Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e70a123-6057-34a1-8f39-86a15bb03346.roa
File:                     5e70a123-6057-34a1-8f39-86a15bb03346.roa (raw, json)
Hash identifier:          tWY2P9IpfWvdmsjaeO/Km2BGFROi0MaBsOGjjugiaRE=
Subject key identifier:   A6:74:0F:28:7C:66:30:B7:88:81:F5:34:B9:AC:9D:CC:15:15:57:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF5D22D89441B4C331F270
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e70a123-6057-34a1-8f39-86a15bb03346.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        71.57.32.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:5d:22:d8:94:41:b4:c3:31:f2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=55ca396b-3df9-4c52-b554-18d09f2abdae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:d6:f6:b3:11:79:58:aa:a8:9c:86:4b:e5:
                    03:21:ac:5c:db:1d:65:91:4f:7e:40:d3:5c:f9:23:
                    74:01:5d:2c:e6:e1:de:ed:6d:3d:3c:4e:d6:1e:ff:
                    ce:44:9c:63:69:1d:32:bf:34:44:c7:09:29:ca:bf:
                    36:31:97:a0:8e:24:c8:2b:93:f1:e2:a1:50:94:7d:
                    86:d7:6d:e8:98:fd:53:53:dd:6f:b5:37:65:58:f3:
                    05:c3:fe:e4:ea:e0:85:f4:84:4f:0e:7e:70:91:83:
                    5a:b4:3e:52:b5:86:ba:6a:cd:8e:c1:30:f8:e2:69:
                    ad:9a:ce:94:41:2e:56:9d:9b:d7:a1:a7:77:39:7f:
                    4b:03:bf:31:1a:33:89:02:dd:ab:cf:d8:ea:d2:01:
                    d7:73:2a:76:d2:6d:6b:ae:bb:36:99:f6:b2:ce:53:
                    f3:af:ce:54:dd:8b:30:9f:55:05:0d:52:2c:56:18:
                    4f:6a:ad:c9:29:c3:77:d9:7f:22:fa:d4:df:7a:5b:
                    16:ae:34:43:7f:ba:f9:c3:4d:45:90:b8:09:cf:89:
                    ed:c7:c2:9d:15:75:b7:cb:33:75:0c:90:e9:a2:1b:
                    10:4a:97:24:bc:e2:fc:8c:a3:9f:8a:a4:e8:b6:25:
                    3b:c4:07:f5:d2:1e:37:7a:9f:67:33:af:62:d5:f1:
                    ea:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:74:0F:28:7C:66:30:B7:88:81:F5:34:B9:AC:9D:CC:15:15:57:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e70a123-6057-34a1-8f39-86a15bb03346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.57.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:79:61:b3:f2:16:57:90:88:5f:31:5d:34:4d:12:a1:dd:3a:
         67:9c:f8:07:f0:7b:50:c6:b2:e3:ef:74:9b:da:4f:60:f5:38:
         b6:a6:2c:4f:a3:fe:9c:42:68:b1:5f:02:9f:80:0c:18:cc:e2:
         63:a9:f0:24:76:9f:8b:6b:a8:2f:01:2c:d8:55:4a:1e:39:1e:
         d1:16:c8:4c:ca:33:cf:8a:a9:55:fd:7b:7a:49:8b:d3:ca:4c:
         d7:2e:aa:c2:b1:0e:58:ed:ca:bf:5f:a6:dd:0a:bf:60:ce:fc:
         aa:30:3d:c3:05:37:5f:3f:a2:ac:fb:05:f2:0d:4b:dc:e6:49:
         94:78:06:c4:bd:8e:62:19:d9:46:4d:de:16:86:58:bb:12:ed:
         ef:f6:75:fa:a9:97:c1:9c:c2:4b:fe:df:a8:b9:a3:e9:b4:65:
         cb:1a:5b:bb:85:74:fe:de:8b:a1:c9:44:d6:4d:b8:80:b2:3e:
         f2:ef:01:7e:99:92:e8:bf:7a:ba:fc:29:16:40:c0:c3:23:67:
         3e:64:a0:6e:04:af:3c:c3:37:f8:c2:09:87:8b:8a:1a:ea:af:
         0f:0d:9b:c8:98:c5:25:48:2d:c6:ce:dd:70:02:28:e6:ec:e7:
         c0:5b:0e:75:7d:59:2e:e9:b6:5f:7d:a8:1a:42:1e:8b:fa:77:
         7d:18:7c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:15:31 2025 by rpki-client