Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6499b64-3d64-3f90-817a-95ab06e6701a.roa
File:                     e6499b64-3d64-3f90-817a-95ab06e6701a.roa (raw, json)
Hash identifier:          7PX0uHuJyIpxdO+nNQfL1BRgO93wYVjhkQZ4dgcWHiE=
Subject key identifier:   8A:07:78:F3:A2:5E:6C:0D:91:0C:4A:8E:A4:53:27:68:7E:2B:69:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584814406760C564AA64095FF180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6499b64-3d64-3f90-817a-95ab06e6701a.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        98.199.108.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:40:67:60:c5:64:aa:64:09:5f:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=31657787-6d80-40a9-a404-230c2b1dddd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9c:9e:c0:0d:0a:38:eb:1e:87:a0:7d:5a:10:
                    20:b1:aa:b9:8a:d2:b9:12:0c:c0:cd:10:87:0c:9f:
                    41:84:28:1f:05:40:bc:2f:ed:43:00:48:11:61:c0:
                    d0:79:23:19:74:74:d7:6b:97:a4:0e:74:fe:7e:dd:
                    64:6d:b1:3f:75:3c:c8:a1:e6:4d:dc:80:96:00:90:
                    6f:30:df:5a:a2:a4:52:c6:d0:b5:ad:3a:ef:eb:c2:
                    d4:1f:0b:1c:98:1e:05:2e:8c:7c:80:e1:76:1f:b8:
                    a8:59:6a:1c:4d:c9:83:46:6b:f6:5e:c0:6e:c6:8a:
                    61:f1:e6:eb:f3:61:78:87:5e:7c:4f:c6:0d:ea:f2:
                    36:18:ec:6d:27:3b:8b:9a:ad:75:dc:ee:b2:08:12:
                    97:73:0c:1a:e1:51:fd:ac:2b:b5:be:30:74:3e:0b:
                    de:52:5e:60:7d:9c:f8:d4:93:76:2f:1a:38:1d:21:
                    23:59:ca:50:5c:b3:3c:87:34:6a:4f:77:39:d3:38:
                    43:f3:a2:f3:d0:68:4f:47:64:94:cf:47:dd:88:dd:
                    3a:3e:a7:d2:bb:c9:de:ae:e4:9f:e7:d9:47:d4:b9:
                    fc:2d:b9:d6:bd:a7:d8:af:a8:af:c7:b8:06:d7:87:
                    f1:22:b5:5c:40:50:b6:7b:c5:8e:8d:26:73:1f:6c:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:07:78:F3:A2:5E:6C:0D:91:0C:4A:8E:A4:53:27:68:7E:2B:69:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6499b64-3d64-3f90-817a-95ab06e6701a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.199.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a7:ff:ee:46:0b:dc:8d:81:eb:05:45:6b:4e:2f:a4:a6:22:
         98:71:9e:ed:2c:f7:6a:95:15:e6:66:22:e1:67:c8:fb:ab:6e:
         37:e0:13:6a:22:a2:5d:e8:d7:da:b2:33:f4:98:c7:10:32:59:
         3e:f9:1a:df:fd:35:db:09:52:e3:fa:76:a5:c6:04:59:32:35:
         23:88:83:ce:6d:2e:d9:fe:66:97:67:6b:84:ef:77:72:9b:f5:
         06:ee:2b:29:79:ba:c5:c9:d2:45:33:9e:1a:5c:67:61:a2:32:
         ad:51:ab:34:95:7c:23:20:f1:07:0a:82:a7:41:74:f6:bf:a4:
         05:7b:28:cf:98:41:2d:1a:c9:60:6d:3d:27:ce:72:77:20:64:
         9e:8d:8e:76:07:d2:f8:6f:37:94:a5:5e:ce:87:82:10:c2:ff:
         31:85:8e:b7:86:a5:bb:f3:da:30:3c:04:9e:f6:6d:e5:70:8a:
         12:29:d5:75:e3:bf:26:b8:57:71:76:84:dc:05:c1:bf:30:07:
         de:1a:9d:c4:83:3a:72:95:24:fc:18:b2:f4:0b:31:b8:fa:74:
         5f:fa:46:c3:00:66:87:6a:9f:7c:ae:0e:c8:c0:ca:73:f8:44:
         5b:3c:30:c2:16:09:df:2c:5d:3c:25:24:14:a1:12:a0:a5:41:
         b6:b7:8f:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUQGdgxWSqZAlf8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MzE2NTc3ODctNmQ4MC00MGE5LWE0MDQtMjMwYzJiMWRkZGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZyewA0KOOseh6B9WhAgsaq5itK5EgzAzRCH
DJ9BhCgfBUC8L+1DAEgRYcDQeSMZdHTXa5ekDnT+ft1kbbE/dTzIoeZN3ICWAJBv
MN9aoqRSxtC1rTrv68LUHwscmB4FLox8gOF2H7ioWWocTcmDRmv2XsBuxoph8ebr
82F4h158T8YN6vI2GOxtJzuLmq113O6yCBKXcwwa4VH9rCu1vjB0PgveUl5gfZz4
1JN2Lxo4HSEjWcpQXLM8hzRqT3c50zhD86Lz0GhPR2SUz0fdiN06PqfSu8neruSf
59lH1Ln8LbnWvafYr6ivx7gG14fxIrVcQFC2e8WOjSZzH2wKDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIoHePOiXmwNkQxKjqRTJ2h+K2n7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTY0OTliNjQtM2Q2NC0z
ZjkwLTgxN2EtOTVhYjA2ZTY3MDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsdsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGn/+5GC9yNgesFRWtOL6SmIphxnu0s92qVFeZmIuFnyPurbjfgE2oi
ol3o19qyM/SYxxAyWT75Gt/9NdsJUuP6dqXGBFkyNSOIg85tLtn+Zpdna4Tvd3Kb
9QbuKyl5usXJ0kUznhpcZ2GiMq1RqzSVfCMg8QcKgqdBdPa/pAV7KM+YQS0ayWBt
PSfOcncgZJ6NjnYH0vhvN5SlXs6HghDC/zGFjreGpbvz2jA8BJ72beVwihIp1XXj
vya4V3F2hNwFwb8wB94ancSDOnKVJPwYsvQLMbj6dF/6RsMAZodqn3yuDsjAynP4
RFs8MMIWCd8sXTwlJBShEqClQba3j24=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:29:21 2025 by rpki-client