Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e4699df-17e2-386d-bec9-02acc6b00353.roa
File:                     2e4699df-17e2-386d-bec9-02acc6b00353.roa (raw, json)
Hash identifier:          taz2d0Zw37orvp6Xa1hhcRXfUa067vZzhB68WIv04Jo=
Subject key identifier:   27:0B:80:DF:82:E0:AC:07:1E:C1:DB:10:12:B8:46:D5:4C:88:4E:3B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F96C67E949621E30789600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e4699df-17e2-386d-bec9-02acc6b00353.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        98.40.222.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:6c:67:e9:49:62:1e:30:78:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=d4e1cfe2-c6ad-4825-9ce3-46fec5a4b4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:dc:f5:7b:77:db:48:c5:08:6a:9e:5e:d6:
                    f4:93:3e:0d:b3:aa:b1:05:d8:4f:c9:fc:20:20:4e:
                    5b:fa:54:23:37:2e:26:e7:b6:93:ac:6b:40:1c:b0:
                    1a:24:28:21:51:bb:33:ba:2d:2f:38:6c:65:cf:73:
                    3a:f6:90:d7:f9:e9:a1:04:cf:0d:c0:d4:d7:de:7a:
                    44:6a:c0:60:a8:60:89:96:e9:79:7a:36:7c:06:0e:
                    3a:69:f5:ad:1d:fb:82:fb:de:74:f7:b6:92:b3:fa:
                    6c:cf:3d:fb:c5:03:d9:62:be:89:4c:e2:4f:4e:1a:
                    43:34:cd:1c:eb:6c:0c:bf:df:a8:2c:c3:dd:6d:a7:
                    dd:cf:fa:19:eb:7f:d4:54:26:fa:08:c7:02:11:cd:
                    4c:07:f7:21:ad:c9:c2:67:a9:bf:59:5d:06:be:cd:
                    d1:bf:ec:a7:8a:c9:25:fa:7a:b3:66:56:73:11:6a:
                    fe:17:23:b9:78:bb:b5:bc:22:60:85:00:d1:10:ab:
                    64:d4:53:2d:31:c2:74:6e:fc:df:eb:13:2d:62:9f:
                    28:f4:60:82:a6:9f:52:75:c0:ac:c7:f9:9c:44:70:
                    ae:55:b7:17:a9:b0:76:41:40:98:7c:e3:83:01:1d:
                    09:59:22:44:9d:68:cc:a1:f5:cf:6a:c2:7d:5b:a7:
                    93:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0B:80:DF:82:E0:AC:07:1E:C1:DB:10:12:B8:46:D5:4C:88:4E:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e4699df-17e2-386d-bec9-02acc6b00353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.40.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:64:d5:9d:35:96:7a:22:a2:f2:e1:e4:ea:45:dd:db:a2:00:
         36:79:ea:da:8d:c7:fe:01:56:07:ee:56:65:e9:4f:e5:15:38:
         5b:66:7a:dc:ee:5a:db:2a:39:8f:02:60:73:1c:1d:e2:7c:59:
         9b:db:12:c1:b3:90:ee:49:cd:c0:40:e1:32:03:38:7d:f0:e0:
         58:f5:d6:1f:50:99:dd:1a:5a:b6:b5:e5:a9:df:e2:1a:6f:de:
         04:72:ff:e9:39:c9:83:0d:35:c9:62:f6:fa:86:69:7d:87:dc:
         f4:84:ea:d1:ca:c1:9a:29:04:d1:f6:fe:3f:e1:d8:c3:9b:35:
         da:90:58:b7:8d:60:3c:59:93:0a:be:7a:3b:3b:88:8c:7d:dd:
         d7:cd:d6:c8:1b:d3:e6:58:d7:77:76:a2:97:75:02:ad:04:c8:
         03:61:6f:39:d1:d0:30:d0:de:50:b2:9d:07:79:f7:54:13:ec:
         72:fe:67:21:f5:39:0e:24:3b:b1:8f:77:7d:94:c0:56:1b:98:
         10:45:04:5e:ec:52:bd:34:27:23:6e:7d:0e:69:03:fb:90:d5:
         5b:ce:be:5e:db:31:8c:f8:6f:4c:03:a8:c0:6f:66:2c:4c:e1:
         b2:06:b5:5f:bc:ae:ab:e5:43:47:05:69:2d:27:d5:9a:a3:38:
         d5:7b:c6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----