Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37cb31d6-b574-3322-aadc-92ba61efdef1.roa
File:                     37cb31d6-b574-3322-aadc-92ba61efdef1.roa (raw, json)
Hash identifier:          6fyKNy6rCy+G3CfKsLkErfuf3wKi7E+/Z2WIuzl9fx0=
Subject key identifier:   0E:27:EC:CA:6F:A9:78:E0:5B:81:46:3A:FA:59:68:70:4B:C6:38:DA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F22C1B4D9ACDD7DB8738C900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37cb31d6-b574-3322-aadc-92ba61efdef1.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     22258
IP address blocks:        98.239.22.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:1b:4d:9a:cd:d7:db:87:38:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=d003824c-58b5-4ebc-b42a-c316d6c21786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:33:8b:3d:41:2a:73:73:6c:f8:63:73:06:f5:
                    bf:4f:05:0c:a7:46:f0:b3:4d:37:35:eb:33:b8:2e:
                    c5:6e:4b:c6:f3:7a:1d:c5:aa:c7:2e:a0:5e:e6:cd:
                    db:56:e5:81:09:5c:52:32:6e:55:3d:64:c6:c5:a4:
                    ea:25:cb:d8:86:16:88:77:5e:15:76:3f:f5:94:cd:
                    50:d7:5a:27:60:bd:d7:a1:00:c6:ce:97:b0:5b:6f:
                    a0:79:66:13:fd:f9:e8:fd:89:9f:59:ac:38:c3:df:
                    ff:9b:16:cc:b6:c3:d0:78:ac:59:9f:c7:d1:87:b5:
                    f8:82:ed:24:71:21:0b:67:58:ed:ee:a3:bc:f7:4f:
                    51:8c:58:e2:11:a8:2f:6f:ef:c2:d6:dc:cb:fb:8b:
                    68:39:8a:a0:ba:25:73:ea:6a:9a:17:a5:a3:e4:6b:
                    07:0f:76:d4:74:c5:c4:c3:36:17:b2:34:e9:1d:40:
                    bd:bd:ae:15:e6:e6:71:32:51:b7:9f:0a:8c:b6:62:
                    d6:15:3c:a1:cb:e9:1c:b9:b8:a7:52:c9:b7:2f:81:
                    c2:04:7f:68:2d:ad:51:72:0a:56:0f:14:d2:f0:0e:
                    0d:bc:03:e4:fe:92:95:aa:98:61:e3:52:3e:08:e0:
                    5c:48:09:c8:be:5a:64:86:3d:d8:62:d0:7e:56:5a:
                    2a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:27:EC:CA:6F:A9:78:E0:5B:81:46:3A:FA:59:68:70:4B:C6:38:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37cb31d6-b574-3322-aadc-92ba61efdef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.239.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:63:00:eb:f7:fe:00:51:58:c3:b8:2f:a0:00:de:83:21:d8:
         59:1f:0a:b0:5a:e4:e0:a9:0b:60:00:00:d6:f6:b1:a5:34:6e:
         f2:de:9f:05:94:89:63:ba:b6:c4:af:a7:02:80:8f:85:c2:57:
         22:0e:b9:93:cd:f9:91:6f:86:e7:a7:28:65:18:eb:d3:c2:a3:
         6e:da:63:c9:87:f9:f6:a6:a5:32:55:2f:bc:4f:a9:0a:81:5c:
         68:57:bd:31:6e:99:5e:e0:04:6e:87:9a:ac:0d:77:7a:2d:c1:
         7a:31:de:11:41:22:08:fe:15:55:ff:65:11:8b:f1:4c:32:a1:
         88:07:2c:73:60:5c:d8:c9:47:f3:32:f7:f8:00:0e:8c:b0:95:
         7e:16:20:a5:c2:44:8f:da:cd:08:48:ea:b8:99:48:41:54:c0:
         65:73:63:b8:35:09:bc:11:6e:d6:1c:67:c0:83:20:7c:b8:36:
         6c:ed:6d:fb:8c:5c:35:7a:d3:4e:14:3c:00:d8:84:28:b6:cc:
         47:53:67:8b:87:e5:58:4c:15:21:a3:cd:59:71:58:7f:a5:84:
         d4:8e:73:51:8a:62:68:ac:b9:39:ef:b2:1f:6c:a0:09:d8:49:
         8b:3c:e7:b1:d9:e3:f0:01:39:4e:94:14:28:be:c2:84:76:aa:
         61:e5:ba:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:21:02 2025 by rpki-client