Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fdf2601-6b26-32a6-8d86-0cd3472620b0.roa
File:                     5fdf2601-6b26-32a6-8d86-0cd3472620b0.roa (raw, json)
Hash identifier:          fvbdZESzUNro7Zmx6EU4O3wb+BQkHYzP+4n+yePBNfQ=
Subject key identifier:   70:A2:78:4D:92:94:1F:A3:66:88:ED:F8:DC:20:AF:DF:5B:0F:C3:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C9D6BAC1E7C3C6C6EF7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fdf2601-6b26-32a6-8d86-0cd3472620b0.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33491
IP address blocks:        96.113.64.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:9d:6b:ac:1e:7c:3c:6c:6e:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=79f78e21-3ab5-46cf-9217-1b71250d8391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1e:2c:d8:df:49:37:d8:b4:51:18:9c:a0:ca:
                    68:35:07:03:7d:f0:27:88:df:9b:2a:10:f9:90:ae:
                    bb:0e:d7:fb:0a:9a:1e:3b:be:66:49:55:57:be:7a:
                    a7:7a:ee:d8:83:d5:99:17:40:9e:a9:86:03:3c:dc:
                    fe:61:2c:50:c7:f5:a3:9c:92:20:54:b9:db:61:f7:
                    96:48:4b:d3:fa:9b:b8:bf:a4:85:ef:e0:c6:63:92:
                    60:20:c7:7c:47:5e:ce:2e:0b:7b:09:2a:71:56:70:
                    97:4f:99:b7:41:56:0e:51:d8:5e:7e:bd:29:46:65:
                    fa:11:4d:74:c2:84:6d:a8:f7:b6:4f:9e:54:36:e2:
                    2c:bf:68:19:3c:5b:ef:96:9e:d8:7a:97:48:cc:93:
                    60:e9:12:dc:65:c7:b2:9e:2f:f9:f9:15:01:b9:0c:
                    26:5b:48:77:6e:13:4f:0d:72:a6:cf:fa:29:80:a1:
                    47:b3:d2:27:64:6b:7b:ca:eb:c9:ec:b5:a4:07:ce:
                    7d:e6:5b:22:ec:11:76:65:0b:9f:e8:7e:8d:7c:d8:
                    2a:bd:9e:35:0f:c2:2a:1c:a9:fe:87:60:cc:67:1e:
                    cb:6a:e3:ff:b1:48:f8:3f:98:8b:c8:21:0e:44:c3:
                    29:37:9d:62:61:97:9e:ff:eb:51:47:84:42:38:1f:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A2:78:4D:92:94:1F:A3:66:88:ED:F8:DC:20:AF:DF:5B:0F:C3:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fdf2601-6b26-32a6-8d86-0cd3472620b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.113.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a6:18:79:a4:6e:de:48:83:ca:40:a2:40:7d:7b:e7:0b:e5:
         9c:da:2f:2b:e8:74:53:90:50:63:41:33:f7:e3:87:5c:c9:9e:
         70:13:29:03:76:09:0d:18:3a:2f:2d:15:e4:a5:46:9d:5a:92:
         93:3f:8b:9a:f1:88:0f:24:8c:ec:e8:5c:d1:64:ac:22:07:42:
         62:44:aa:42:57:92:58:84:ef:8f:8b:20:43:e1:0f:11:26:02:
         fb:e6:1e:fb:f8:b5:bd:fb:97:59:a6:c7:8e:fa:d0:f6:30:82:
         7d:d3:08:23:2d:de:fd:e6:b1:88:83:87:99:db:bd:ca:cb:3e:
         4d:d3:3d:52:78:c8:70:d5:3f:62:95:a6:f5:79:61:58:5b:d1:
         b0:70:67:2e:1a:65:a3:a4:ad:00:7c:99:fb:fa:2c:32:bf:1e:
         e2:b9:c9:68:be:b6:d0:33:e2:2c:13:ec:9e:cf:14:a5:f8:35:
         ad:dc:de:5f:91:7a:97:b6:08:fc:b1:c7:72:91:83:81:01:54:
         d2:4b:e8:7d:4a:7d:a5:76:f8:5c:dc:53:71:41:a8:d2:81:06:
         ba:41:97:90:fe:fa:18:f0:1c:e8:ae:5b:ab:81:17:f2:3d:0d:
         a7:88:7e:5e:46:46:39:0d:c4:09:ef:89:c4:83:33:7a:e7:44:
         3f:14:8f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:33:21 2025 by rpki-client