Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28313f09-bc82-3f3f-ac83-f1d032eee7cb.roa
File:                     28313f09-bc82-3f3f-ac83-f1d032eee7cb.roa (raw, json)
Hash identifier:          3e32E/mgfEw1lFlf8L3qxsYA+ZdmFYUpg5HKRGYPNBw=
Subject key identifier:   6F:23:53:65:E8:02:70:B8:5D:20:B3:3E:8E:76:AA:93:15:A8:28:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F84E2DBAC8CC46F8F85FA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28313f09-bc82-3f3f-ac83-f1d032eee7cb.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        174.168.176.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:4e:2d:ba:c8:cc:46:f8:f8:5f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=fb7dfa62-2911-49a1-bb59-0a88d580feb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:1a:76:72:9c:a3:26:c8:89:2c:4a:8c:7e:
                    af:7f:82:2b:76:b6:f5:c2:ea:82:a2:d2:6c:69:1e:
                    a4:b8:47:91:cd:b3:84:0e:85:80:6d:c3:67:bc:76:
                    ba:81:7f:90:2f:9c:fd:8d:58:a0:02:49:fe:db:d2:
                    c2:c5:99:07:f4:16:05:d2:7f:40:b6:ad:2a:b5:09:
                    ed:dc:66:f8:8e:8b:45:05:60:c3:47:c9:d9:be:94:
                    94:a5:89:13:3b:44:f4:99:07:bd:25:57:c9:98:6f:
                    de:fc:4b:1b:2d:66:49:bf:1a:76:fb:ec:63:18:3b:
                    8b:af:a6:1a:aa:e5:57:94:f8:71:a4:92:d4:3b:7f:
                    63:85:f0:7b:25:8a:27:c1:26:e0:ea:a4:f8:e6:8b:
                    27:fe:78:7e:fc:22:5e:0a:79:e5:56:da:6c:50:3f:
                    6f:bb:a5:d7:d8:7e:40:d1:57:e4:6a:7a:86:29:49:
                    af:c1:58:55:be:0d:dd:4d:f5:d3:05:b8:30:9c:eb:
                    df:44:29:bb:96:ee:1b:08:a1:be:21:52:b2:a2:a5:
                    49:96:fd:26:d7:e9:b8:ac:4e:2a:46:7f:bd:ac:ea:
                    1b:ae:f9:90:1a:b4:15:98:90:f2:79:72:61:0e:99:
                    40:bd:1e:38:d7:97:88:da:42:be:c7:ec:0c:5d:43:
                    f7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:23:53:65:E8:02:70:B8:5D:20:B3:3E:8E:76:AA:93:15:A8:28:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28313f09-bc82-3f3f-ac83-f1d032eee7cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.168.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:69:0e:a5:f7:c0:39:76:0c:78:cf:b3:e6:fe:b5:ee:f6:c7:
         7d:67:bb:ac:c9:bb:77:ea:a9:e0:0b:eb:be:68:75:18:9e:35:
         94:3d:84:a8:db:f2:82:bb:6c:fc:3d:36:ae:0e:1f:f2:41:78:
         1e:bc:0a:e7:2e:bc:09:4b:34:f6:cc:a9:7f:e2:aa:50:90:d7:
         ed:17:92:ee:72:58:8f:6d:ba:7e:a9:ce:bb:fd:bc:ae:fa:94:
         67:8a:e7:f4:90:94:59:d7:fc:d8:1d:f0:f0:96:08:a0:68:ad:
         d8:2d:3c:b8:2e:86:40:b5:f2:54:9c:40:2b:40:ac:84:eb:fe:
         0d:d5:9a:42:ab:e5:cb:71:59:d4:4a:e0:34:cc:2d:4d:f2:f2:
         f5:b6:a2:c6:c7:8e:02:1a:e6:b4:01:9c:ce:85:35:31:e4:31:
         bc:e1:bb:55:72:59:d3:c1:4c:6d:b0:16:4b:88:26:74:63:80:
         5a:fe:60:7a:1e:ae:fd:e5:16:c1:86:c3:44:b8:59:c6:e8:2c:
         0f:8a:cc:ce:d0:7e:e1:90:11:9f:49:7b:17:c6:a0:6f:23:4c:
         2b:85:e9:41:2d:eb:9f:bc:c8:e6:ca:9c:a1:0f:1c:3c:41:39:
         62:f3:7a:dd:28:b8:65:8f:19:6a:30:cd:14:21:e5:32:7a:42:
         74:6f:cc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:27 2025 by rpki-client