Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f34e0e55-434d-308b-90cb-495fd5029759.roa
File:                     f34e0e55-434d-308b-90cb-495fd5029759.roa (raw, json)
Hash identifier:          4TZ1Ty+DCR0hDDYhtzRzjooCipXKoPFaY1SUwRcUZMc=
Subject key identifier:   8D:5E:37:27:B3:DE:A2:C1:94:88:D1:CD:10:5B:61:5B:6F:D7:6A:C0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C130D6A476C289E41FAC880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f34e0e55-434d-308b-90cb-495fd5029759.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        98.46.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:13:0d:6a:47:6c:28:9e:41:fa:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=f1294696-839d-4e0b-8dfb-fae8d7bdc4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fc:11:ea:52:3d:75:73:c3:51:98:5c:96:f6:
                    84:6e:82:54:b3:59:01:c6:72:b0:ff:b5:97:dc:e3:
                    ae:72:e8:ef:66:35:2f:c0:14:57:ba:1b:38:fe:f6:
                    54:e8:cd:c0:83:c1:7a:4f:98:4f:e2:a5:74:58:a3:
                    9a:2b:41:06:83:27:0d:d0:eb:e3:61:6c:46:e1:7a:
                    65:4a:ab:92:27:a6:c0:55:3e:3b:0c:1d:9b:ef:56:
                    c3:0f:59:07:78:fc:69:93:04:83:c9:1e:a0:6b:55:
                    93:3f:df:2e:4b:09:6f:62:87:4b:70:e2:58:f1:52:
                    e0:75:62:eb:98:20:dc:cc:46:b5:2f:c9:97:60:91:
                    3a:2f:15:ba:b5:b0:6c:1a:e6:a6:35:e1:3b:ab:ed:
                    68:54:b5:34:29:88:c2:66:b4:71:9c:ae:a5:f7:a3:
                    0e:53:aa:21:8e:59:12:94:a1:6e:df:44:50:5e:04:
                    47:d5:62:a3:1b:ff:08:bf:c1:57:a2:a5:d3:f3:14:
                    60:3c:49:26:99:62:02:c5:2f:2b:83:c3:18:c7:5e:
                    fc:19:73:0d:31:bd:5b:31:d3:5c:a7:6a:f6:a0:c9:
                    75:5b:ba:4b:85:7d:07:77:ba:bd:96:6e:8e:a3:01:
                    a0:78:1b:64:19:3f:0f:9c:bb:cd:8d:53:d8:8c:34:
                    99:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5E:37:27:B3:DE:A2:C1:94:88:D1:CD:10:5B:61:5B:6F:D7:6A:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f34e0e55-434d-308b-90cb-495fd5029759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.46.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:2f:00:c5:19:07:bb:a9:c3:20:3a:be:d0:d6:5c:71:79:48:
         81:b4:ea:9e:a5:25:7c:80:3c:e5:f0:ee:61:2a:20:11:d6:ad:
         f8:37:0f:51:37:8d:29:33:fc:a4:72:3f:dc:25:50:62:b0:ba:
         e7:61:bf:ff:fd:f4:2a:3b:f3:89:22:f1:9a:86:b6:ff:e0:10:
         70:9e:48:23:df:b0:c1:5c:88:6a:d0:2e:48:10:a4:d5:66:de:
         8f:1e:7c:ae:30:82:23:48:4f:cd:da:79:bb:53:ff:3a:67:0d:
         2b:df:32:b3:46:32:c5:a8:74:4c:ee:55:04:fc:26:2c:be:dc:
         de:e7:6e:f3:62:6a:a2:98:f4:72:b6:13:31:d9:6f:e1:19:75:
         72:18:d4:54:d3:09:2e:68:a7:5f:1d:c3:7a:ec:eb:38:de:1b:
         74:91:01:41:86:6d:a5:0f:5f:6c:f8:a1:97:c0:60:87:d3:a5:
         69:3e:be:4f:01:fd:22:09:dd:2d:df:fe:2a:95:be:ab:66:ed:
         78:a4:77:e2:15:9d:5d:07:98:ba:5a:1b:c9:3e:2b:32:55:21:
         5d:d5:ea:7a:b7:6c:9d:9f:b5:59:02:bf:7e:66:9a:5c:83:75:
         37:e2:cb:de:98:ad:7a:86:8e:01:a4:4f:90:ff:7c:19:f1:ae:
         eb:45:4f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:34:26 2025 by rpki-client