Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8be21a9-87ec-3640-910d-719aacf79c0a.roa
File:                     e8be21a9-87ec-3640-910d-719aacf79c0a.roa (raw, json)
Hash identifier:          /Z8QEptQCB7PC1EyTHc15nO8zxM2wi1A+87g0+TbLOE=
Subject key identifier:   C8:F4:C2:95:8F:27:59:71:AC:45:22:95:DA:00:79:BA:A3:47:A1:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584814406C6F595008319A37E880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8be21a9-87ec-3640-910d-719aacf79c0a.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        98.199.228.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:40:6c:6f:59:50:08:31:9a:37:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=36fc26dc-36f2-49f0-aad7-b86e03ce3af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:9b:9d:a8:31:23:6b:e4:3d:03:d0:0e:4c:
                    6d:58:3e:7f:b1:9b:ec:4d:20:e9:b1:7f:7b:95:33:
                    b2:ac:1f:6a:5e:4c:0b:12:33:d5:77:7c:e8:ea:c0:
                    da:42:0f:30:f2:22:b1:bc:f8:b4:fb:47:4d:cc:39:
                    a0:6d:04:3c:89:66:f4:13:8e:79:3a:2b:be:bd:e7:
                    66:9a:c0:45:eb:92:b8:fe:7e:21:7c:f9:7d:00:78:
                    83:ed:f8:26:57:e8:36:17:af:59:31:13:b6:b0:69:
                    4a:c8:e3:48:54:fc:da:b6:67:0e:76:ba:8b:4f:6c:
                    33:13:eb:e0:ca:9d:70:bf:8a:89:14:43:52:dd:45:
                    98:bb:fc:1f:71:3e:3c:27:be:98:0a:bf:de:2f:fe:
                    2f:80:f7:19:11:31:9b:fc:5a:47:3b:46:48:37:c3:
                    d7:5d:5d:65:10:c2:80:ea:e7:91:21:9d:84:56:1b:
                    e0:76:da:15:d6:12:b2:63:96:13:0a:92:a3:6a:48:
                    15:79:e5:22:94:e3:6f:49:42:58:fa:78:36:54:8a:
                    55:40:42:af:05:dd:7f:b5:77:7e:f3:f5:1d:99:9d:
                    63:1d:77:3d:31:62:95:dd:b9:a3:8a:35:88:88:9b:
                    9e:44:42:aa:e4:e2:fe:48:af:ef:e4:79:4f:6e:65:
                    5c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F4:C2:95:8F:27:59:71:AC:45:22:95:DA:00:79:BA:A3:47:A1:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8be21a9-87ec-3640-910d-719aacf79c0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.199.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:aa:56:08:a2:b3:29:93:90:8e:06:9d:33:7a:65:29:c8:53:
         0d:f9:b4:04:74:ce:e8:96:98:c2:be:fe:db:fe:0e:69:ce:b8:
         47:9d:ae:d1:d6:d3:01:27:60:d5:95:9a:c1:ea:b3:86:d2:0f:
         73:38:d5:40:59:a7:f7:d3:09:22:91:3f:06:80:09:8e:f5:f0:
         ed:43:22:b9:a2:70:8b:6c:e9:1b:03:5b:ec:18:8c:c2:ee:0d:
         04:58:dd:44:65:0b:84:c7:f4:64:00:da:23:e5:d8:d0:cb:30:
         a9:eb:3e:0d:0d:e7:95:cb:be:aa:77:7b:a4:2e:95:f2:23:bf:
         d8:a4:d9:29:bc:a8:fd:19:56:0b:07:80:67:1e:2e:d0:50:f3:
         84:e6:b9:2d:0c:a5:51:eb:2f:db:72:ff:b1:f3:46:92:ee:b0:
         12:05:25:cd:41:46:10:e0:1d:58:c3:6b:49:ca:45:b2:d1:ae:
         78:4f:54:f2:10:44:8c:7f:57:77:95:f5:93:f8:6a:e2:56:d3:
         2e:29:ab:d2:56:26:d4:05:5a:fa:96:ae:b5:32:48:bb:a7:ba:
         4f:90:19:f2:eb:e9:e0:d0:86:44:f5:c3:45:bf:27:80:77:2a:
         2c:10:cd:cb:4e:35:24:c5:86:fe:dd:dd:fb:70:15:4e:25:0d:
         5b:6d:b9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:52:16 2025 by rpki-client