Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d76a9a83-e466-3af2-a87b-84070a2eeed8.roa
File:                     d76a9a83-e466-3af2-a87b-84070a2eeed8.roa (raw, json)
Hash identifier:          RJ1ZthSvoFgX7ioDZrEUVy7v2LtM4q3ikb0SEpOkiJI=
Subject key identifier:   B1:2C:B7:52:94:C2:68:E7:30:C7:3B:3E:68:20:11:5B:D5:45:82:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143C76F53959AC3C52511E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d76a9a83-e466-3af2-a87b-84070a2eeed8.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        98.198.252.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3c:76:f5:39:59:ac:3c:52:51:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=ea808462-0226-4cec-9038-9b93e375d783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:10:7c:71:bb:d9:c3:39:65:88:68:9d:ba:10:
                    09:be:a3:19:97:be:f6:b8:22:8b:d7:64:58:99:b5:
                    a2:c2:8d:fe:d1:01:31:c1:11:0f:a1:98:42:a2:23:
                    6f:6f:e7:a0:49:33:d2:59:35:4c:91:47:16:aa:37:
                    b2:20:ab:3b:8b:ec:dc:07:eb:6e:cf:75:01:8b:07:
                    2a:bf:d4:05:3c:7d:aa:eb:6f:bd:94:a5:9e:46:71:
                    f9:d4:f3:b1:b4:c6:cb:42:f7:ec:c8:b6:77:9a:b8:
                    17:7d:f7:a9:b1:b0:4e:6a:fe:4f:f8:5f:ce:8e:c4:
                    0e:30:a4:77:6b:7b:53:2f:f8:76:7b:1a:f8:f1:da:
                    97:0f:c8:ba:f4:fd:56:62:1c:8e:73:e6:4c:da:d2:
                    c3:b0:4a:26:fb:0a:36:8b:f9:43:b9:0b:d1:bf:ab:
                    8d:c2:59:4f:7a:5a:c3:ff:23:7e:94:fa:0d:f9:23:
                    98:dd:bb:44:46:56:07:65:04:c4:07:52:1d:7c:24:
                    80:3d:0f:81:5f:ea:84:60:aa:1d:21:30:82:ce:fe:
                    f4:41:69:ea:bd:8a:d2:2b:1f:12:4b:c2:c5:16:8c:
                    70:fc:15:af:5d:47:c0:10:4b:75:0b:bb:e1:ac:40:
                    d8:9c:50:cc:db:33:74:41:8c:be:a8:52:d1:de:22:
                    1b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2C:B7:52:94:C2:68:E7:30:C7:3B:3E:68:20:11:5B:D5:45:82:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d76a9a83-e466-3af2-a87b-84070a2eeed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.198.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:b4:e2:7d:68:1b:67:3c:f0:6d:8c:79:0c:d0:00:f4:84:2a:
         91:67:f0:d3:47:8e:df:12:d5:01:e2:d7:b3:39:45:bf:d0:93:
         dc:38:fe:94:89:72:29:09:ca:95:21:a3:d0:7a:0b:6f:02:6c:
         7e:71:2e:1d:b3:f4:fa:b1:b2:5d:4c:51:ca:69:f6:9f:1d:07:
         36:a3:50:2b:5b:cf:5b:07:34:32:b7:f0:b8:23:86:7c:e0:2c:
         86:d2:74:3c:e4:d1:70:25:db:a8:ad:6a:ed:78:f6:26:1f:6b:
         84:20:78:cb:f3:78:4f:82:fc:74:4f:2a:a7:dd:47:a5:85:f4:
         2c:ee:cd:1b:a6:1f:ec:eb:cc:ab:62:bd:0e:38:4c:d2:a3:f6:
         c7:5e:71:d8:ac:f1:16:b7:af:47:bb:40:10:b0:e7:bb:a2:10:
         04:5a:63:3c:66:67:3d:4d:5d:64:b2:10:f2:52:28:0b:15:fa:
         83:24:a9:2c:fd:2a:65:16:38:85:07:8a:3e:d7:8c:fc:e7:d6:
         32:9b:ac:b5:74:64:0b:5e:54:d8:10:ee:29:2b:03:fc:45:88:
         9d:9c:d1:fb:01:5c:8c:a7:e6:f5:44:ee:8f:4f:14:e5:b5:3c:
         5a:6d:e4:fe:f7:8a:61:5e:f7:cd:ee:8d:53:9d:db:b6:e8:b2:
         d3:42:df:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:48:52 2025 by rpki-client