Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cc7da74-97f6-3734-acaa-8cd016d97097.roa
File:                     4cc7da74-97f6-3734-acaa-8cd016d97097.roa (raw, json)
Hash identifier:          xYmuB2l8npGI17naSowcuN2AZneAlcLv1NNaIyaWbVo=
Subject key identifier:   95:88:41:1B:CC:D9:56:EC:D0:51:23:7A:51:BB:D5:39:1D:91:41:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF1EF6CB1D2C2BC81AA980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cc7da74-97f6-3734-acaa-8cd016d97097.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        76.111.160.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:1e:f6:cb:1d:2c:2b:c8:1a:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=f5d10ab2-9713-4fd7-bb7c-174abc225d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b6:17:e3:b4:d3:a1:1f:fd:06:b3:d2:31:5e:
                    91:5f:61:c0:a1:62:25:9f:c8:27:e4:0b:a4:16:50:
                    97:71:72:29:3a:40:f1:ec:26:53:b5:8c:d9:2b:fd:
                    7c:2c:44:36:ce:34:ce:0a:4c:bb:59:32:12:b8:46:
                    1e:ae:b5:80:86:d9:2b:a7:29:4a:a0:54:a1:a1:4a:
                    49:f7:85:32:27:80:a9:49:3b:34:79:a0:04:d5:0a:
                    fc:09:3b:ef:55:0b:28:5a:ad:67:94:a6:99:9c:25:
                    ac:64:f7:1f:52:c5:85:a7:7b:dd:8b:ec:f2:b4:d2:
                    1c:ff:e0:63:df:69:7f:f8:9b:78:0c:35:d8:fb:10:
                    58:9c:11:5b:6b:7e:f7:7d:f1:25:36:44:92:75:c0:
                    44:80:62:64:41:1a:66:e3:b2:13:27:a6:a7:12:1e:
                    6a:bb:1b:81:f0:13:8f:7a:31:d2:e8:74:cd:a2:e4:
                    74:e2:98:ef:a5:60:ba:46:45:16:59:0c:d8:cf:b4:
                    7a:c9:1b:04:57:30:04:a6:f0:e6:fd:ba:07:ce:b1:
                    06:ff:71:0b:7e:cb:b4:8f:08:66:0d:66:8c:73:59:
                    00:28:74:71:ff:9a:3b:7a:06:4c:db:c0:7b:fd:8a:
                    b4:1c:ff:5f:cb:38:5e:b6:77:89:34:58:28:17:06:
                    77:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:88:41:1B:CC:D9:56:EC:D0:51:23:7A:51:BB:D5:39:1D:91:41:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cc7da74-97f6-3734-acaa-8cd016d97097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.111.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:2c:15:8e:48:b9:76:40:9c:25:02:6d:c5:58:d9:f7:3c:77:
         09:32:8c:3a:6d:1e:0d:ee:3c:db:37:eb:2a:60:aa:bb:c4:f1:
         90:bc:95:34:dc:f8:70:62:fb:1b:13:f0:74:3c:e6:3f:1e:c8:
         a9:7e:bf:08:73:30:28:49:38:44:e0:1c:7c:0c:81:ff:da:b9:
         16:6b:1f:99:ae:3e:12:01:26:cc:31:72:4f:c3:e5:a2:7a:7b:
         e6:31:ac:29:0a:f7:e3:07:1d:c2:c0:b6:d3:22:b0:c9:bc:e7:
         b7:aa:a7:78:48:67:8f:9a:31:74:a2:d3:d3:06:51:3e:ed:02:
         6b:4f:48:a7:8e:0a:5b:b1:bd:64:11:de:94:c8:9d:bf:0c:62:
         88:6b:7d:10:57:6c:c2:e2:8d:7e:5e:95:e0:bf:53:fd:9a:b0:
         c6:18:a6:f2:03:a2:02:21:1b:96:2c:56:02:d0:4d:7d:12:79:
         34:b1:04:ce:54:79:61:85:fd:b1:76:ac:d1:d6:52:16:cf:5e:
         58:1e:35:89:9d:00:13:63:8f:bc:a0:b7:d8:29:e2:73:92:fd:
         b2:51:de:fb:44:54:7d:a1:17:a5:1c:4b:36:2e:e5:31:3f:75:
         c0:9b:8a:02:06:e5:d4:82:c5:a4:f9:95:81:e9:a4:c6:9f:55:
         52:48:73:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:33:10 2025 by rpki-client