Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/313f7dd0-aeab-3272-9269-ea5e26238a96.roa
File:                     313f7dd0-aeab-3272-9269-ea5e26238a96.roa (raw, json)
Hash identifier:          GtURnyU4z+PxL8N0ZQyIwH3m1/nWCqMaMARdGeqYhK0=
Subject key identifier:   3E:AB:74:87:AF:3E:4C:93:5B:5A:40:44:26:C6:98:FA:CB:17:88:23
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF228A67E2DC9DB4126000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/313f7dd0-aeab-3272-9269-ea5e26238a96.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        98.225.202.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:22:8a:67:e2:dc:9d:b4:12:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=a0d0d2b5-fb53-4478-9c2e-88d803e3cb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:9f:64:76:43:65:c7:86:3d:81:a1:0b:63:
                    48:7f:fd:b3:40:33:19:14:33:f0:5a:52:d0:4c:cc:
                    c5:75:69:5d:7b:12:fd:ef:35:3e:28:ba:03:41:00:
                    1a:f3:93:53:1e:f7:0a:01:7c:c8:2f:79:94:3b:26:
                    0b:82:11:e8:a2:ef:58:75:a3:10:d4:7d:fa:11:32:
                    85:30:27:db:f5:47:a7:a5:2c:2f:76:2f:d2:d6:dd:
                    dd:5d:c0:21:52:06:90:46:d3:e1:b8:da:d5:82:dc:
                    ce:61:59:a6:bf:75:91:4c:96:f0:95:82:3a:89:ef:
                    53:36:f0:a9:65:b8:82:05:43:c7:67:28:47:23:da:
                    1c:a2:1c:01:db:85:c5:ca:84:01:6c:c1:f4:64:cb:
                    85:6d:9d:c2:da:00:7f:99:c5:9a:5a:41:ac:e4:74:
                    3a:41:3b:4d:ad:c9:a6:f4:b3:d5:77:0c:19:05:e6:
                    ee:7c:b3:a1:97:91:0b:a4:48:42:46:2b:70:6b:41:
                    2c:27:65:fd:63:c3:18:c1:33:a9:3b:34:a2:9c:4a:
                    6b:7c:19:a4:32:db:10:35:d1:fa:1a:11:4b:db:bf:
                    52:5a:70:e8:3b:cc:56:65:2f:33:10:95:3e:ee:04:
                    a0:45:75:ff:e0:d5:70:bd:a8:48:50:1f:b5:7e:8b:
                    b3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AB:74:87:AF:3E:4C:93:5B:5A:40:44:26:C6:98:FA:CB:17:88:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/313f7dd0-aeab-3272-9269-ea5e26238a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.225.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ef:8b:13:38:1d:1f:b0:a7:3e:07:6d:8c:c8:12:24:9c:6e:
         2f:f1:68:27:f8:04:1b:bf:65:02:c0:02:e1:25:f7:6c:06:bd:
         e0:6c:94:d1:04:b3:cd:8d:90:54:b4:77:0b:fc:64:9d:8f:6f:
         8e:53:db:80:49:29:0d:d1:4e:81:c4:84:f9:c9:22:50:7f:59:
         02:3c:a7:ae:9d:fd:ca:9c:14:6a:9f:5b:84:32:d1:d4:ae:69:
         63:a4:0a:c7:4a:cf:8e:27:ec:b7:ae:ae:cf:15:e6:85:db:29:
         65:6b:bb:f4:8b:3b:0e:84:d8:68:97:a2:e1:5a:b4:70:21:ab:
         29:1d:26:a9:30:38:b1:dd:50:89:12:fb:05:3e:56:41:b1:50:
         57:7a:05:08:9b:c5:55:e7:91:c8:d3:30:25:ef:9e:ae:62:91:
         07:b4:bd:8c:ee:64:0a:ba:c2:1c:f1:f3:e7:ee:28:b6:53:50:
         a0:08:aa:e6:93:ad:82:b8:60:bd:bc:1c:1e:07:c3:16:a1:a8:
         5f:ba:42:c4:04:e0:31:7b:b2:a7:c3:c6:a5:a3:a6:a6:0d:05:
         c7:22:e3:4e:db:fa:00:af:66:44:50:1b:c5:ea:d2:58:5d:d1:
         70:f5:cf:e6:d1:24:a4:a0:f5:24:fa:83:e7:25:ab:29:28:cd:
         29:b7:23:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:24 2025 by rpki-client