Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e286e22b-a863-3590-bacf-f86f9cebe303.roa
File:                     e286e22b-a863-3590-bacf-f86f9cebe303.roa (raw, json)
Hash identifier:          TVT+zNb13y707CCltWxFJiPDwfSLenH2cXfZxnJQsgQ=
Subject key identifier:   37:A9:42:C0:EE:29:F0:87:60:76:60:7D:B9:32:17:25:09:41:DF:AB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848144032CA4568DDCE11CC0C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e286e22b-a863-3590-bacf-f86f9cebe303.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        76.30.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:40:32:ca:45:68:dd:ce:11:cc:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=71b20d0f-2cdf-4c2e-83ab-3e8c86f89e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:5b:3e:65:b4:38:c2:28:70:58:4e:59:aa:43:
                    9f:b3:83:0c:36:b1:a4:b1:2f:a9:6b:ab:06:7a:e5:
                    e2:b2:5d:2f:38:d2:ba:73:2d:7b:b3:6b:56:06:44:
                    65:b7:bb:00:c1:72:34:7e:55:fe:11:75:e7:d0:b0:
                    de:e2:a5:e9:98:bf:d5:d3:03:73:11:3b:9a:b5:8c:
                    ea:ba:06:85:55:ea:bb:dc:76:a0:cf:da:a1:cb:53:
                    da:24:ef:bd:3c:fb:b3:be:e7:52:8c:ee:dc:a9:6c:
                    27:6d:7e:fd:b7:84:0f:d4:5d:3c:9c:d7:ad:fe:84:
                    d3:b4:b8:f4:f8:83:f0:38:fe:e4:cb:1b:94:16:1e:
                    e4:c1:4f:be:c2:91:7a:b0:9e:5b:9d:f9:75:fa:f8:
                    35:4b:2e:44:e0:c3:4b:c6:90:37:82:69:87:ef:6d:
                    f2:e3:93:89:cb:3e:c6:0a:e8:56:58:f9:6c:9d:35:
                    7c:8e:4e:03:5d:69:28:5e:d9:d8:ad:5b:0e:b6:27:
                    f0:06:65:de:81:75:e3:7e:e9:43:f5:f8:bd:04:07:
                    b4:32:53:67:1c:00:5e:c6:7d:dd:a7:84:a4:bb:7c:
                    b3:1f:3c:9e:c7:75:37:18:33:45:fd:93:dd:49:6e:
                    ba:ad:55:ea:d4:0b:91:16:b4:64:05:64:7c:0b:cc:
                    7c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A9:42:C0:EE:29:F0:87:60:76:60:7D:B9:32:17:25:09:41:DF:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e286e22b-a863-3590-bacf-f86f9cebe303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.30.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:65:7f:f6:fc:28:3f:fe:40:6e:5f:44:67:da:f4:57:bc:ee:
         57:ae:75:e1:7d:01:b7:f0:9f:03:3d:38:2a:28:11:0b:30:87:
         e5:b7:57:fb:f5:51:33:66:1d:91:d7:b9:2a:97:c9:5e:69:bf:
         04:0d:e9:37:05:5a:f4:d3:23:92:be:47:16:5c:62:82:b7:55:
         7f:31:b0:46:8c:82:b8:ca:9e:6a:af:14:a0:12:c3:db:9d:2e:
         59:f0:00:0a:90:f5:3c:bf:d7:ac:17:3a:61:9e:ec:cb:d4:24:
         2c:71:7c:93:70:fb:62:6a:09:4b:c9:b6:dd:7a:f4:1c:e9:1c:
         bc:f7:a8:dd:ed:75:9a:6b:30:34:ab:29:77:15:36:cd:79:8f:
         78:95:74:21:dd:02:1a:ed:3b:ae:ca:a9:04:93:ad:06:ae:ca:
         7d:60:72:71:01:02:9c:db:b6:46:4a:87:f9:ae:43:23:4d:7b:
         b0:8a:f9:03:a1:62:26:4f:5b:a2:c8:5d:09:1c:27:7b:df:e0:
         11:14:21:fc:7e:b5:02:47:75:c4:94:cb:b0:71:dd:91:4c:89:
         ea:08:a4:65:b5:bf:9c:c6:7b:81:e6:ab:32:fe:0e:f7:98:49:
         b3:f9:75:71:d8:86:a8:3c:fe:11:cf:62:10:43:cb:1b:b4:95:
         af:72:dc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:13:52 2025 by rpki-client