Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1996c1ae-4b7f-3536-a9e9-906c4b665d15.roa
File:                     1996c1ae-4b7f-3536-a9e9-906c4b665d15.roa (raw, json)
Hash identifier:          xi4As6/88v2CL2A/4yK1J8qrA0rDmSSmpRD6huvQoX8=
Subject key identifier:   85:49:F9:E7:7A:21:30:38:F4:34:EC:BA:00:19:8E:66:7A:6E:D4:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F22C168FD11119C9159CF4E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1996c1ae-4b7f-3536-a9e9-906c4b665d15.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     22258
IP address blocks:        76.107.216.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:16:8f:d1:11:19:c9:15:9c:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=8503e83b-c630-4806-a535-4a944fcf5578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:df:57:69:d0:13:1e:75:74:e2:5e:7d:78:
                    f5:7d:06:f7:36:6e:11:54:ee:e9:14:41:a5:19:9a:
                    6a:dc:03:6e:29:d9:14:a3:d6:a4:9a:47:c6:c5:38:
                    ab:79:00:b9:9b:46:8b:cf:0b:0e:6a:42:6d:15:7f:
                    79:c0:13:79:bb:ad:da:d3:20:9b:9e:54:48:88:f2:
                    bb:64:28:44:bc:8b:6f:53:1a:a7:00:9c:f8:8f:28:
                    2d:e8:13:00:b7:33:92:14:a8:b5:2b:67:61:b8:fe:
                    99:ac:11:14:c2:12:23:12:eb:b3:b2:fd:da:16:4b:
                    a4:c4:c3:51:bb:c8:0a:0b:78:2b:8e:8f:49:82:35:
                    32:6c:70:0f:80:ce:79:a6:33:d0:66:4d:d2:38:35:
                    a1:68:b7:74:47:51:65:98:0f:57:b2:65:30:26:c6:
                    ac:08:e9:ec:30:13:d0:07:4c:25:0a:a2:66:35:04:
                    a8:aa:62:fc:d8:9e:8b:c0:b5:e8:03:48:0a:bd:1c:
                    18:06:e6:eb:47:9e:64:67:f6:4b:4d:cb:42:32:fb:
                    ae:5e:38:cb:5c:b7:b4:9d:28:6c:3f:08:84:d0:fd:
                    05:e1:94:e7:b9:77:b8:bc:16:32:6a:71:ff:ec:36:
                    a5:49:96:cc:f3:0e:ee:30:e8:10:bc:32:ca:0e:ec:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:49:F9:E7:7A:21:30:38:F4:34:EC:BA:00:19:8E:66:7A:6E:D4:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1996c1ae-4b7f-3536-a9e9-906c4b665d15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.107.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:26:fe:0f:0f:3f:25:38:d0:e9:2f:a3:89:29:53:28:8b:3b:
         45:c1:11:67:1f:6a:38:ee:e6:f4:57:0f:9e:83:d1:2d:eb:1f:
         92:af:64:6a:37:58:23:e9:13:6e:59:9b:37:47:67:14:78:3c:
         39:88:92:d5:e9:47:df:66:ec:c2:f9:25:7a:da:b4:4a:99:15:
         d4:e3:71:8a:de:4a:fb:f0:76:47:b9:8e:82:61:1d:32:13:a5:
         4e:6a:ac:b3:8e:2c:3c:7b:23:57:6e:26:d5:c6:9c:06:e2:79:
         da:46:9a:a2:50:70:81:36:09:c8:3a:81:3a:7e:b2:83:2a:dd:
         9a:67:d6:1e:7a:9b:66:c0:2b:be:0c:c6:cd:75:63:ad:b2:9e:
         a2:1e:55:e9:69:5a:b1:57:5c:47:db:da:ef:b1:f6:b7:7d:5a:
         48:3b:10:76:b3:dd:23:04:e1:82:b0:3f:56:48:03:ec:6d:bd:
         5b:50:11:46:b5:78:b4:17:83:8a:e3:60:18:5a:6b:3c:eb:7c:
         3a:99:b0:7b:21:b5:78:67:93:c0:66:55:27:3a:d3:3e:e4:1a:
         1a:4b:58:a1:7c:08:d8:40:5a:d7:43:50:22:72:68:36:63:63:
         a3:f0:07:49:12:78:49:bf:04:66:e2:55:c8:ea:2c:54:d6:4e:
         ff:3b:2b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:22 2025 by rpki-client