Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc0efc49-b41e-30ac-84ad-1449f4a12168.roa
File:                     fc0efc49-b41e-30ac-84ad-1449f4a12168.roa (raw, json)
Hash identifier:          jBKLuOVH/AP8IuvvP9Go7cmZk6ee9ccyho028oOja9c=
Subject key identifier:   C2:B7:58:BA:7E:4B:E4:59:9A:D5:D6:D7:6A:5D:A9:66:91:3C:6C:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143C21D5D6E47F76D68C7400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc0efc49-b41e-30ac-84ad-1449f4a12168.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        76.143.216.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3c:21:d5:d6:e4:7f:76:d6:8c:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=730b4bc5-a198-43ab-9097-25c16ff97b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:19:1b:07:f4:40:0a:b8:34:3d:97:f2:a6:
                    8a:24:7c:78:c3:8d:6d:48:68:3a:fc:77:e5:f2:10:
                    8d:90:15:d3:ea:20:8e:0a:8a:9d:64:ec:31:81:73:
                    41:89:48:b5:e9:db:d6:92:70:2b:29:44:24:9c:68:
                    68:3b:02:32:96:c2:8f:41:d4:7c:5b:c5:95:1f:26:
                    64:b7:cd:e6:83:b5:22:03:9b:5c:47:29:e8:ac:89:
                    b7:c0:02:7d:6f:23:a3:d7:91:fd:b8:69:55:62:5a:
                    09:f1:76:e0:74:66:5f:88:c0:9c:2b:42:4f:bb:4d:
                    71:94:4b:11:33:4a:5c:17:64:98:6d:83:1d:87:6e:
                    11:9b:ec:5c:0d:22:b7:a7:07:6a:97:d9:72:2e:b9:
                    a9:56:a3:4b:5c:35:94:09:00:9e:54:75:4a:46:da:
                    b9:42:b1:0c:f4:08:28:e2:ad:27:f9:34:be:43:60:
                    4d:d6:fb:c6:0c:6f:c3:1d:3e:40:8f:a9:62:f1:6e:
                    c8:8a:63:6c:c8:99:19:91:3c:9c:6d:df:1d:6c:d5:
                    d6:bf:92:14:21:96:18:6d:15:e9:a8:6e:bf:70:b7:
                    26:d4:c6:75:9d:32:01:c8:9f:6f:78:37:48:79:f0:
                    4a:0b:4e:a8:87:e1:26:83:5e:75:4d:d4:02:2d:2f:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B7:58:BA:7E:4B:E4:59:9A:D5:D6:D7:6A:5D:A9:66:91:3C:6C:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc0efc49-b41e-30ac-84ad-1449f4a12168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.143.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:34:94:7b:ae:e3:40:9c:c4:41:f0:bb:ed:ea:59:eb:c4:2e:
         ce:29:63:36:a5:d4:3f:d5:25:3d:de:e3:2c:fc:cb:62:a0:9f:
         b2:de:f5:f9:85:dc:d7:a4:3f:31:47:65:b7:4f:4e:92:ee:7b:
         9c:a8:23:3c:58:8a:2b:5c:d7:ef:b5:6c:e9:81:ab:42:53:2c:
         0f:d8:46:eb:ab:da:6a:14:2e:7c:fe:33:70:b7:2f:ac:4b:39:
         27:55:d6:f9:d5:3d:86:a7:38:d0:29:7e:b1:a5:fb:5e:6f:02:
         3a:28:cb:fa:82:d0:42:6f:2f:0d:a6:c6:fa:1e:8c:a1:7d:e4:
         dc:68:9f:13:15:70:57:d2:dd:34:3f:84:fd:ff:2c:fa:cc:39:
         fb:8d:c3:ee:c1:47:57:0f:6f:5b:cb:d6:a1:81:db:30:62:52:
         48:11:fd:61:26:92:81:b5:f4:0e:d1:bd:73:05:40:9a:d6:39:
         0e:27:3d:1f:47:48:76:90:6a:7e:f7:c1:5b:75:79:41:bd:73:
         35:19:b1:09:79:6b:0f:d6:f9:80:63:46:0c:fd:46:23:15:a0:
         35:a6:bf:5d:50:96:c1:ac:53:69:7c:68:4c:c1:ea:51:27:5d:
         19:88:d9:d0:7b:77:4d:a4:f9:89:bd:93:7c:cf:b0:9f:1b:af:
         39:55:2d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:00 2025 by rpki-client