Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bed4b083-7042-35f5-9215-610ff57a4459.roa
File:                     bed4b083-7042-35f5-9215-610ff57a4459.roa (raw, json)
Hash identifier:          Qkb8eqRFPQWZ8iV/+5N40c9ptMqyUGvIyqq8dXGxdhE=
Subject key identifier:   47:7D:C3:1A:78:BB:2B:5D:F3:DE:53:F9:D4:19:6A:FC:26:B7:E8:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C11E768F3E995DA21078000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bed4b083-7042-35f5-9215-610ff57a4459.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33660
IP address blocks:        76.149.136.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:e7:68:f3:e9:95:da:21:07:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=43c3ade0-0ae3-438e-a4dc-1790b4b902b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ab:9f:12:9a:d5:62:97:15:5d:f5:16:cf:38:
                    01:8b:88:c3:8b:1f:12:1b:73:de:7f:73:5c:f0:a8:
                    e9:c6:22:67:85:b6:0f:d0:58:fb:5a:40:39:62:ac:
                    2f:ae:c6:58:92:1c:23:45:2a:35:36:3d:ab:1c:fc:
                    59:47:55:e4:4c:dc:87:92:91:41:cd:2f:81:90:e1:
                    13:f5:32:e0:79:07:4c:f7:40:dc:4e:ab:6c:f5:fd:
                    77:cc:f8:69:85:02:08:f8:21:e8:61:f1:76:cd:22:
                    3c:99:cb:5c:55:8d:84:dc:ee:28:d0:8f:2a:39:8e:
                    f6:7a:d7:9a:7e:7a:80:f3:0e:c0:42:a1:53:63:b5:
                    7b:37:3d:4f:c4:18:d5:b8:e3:b3:31:57:9b:38:5a:
                    73:3c:43:54:1f:5f:e0:96:c7:ff:98:19:7c:54:35:
                    71:5b:ca:d5:00:d7:58:20:9e:c2:78:d6:0e:00:30:
                    1f:7f:69:55:81:a3:13:6a:bc:95:76:79:f2:4f:a0:
                    c7:7a:31:b4:62:7b:77:1b:e6:c5:fd:70:3a:54:e3:
                    42:51:a4:18:5d:ed:48:34:10:e1:87:54:d1:42:37:
                    97:df:16:3d:ca:14:51:d8:48:7d:2e:c9:88:4f:86:
                    cb:fb:ba:b0:b4:38:60:6f:19:cd:bd:a0:db:1b:57:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7D:C3:1A:78:BB:2B:5D:F3:DE:53:F9:D4:19:6A:FC:26:B7:E8:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bed4b083-7042-35f5-9215-610ff57a4459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.149.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ac:bc:bb:6e:12:1a:86:62:2b:f0:98:a9:52:4f:d3:4e:29:
         07:c0:01:c2:48:30:38:6f:99:75:f8:59:20:14:03:9a:87:41:
         a9:b7:39:81:e8:73:74:e3:a1:8c:27:6b:c3:04:e9:f3:37:d1:
         f8:db:33:ff:11:e5:8e:86:25:97:b9:72:9b:a2:60:9a:98:6e:
         15:b0:ca:54:dd:49:45:94:c2:46:18:a6:b5:50:f5:89:ed:ae:
         b8:8a:a7:97:95:52:45:d7:87:e3:0c:e8:1b:32:b4:47:ca:f8:
         02:b5:d4:46:3b:b0:b6:fa:45:bf:98:66:b6:5c:71:b6:29:45:
         de:54:20:6e:ac:aa:7f:e9:77:a2:a3:52:34:43:b5:11:18:d2:
         37:40:74:a4:d0:f9:be:97:f2:16:f7:cf:98:a0:54:03:50:14:
         96:09:8a:47:f5:05:69:d9:32:f3:a5:f3:1c:e6:97:18:65:32:
         89:82:33:86:14:dc:96:00:89:11:a5:2c:76:c2:34:ef:ba:65:
         11:65:95:b1:ed:c4:e3:87:7d:d5:f0:8b:9d:57:92:e5:b7:ca:
         1d:a7:c0:ed:5a:cc:bd:1b:83:09:67:dc:37:84:45:0a:10:f4:
         1d:80:52:05:8b:c2:fd:5d:40:e9:6a:d7:f0:e0:31:6c:d9:82:
         06:ab:26:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:21:51 2025 by rpki-client