Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2eb4f59-c6b4-3467-b146-ce9929a777ac.roa
File:                     f2eb4f59-c6b4-3467-b146-ce9929a777ac.roa (raw, json)
Hash identifier:          Mrcc3uqBLB1wS901+tH2bydn7/c3Ke2XNxBHi5PDvS0=
Subject key identifier:   3A:CC:98:18:4E:8B:A2:73:15:79:70:24:4D:8B:29:70:D7:FC:37:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C2738A94D8C5972297C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2eb4f59-c6b4-3467-b146-ce9929a777ac.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33668
IP address blocks:        96.216.134.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:27:38:a9:4d:8c:59:72:29:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=96ce8cb8-ad5f-4512-9652-1edad55bf23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:bd:a6:e3:4b:0e:88:eb:bf:55:98:bc:22:
                    12:c4:70:42:12:26:95:7f:7a:a4:5d:2b:3c:10:f3:
                    d6:eb:b2:ef:9c:8a:86:3b:62:72:eb:5c:dd:04:2d:
                    2b:30:60:da:ad:a1:d7:aa:1b:01:c3:50:93:8b:76:
                    9a:32:0b:36:bd:e2:69:68:42:b1:3f:ac:76:19:1e:
                    16:11:ed:cc:ff:0d:95:d6:79:59:e9:93:7b:cd:14:
                    1a:69:08:62:91:fb:5e:8e:1e:2e:8b:21:b3:17:58:
                    f9:37:13:9a:0d:a0:46:b7:36:ff:8f:fb:28:f3:ba:
                    23:6c:b8:20:68:fa:5e:1e:5e:0e:00:bc:b6:53:63:
                    c8:9c:26:12:14:dd:8f:dc:35:19:59:24:12:38:8a:
                    e3:19:d1:0c:13:43:4d:10:ba:d2:5d:25:6b:af:1c:
                    da:19:7c:40:bf:83:8d:d0:fb:4d:cd:2d:87:77:9c:
                    d9:ba:a4:9e:fb:0a:b4:6c:b0:7e:18:ab:69:53:c8:
                    3a:c1:44:8b:14:6f:37:b3:ad:e5:79:c9:73:25:f8:
                    d9:f4:e1:ca:7a:54:27:8a:82:c7:1b:f5:31:46:34:
                    5b:04:a6:c7:f1:22:a2:f9:00:86:42:3d:ee:6c:24:
                    d6:77:35:68:52:53:33:e5:a6:71:d1:ca:b3:22:1e:
                    62:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CC:98:18:4E:8B:A2:73:15:79:70:24:4D:8B:29:70:D7:FC:37:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2eb4f59-c6b4-3467-b146-ce9929a777ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.216.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:5f:e4:a2:b0:ef:40:1f:c5:98:68:8f:cb:95:e2:74:bb:
         a2:32:52:36:58:db:31:21:53:ea:52:4e:d0:81:b1:c2:9f:10:
         df:5d:21:00:8b:61:f0:37:49:c5:f7:95:3a:19:57:a3:3b:5a:
         eb:f6:67:32:e9:5f:0b:f8:c9:93:7e:bc:7a:d2:66:2a:00:ee:
         5c:b4:55:a8:4d:1b:c7:96:0d:ff:a2:12:53:f9:ea:13:15:a7:
         ca:eb:21:dd:37:3b:c0:af:00:21:43:9b:33:9f:9f:c2:9e:9b:
         50:fc:97:ad:70:19:c5:c1:a0:61:cc:bd:5c:e6:d6:33:24:ec:
         17:15:2d:b3:87:03:29:a7:8f:19:3b:a0:c1:09:56:7b:06:92:
         7d:55:6e:4c:95:67:74:71:eb:4c:f3:00:ee:18:e0:3d:e4:75:
         95:6b:33:58:5d:64:9d:59:35:dc:7d:b2:23:2c:db:35:fd:f5:
         68:2b:b6:28:1a:6d:60:da:62:9a:72:e1:cc:76:ce:e6:0b:8c:
         cc:58:a8:9a:74:3c:9b:7d:20:5e:f7:c7:ce:94:ab:9c:f7:c1:
         3e:94:ea:8a:b6:cc:6a:b9:ec:f0:57:df:45:0a:a3:a5:a1:ec:
         9a:29:4f:b2:19:3b:25:4e:3b:5d:4c:f6:0c:08:70:da:39:19:
         6d:6d:86:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebCc4qU2MWXIpfEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
OTZjZThjYjgtYWQ1Zi00NTEyLTk2NTItMWVkYWQ1NWJmMjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHC9puNLDojrv1WYvCISxHBCEiaVf3qkXSs8
EPPW67LvnIqGO2Jy61zdBC0rMGDaraHXqhsBw1CTi3aaMgs2veJpaEKxP6x2GR4W
Ee3M/w2V1nlZ6ZN7zRQaaQhikftejh4uiyGzF1j5NxOaDaBGtzb/j/so87ojbLgg
aPpeHl4OALy2U2PInCYSFN2P3DUZWSQSOIrjGdEME0NNELrSXSVrrxzaGXxAv4ON
0PtNzS2Hd5zZuqSe+wq0bLB+GKtpU8g6wUSLFG83s63leclzJfjZ9OHKelQnioLH
G/UxRjRbBKbH8SKi+QCGQj3ubCTWdzVoUlMz5aZx0cqzIh5ibQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDrMmBhOi6JzFXlwJE2LKXDX/DdpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjJlYjRmNTktYzZiNC0z
NDY3LWIxNDYtY2U5OTI5YTc3N2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYNiGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSLX+SisO9AH8WYaI/LleJ0u6IyUjZY2zEhU+pSTtCBscKfEN9dIQCL
YfA3ScX3lToZV6M7Wuv2ZzLpXwv4yZN+vHrSZioA7ly0VahNG8eWDf+iElP56hMV
p8rrId03O8CvACFDmzOfn8Kem1D8l61wGcXBoGHMvVzm1jMk7BcVLbOHAymnjxk7
oMEJVnsGkn1VbkyVZ3Rx60zzAO4Y4D3kdZVrM1hdZJ1ZNdx9siMs2zX99Wgrtiga
bWDaYppy4cx2zuYLjMxYqJp0PJt9IF73x86Uq5z3wT6U6oq2zGq57PBX30UKo6Wh
7JopT7IZOyVOO11M9gwIcNo5GW1thkM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:49:42 2025 by rpki-client