Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6402b749-ff1e-3bc8-818f-ae4d1c0b59e8.roa
File:                     6402b749-ff1e-3bc8-818f-ae4d1c0b59e8.roa (raw, json)
Hash identifier:          FMWxIkfv1jnoS5brBB9RHudKxr/o6fmIolQ2p1qTcK4=
Subject key identifier:   9A:30:8E:DF:8B:BC:60:5C:5E:26:AC:F0:87:E3:88:01:B5:CF:F0:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F844E38B5CBD9741CADE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6402b749-ff1e-3bc8-818f-ae4d1c0b59e8.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        76.105.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:44:e3:8b:5c:bd:97:41:ca:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=01e77ae3-e61a-4298-8205-c79bb905e249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:1d:58:3e:df:44:7e:13:0b:9b:20:9c:42:
                    f3:56:13:cd:2e:d6:90:73:a1:e4:10:a4:d1:8c:d4:
                    cb:77:f8:04:65:51:db:ba:36:a7:30:28:c1:43:e3:
                    84:80:f8:bb:5c:17:93:b7:d6:6f:ae:41:07:41:a1:
                    96:a5:44:3c:5f:46:d0:c9:03:83:50:9d:23:c8:e1:
                    77:04:66:4a:fd:2a:32:a0:12:c0:d4:ee:0a:5c:f4:
                    87:99:8c:2d:37:9d:ad:6e:db:05:16:15:4d:1d:02:
                    08:3b:08:89:7c:af:9c:93:3b:11:4d:96:ea:0b:a7:
                    15:78:80:80:35:72:bc:b6:ba:af:b6:50:0d:5c:eb:
                    66:62:8c:5f:18:33:36:e7:33:96:2b:15:fc:87:0a:
                    b3:72:a5:bc:72:f2:c7:98:ed:84:9e:62:ce:79:e4:
                    cb:9b:6e:25:b5:d9:b6:06:5b:27:2f:57:c3:ae:47:
                    f9:fa:ce:86:dd:8e:26:c5:df:15:ae:a3:37:2e:9f:
                    a0:e1:38:74:e7:d9:84:a6:a2:f0:4a:30:04:69:0a:
                    40:59:c0:23:83:1f:17:61:eb:e0:a9:30:9d:35:66:
                    9e:c1:c1:a0:5e:f5:02:a7:f6:22:8b:b5:90:b2:0f:
                    cf:c1:9f:e9:19:91:da:5b:fe:30:ff:39:bc:79:51:
                    38:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:30:8E:DF:8B:BC:60:5C:5E:26:AC:F0:87:E3:88:01:B5:CF:F0:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6402b749-ff1e-3bc8-818f-ae4d1c0b59e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.105.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:be:f9:5b:13:d8:b0:e4:a7:b5:20:46:ce:ce:1f:56:69:30:
         ee:33:01:54:46:ff:c6:6d:fb:48:cb:74:b0:5f:88:44:82:de:
         c7:ed:a6:85:a0:af:78:fc:7e:11:6a:2b:b7:1c:56:ab:20:c1:
         14:67:42:d6:60:fa:25:37:2d:e1:61:77:11:66:18:15:67:17:
         e2:42:0b:77:df:86:f6:07:a3:6a:1f:72:0a:ba:59:22:fb:ae:
         c3:5d:e2:f7:5d:7f:08:2c:67:91:73:63:80:3e:8c:3b:3c:77:
         41:3f:82:f4:df:0e:6d:3b:2c:21:1c:44:7f:8c:a3:aa:50:dd:
         df:08:4d:99:ac:97:8d:46:81:29:93:48:6b:be:43:74:37:db:
         57:ad:c4:04:05:db:79:1b:de:22:49:fb:e5:71:21:09:26:21:
         35:fe:50:aa:58:f8:5a:d5:84:ec:c6:f0:a7:d5:bc:7e:08:4a:
         dc:0b:f7:bd:15:21:a5:35:a4:a1:ea:32:88:30:ef:e2:51:17:
         18:ab:ea:50:cb:b0:89:ff:03:8b:57:f8:5d:a0:66:d6:54:35:
         06:86:9b:6b:f6:cd:97:71:ef:7f:16:d3:77:07:80:b6:9b:fd:
         af:0e:40:d5:2f:2c:d1:6e:4f:10:1d:dd:c8:5b:75:38:46:9b:
         1d:28:fb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:57:01 2025 by rpki-client