Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f50f3338-ed3a-3e3b-ad01-aa6a4846057d.roa
File:                     f50f3338-ed3a-3e3b-ad01-aa6a4846057d.roa (raw, json)
Hash identifier:          yZiulBp+O8aEviMBJJTxLsNW9W2N0CnLNhWzKvedgXg=
Subject key identifier:   7C:D6:6F:AD:DE:9F:9A:71:4C:5A:D5:E8:92:6D:BA:C1:28:73:86:DD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1157090F17FB6DBCEE3B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f50f3338-ed3a-3e3b-ad01-aa6a4846057d.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        98.222.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:57:09:0f:17:fb:6d:bc:ee:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=53df4d6a-6353-454d-8189-533a2f7963c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9a:fe:69:61:08:4f:fb:c3:3b:c7:72:a7:48:
                    be:29:1f:70:25:e7:5e:09:4d:f1:6c:a3:6f:77:5e:
                    2c:c8:95:2c:4d:b7:bc:4f:ef:c9:57:b6:cf:a9:8e:
                    f0:56:50:4c:d9:7e:05:2f:1d:b1:e8:0e:d4:8f:b7:
                    9b:1c:84:41:06:49:a3:f7:e6:4c:f7:72:1f:f2:21:
                    5b:24:fa:0b:d1:ba:70:79:0b:80:04:71:ed:90:ca:
                    48:76:88:f0:0a:8c:84:41:dd:96:66:d2:3e:0e:ae:
                    fd:f1:e5:ef:12:e0:4f:c3:fe:a2:b3:1d:33:4e:16:
                    ad:95:bb:34:8a:ec:ee:50:81:96:b7:29:99:9b:bf:
                    65:99:f7:b9:66:93:21:44:ac:ce:28:48:4a:b8:bc:
                    d4:6e:62:e7:06:6e:66:5e:44:a7:5f:6d:d3:e1:83:
                    00:e2:a2:42:5d:f4:73:f2:bf:82:6f:01:a7:25:7e:
                    8d:d7:4f:51:6a:f8:bb:93:d2:db:dd:12:4e:17:5e:
                    1a:c5:d5:a8:c5:21:6c:52:f9:ae:13:3a:83:69:c6:
                    38:e5:67:4d:c2:e2:bd:5e:35:71:75:a3:5b:a7:43:
                    be:a7:e8:1e:1e:76:d4:89:f6:61:71:4b:0f:21:15:
                    22:ba:76:f8:8d:42:82:39:09:56:28:c2:d7:c4:c2:
                    34:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D6:6F:AD:DE:9F:9A:71:4C:5A:D5:E8:92:6D:BA:C1:28:73:86:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f50f3338-ed3a-3e3b-ad01-aa6a4846057d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.222.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:02:9a:f2:c0:3c:79:74:f3:e7:ce:42:5b:16:0a:9c:37:e3:
         89:af:0b:d9:80:58:f7:e1:cd:35:a7:80:18:51:05:92:4b:f0:
         ba:53:28:cd:bc:72:53:5a:2d:49:de:e3:f3:36:bb:5a:ff:d7:
         23:e8:40:28:31:14:d3:c7:46:57:30:7b:dd:73:94:d0:11:3c:
         9a:e6:9a:47:0e:0f:b9:f8:5c:60:42:f7:57:c1:eb:d9:0b:3d:
         96:58:66:97:47:04:19:31:e3:dd:7f:f4:ab:6c:a7:f1:64:90:
         10:21:73:47:69:3f:75:2b:0b:0b:4c:be:8b:6b:ae:07:3e:3e:
         69:05:b7:dd:ad:06:c4:e1:ea:e1:3e:68:7d:b7:ce:e2:30:47:
         11:a8:8d:e1:ed:e9:06:56:d9:77:18:38:4a:e9:76:cb:7f:0c:
         36:aa:aa:dd:e8:6b:cb:4e:f9:c1:f4:19:67:c3:f3:76:3f:bf:
         25:90:48:76:26:78:02:90:83:ac:0e:66:a0:f6:c0:d2:da:b5:
         39:e4:be:0d:d3:cd:1a:47:b8:94:23:b9:ca:ac:0d:dd:a7:ea:
         b2:1f:85:b6:e2:0c:2d:b7:03:97:75:ce:8c:9d:68:42:0c:a9:
         0e:49:ed:b0:c6:cd:e0:de:64:ab:9b:22:b5:5a:5e:cf:5c:b2:
         d1:30:ba:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEVcJDxf7bbzuO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NTNkZjRkNmEtNjM1My00NTRkLTgxODktNTMzYTJmNzk2M2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJr+aWEIT/vDO8dyp0i+KR9wJedeCU3xbKNv
d14syJUsTbe8T+/JV7bPqY7wVlBM2X4FLx2x6A7Uj7ebHIRBBkmj9+ZM93If8iFb
JPoL0bpweQuABHHtkMpIdojwCoyEQd2WZtI+Dq798eXvEuBPw/6isx0zThatlbs0
iuzuUIGWtymZm79lmfe5ZpMhRKzOKEhKuLzUbmLnBm5mXkSnX23T4YMA4qJCXfRz
8r+CbwGnJX6N109Ravi7k9Lb3RJOF14axdWoxSFsUvmuEzqDacY45WdNwuK9XjVx
daNbp0O+p+geHnbUifZhcUsPIRUiunb4jUKCOQlWKMLXxMI0iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHzWb63en5pxTFrV6JJtusEoc4bdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjUwZjMzMzgtZWQzYS0z
ZTNiLWFkMDEtYWE2YTQ4NDYwNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYt6CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANUCmvLAPHl08+fOQlsWCpw344mvC9mAWPfhzTWngBhRBZJL8LpTKM28
clNaLUne4/M2u1r/1yPoQCgxFNPHRlcwe91zlNARPJrmmkcOD7n4XGBC91fB69kL
PZZYZpdHBBkx491/9Ktsp/FkkBAhc0dpP3UrCwtMvotrrgc+PmkFt92tBsTh6uE+
aH23zuIwRxGojeHt6QZW2XcYOErpdst/DDaqqt3oa8tO+cH0GWfD83Y/vyWQSHYm
eAKQg6wOZqD2wNLatTnkvg3TzRpHuJQjucqsDd2n6rIfhbbiDC23A5d1zoydaEIM
qQ5J7bDGzeDeZKubIrVaXs9cstEwuuo=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:17:06 2025 by rpki-client