Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8456c0c5-217f-36a7-953e-f23a585e02e7.roa
File:                     8456c0c5-217f-36a7-953e-f23a585e02e7.roa (raw, json)
Hash identifier:          4swGPmQ4D8tZwgFcr/cWd593FmuSBtkaFOR60PF47zM=
Subject key identifier:   79:C2:A2:24:57:E7:03:47:A7:48:73:0A:79:44:29:6B:5F:D0:6E:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D01866D921196D44DC800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8456c0c5-217f-36a7-953e-f23a585e02e7.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     22909
IP address blocks:        76.22.162.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:01:86:6d:92:11:96:d4:4d:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=31d2b229-16ff-43e4-b3ab-b8c204c05f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c7:30:7e:c0:a6:db:ff:3d:0d:df:8f:e3:1e:
                    9c:d3:1d:d4:e1:15:cf:a2:b4:d1:ec:34:aa:09:c4:
                    2e:28:94:cb:a6:ab:91:27:7d:58:43:d7:82:98:8d:
                    a2:05:b9:b7:fd:c2:30:e5:94:92:62:13:ce:21:85:
                    4b:98:ca:92:d4:0a:cf:c9:96:40:cb:2f:37:69:cc:
                    41:11:e1:7c:82:9e:60:e9:f7:fa:21:4e:81:8e:c3:
                    d5:68:50:be:a2:67:f2:6b:53:c7:54:94:fd:bd:10:
                    98:80:fa:c6:09:cc:62:45:5e:a4:99:a7:e7:ca:56:
                    b3:0b:cd:d9:12:80:7b:b6:19:57:38:15:58:a8:af:
                    aa:52:b9:f6:0a:87:5b:cd:d0:f6:eb:d2:72:95:c2:
                    ab:9a:d4:c3:e6:b0:a0:6d:14:86:c8:74:28:e0:60:
                    5d:ec:41:fa:64:75:c9:95:60:53:0b:54:38:da:78:
                    9c:06:27:e6:3c:d4:5f:b8:5e:0f:30:dc:89:98:1b:
                    9a:38:fe:da:8f:28:40:7e:2a:48:11:32:51:d2:cd:
                    ca:4c:00:4a:49:5c:7e:0c:1b:0b:2f:bc:98:47:d0:
                    55:a1:b3:56:e8:91:6e:0d:6d:1c:8d:4e:75:48:0a:
                    f6:af:5c:ee:43:5d:24:42:7f:ab:54:25:17:40:94:
                    a1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C2:A2:24:57:E7:03:47:A7:48:73:0A:79:44:29:6B:5F:D0:6E:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8456c0c5-217f-36a7-953e-f23a585e02e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.22.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:5e:96:4b:98:4b:42:74:34:7c:8a:9a:a8:f9:1e:15:ee:de:
         73:2e:d9:c3:49:64:16:24:ff:98:05:dc:73:7b:31:b6:09:89:
         b2:49:72:2f:3f:cf:4c:60:b3:f8:04:e4:a2:ed:e5:f1:a1:1d:
         11:5c:ae:83:97:6f:d8:96:b2:ad:e9:a9:55:69:bd:0f:48:47:
         2d:37:ba:fe:ec:52:41:f5:d3:80:10:50:d3:01:0f:4e:e8:2d:
         11:0a:25:65:e3:63:b0:75:58:9e:0b:5f:11:d1:73:19:f4:d8:
         30:f6:61:99:0b:51:7d:2e:b9:04:e7:e6:fc:8b:9f:f3:2d:51:
         2b:8d:c2:8b:de:4d:d1:2e:70:dd:f7:bf:2b:4c:a5:3b:a5:5e:
         3f:ac:1a:e7:fb:7d:1e:30:aa:68:a3:5a:d7:3f:d6:48:e3:33:
         23:28:d8:2d:a7:fa:38:f4:50:28:ac:77:e4:1b:22:57:60:30:
         3c:9f:46:20:27:ac:2e:88:d6:65:54:b1:0a:f2:d4:47:51:f3:
         d7:0f:f5:56:e4:96:7d:57:9c:9e:fc:66:99:7a:89:fa:5d:71:
         b8:09:b8:34:6b:e8:5f:38:71:c2:0e:46:74:cf:b5:e2:b5:8a:
         55:80:2d:ff:ed:35:1a:5d:2c:6b:b0:17:9e:f7:86:23:ac:af:
         5f:0b:2c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:55:44 2025 by rpki-client