15:
                    48:03:5a:c5:ec:f5:14:0d:22:ca:e7:a1:a5:1e:fe:
                    f0:6f:8f:1f:ce:32:2a:b8:31:f4:d7:1e:80:e3:1e:
                    c4:81:ae:45:fd:7d:b8:69:39:f7:a0:6b:3d:b1:c8:
                    08:b7:9b:3e:d6:02:e0:d2:0a:9e:91:f5:3f:da:6d:
                    34:9e:f8:da:8c:ed:41:c0:b9:b6:b1:9c:71:1e:5f:
                    f1:29:f9:54:0f:23:f7:99:f9:75:1e:e8:a8:ba:43:
                    84:d8:79:93:87:c5:f5:9a:9d:35:43:e5:eb:92:49:
                    26:44:fd:0b:bb:4a:96:cd:c7:56:4d:71:eb:63:79:
                    96:25:e3:b4:7a:8c:8a:52:26:87:a0:c6:13:68:d0:
                    f9:4f:6a:44:26:ea:3c:a6:a1:f0:d8:e7:14:4f:ea:
                    31:ae:c0:c6:48:47:f6:f8:f2:c2:fd:f6:16:f6:a1:
                    d5:d7:f9:e0:52:cf:00:cc:d1:f6:af:3c:60:4f:b4:
                    bc:68:6e:68:8b:a2:68:af:d2:b6:0e:ab:bb:c7:f1:
                    ba:81:fc:2f:37:6d:d1:2e:9a:dc:94:55:6b:b8:3b:
                    23:3c:59:a3:fa:68:46:07:0c:c5:68:0e:ef:99:18:
                    58:f0:a2:c0:66:dc:7d:86:ac:d4:04:d5:4d:49:5c:
                    c5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:39:4E:79:A6:88:7F:30:EA:16:1A:22:72:AD:CD:D3:06:F1:95:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5287053-cd91-3262-8593-8225068e2afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.223.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:1e:13:5e:8f:ca:33:75:87:a7:15:a1:6a:62:1e:6b:9f:98:
         81:39:a9:c9:9f:9a:79:f0:d5:15:aa:8d:5d:f6:4d:80:cc:9e:
         f4:9a:d5:62:c3:2a:41:ed:26:4e:44:ee:a9:5d:8e:74:65:f6:
         ef:e1:a7:71:ea:b1:9e:a2:33:1a:55:16:09:f3:2e:5c:9f:3d:
         8e:ab:5b:c4:41:a0:24:58:aa:15:be:43:79:b4:cb:df:73:e5:
         c2:40:39:34:db:e3:1a:a1:ca:cd:5a:55:dd:6b:83:f9:8d:e2:
         4f:ef:fb:ba:32:e5:5a:d6:3e:6e:98:7a:0e:69:3d:ab:16:da:
         29:e9:58:eb:44:70:bd:4b:91:df:a0:e3:ae:ee:b2:3e:70:6c:
         69:65:68:82:1d:4a:48:8b:69:ad:d2:7a:ea:9f:c6:70:7f:6c:
         b3:af:0b:e1:37:2e:65:2a:11:21:76:5e:ae:c5:2b:ba:6a:fd:
         cb:84:fc:9e:ea:b8:2c:1a:26:ab:fe:50:20:43:5f:44:b5:9a:
         7b:61:b1:af:0e:8f:a2:80:2b:55:02:dd:18:f6:53:6a:1b:db:
         57:ee:14:0a:c3:79:5b:19:0c:7a:6d:8c:8e:d8:9e:2c:fb:f6:
         67:46:f7:80:00:57:7c:38:c1:79:a0:be:4d:51:13:5c:45:da:
         48:2e:b8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:37:11 2025 by rpki-client