Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8587383e-1883-3128-8d64-61c762774171.roa
File:                     8587383e-1883-3128-8d64-61c762774171.roa (raw, json)
Hash identifier:          hMS0+cKDvbvGZviJVz84BQhEq9bP3AUPgZ9K2pQO7+U=
Subject key identifier:   2F:0D:47:C3:86:6F:1F:FF:79:B5:4B:2B:1B:DB:7F:10:75:33:C3:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F85E3FC42CEF13B6658F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8587383e-1883-3128-8d64-61c762774171.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        24.91.90.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:5e:3f:c4:2c:ef:13:b6:65:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=9dc356b0-9393-4067-b3ef-b73dc24e2cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:c6:40:af:87:5b:50:35:16:bb:a8:37:24:
                    e8:02:08:4f:5e:d0:b0:d2:65:20:7c:53:df:be:cb:
                    a4:1a:69:95:65:5c:63:28:2f:aa:9f:67:68:2d:77:
                    1a:44:41:56:f5:6b:7b:26:80:99:c6:64:ed:d5:57:
                    14:30:fa:c9:09:dc:ac:62:bc:52:e2:61:d3:5a:58:
                    35:8b:1d:dc:d9:8a:94:fb:98:94:2d:6c:9c:59:8c:
                    25:26:96:80:85:70:92:42:fa:e5:85:59:f1:f0:ce:
                    83:9a:09:ab:e8:ce:fe:a6:88:3b:3f:6e:9c:28:b8:
                    f7:f5:bc:51:06:c4:63:34:75:8e:26:b9:02:0f:97:
                    a6:b8:02:1e:c2:95:d5:a4:84:2d:2b:f5:3b:8f:30:
                    5a:ab:07:7c:56:75:37:b3:29:7a:52:26:f0:f4:53:
                    32:bd:d2:76:10:88:5c:29:75:50:28:25:6d:44:37:
                    a2:f4:79:3a:aa:07:68:01:d4:0c:e6:f9:42:8b:2b:
                    59:71:af:6c:5b:87:ea:f6:3d:08:d3:52:cb:21:c3:
                    6b:b9:78:7c:fb:49:d7:12:93:c7:d2:e7:21:c7:4b:
                    7b:89:a5:eb:ac:19:d3:d7:e0:d5:3f:a5:59:d8:be:
                    05:53:5c:a0:3f:cd:ea:ca:c6:2a:ff:3b:8d:a3:80:
                    64:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0D:47:C3:86:6F:1F:FF:79:B5:4B:2B:1B:DB:7F:10:75:33:C3:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8587383e-1883-3128-8d64-61c762774171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.91.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6d:60:f5:20:0e:b4:ac:94:14:21:49:cf:6e:c8:48:fe:9d:
         e6:c6:0d:4b:4c:be:27:6a:0b:1c:86:12:9a:3a:40:90:5c:3b:
         76:1a:fb:92:fe:5c:ea:12:91:b9:3a:3b:88:8e:6d:a2:b6:57:
         87:00:50:a5:7e:8f:7d:4a:55:f5:40:a9:90:ea:bc:e5:36:81:
         1e:c8:a7:68:c3:fb:2c:c0:92:1f:14:56:bd:08:57:83:30:c5:
         0d:27:1f:34:e7:28:53:b7:2a:b4:15:62:22:87:8d:4a:00:23:
         09:ac:de:94:57:57:ae:b9:82:57:87:c9:2e:0b:35:00:5e:18:
         f2:bc:c7:da:c9:da:3e:b3:ac:da:33:19:03:17:b5:ff:20:24:
         73:b5:4f:d5:f2:a4:89:25:c0:31:f1:b1:e5:62:ea:1a:55:fc:
         50:4d:5f:97:de:8e:0e:0d:81:b5:a3:d0:74:de:df:2f:91:4b:
         e8:53:73:01:8a:45:7f:e6:46:6e:d3:95:97:80:9e:46:7e:1c:
         51:4c:f7:9e:f6:43:9d:15:c1:96:7d:9a:59:db:49:e7:fd:88:
         8b:2b:fc:a2:51:a8:f0:57:2a:8f:a0:f3:e8:8e:a7:bc:df:53:
         b5:8c:e6:38:bf:fc:6e:cf:9d:43:8a:90:76:60:30:f8:f2:41:
         e4:78:7f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:18 2025 by rpki-client