Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94872d38-2f3d-3dce-8563-060f45f1e532.roa
File:                     94872d38-2f3d-3dce-8563-060f45f1e532.roa (raw, json)
Hash identifier:          YK6X6voffFEL6oIRrPgTOt0RI1LTKDQ0XbvUepGry9M=
Subject key identifier:   45:E1:9F:72:42:AC:5D:C8:F3:8B:56:17:03:ED:2A:DA:2E:DB:76:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1FF94F55CD35BC3CEC240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94872d38-2f3d-3dce-8563-060f45f1e532.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        98.47.36.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:ff:94:f5:5c:d3:5b:c3:ce:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=5b3c03e8-69ed-4056-8814-3c9334511719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:98:53:0c:07:f7:65:f1:a0:28:b4:8f:d4:
                    ab:ac:7d:aa:d6:20:42:58:a2:50:e9:e2:33:55:b4:
                    29:29:70:ce:b8:86:a3:f2:66:3e:4c:08:48:76:c6:
                    2f:a6:46:ce:79:ab:3a:32:c7:1a:e0:ed:fb:8e:c5:
                    94:7b:42:ef:67:8d:d4:61:44:9f:4d:81:bf:20:06:
                    ab:36:ca:38:6b:2f:5d:9a:0d:58:59:aa:15:d8:4a:
                    49:c8:8a:94:07:49:bb:f7:c2:16:7f:91:3f:98:45:
                    7c:94:2e:42:31:01:e6:9d:ae:55:ac:29:ab:e1:59:
                    47:cd:8b:0d:aa:28:59:7a:38:1a:4d:b2:f9:f9:1c:
                    55:23:cb:ec:52:99:a4:08:ae:05:9f:06:02:b7:ce:
                    19:09:12:bc:de:1d:3d:aa:72:50:2c:17:3d:1f:48:
                    a4:d8:79:c2:14:4a:fe:e5:9f:14:39:94:96:bc:bc:
                    1b:65:47:62:06:56:5a:19:25:6e:99:7f:72:7b:78:
                    d2:8e:49:c5:ea:d0:41:80:5d:4d:5d:f9:b1:7b:0f:
                    e7:6e:33:fb:77:88:0f:76:24:63:34:70:94:fa:07:
                    71:61:3a:1e:cc:f0:5b:30:46:71:04:be:44:01:d7:
                    35:03:ff:e5:06:ff:a2:00:fd:aa:d8:7b:e4:5d:6d:
                    23:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E1:9F:72:42:AC:5D:C8:F3:8B:56:17:03:ED:2A:DA:2E:DB:76:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94872d38-2f3d-3dce-8563-060f45f1e532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.47.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:33:4b:0e:3f:84:fb:5e:95:79:f9:6f:40:71:1d:2e:22:4b:
         54:c6:f8:1e:68:21:c4:a8:df:35:e2:54:4a:f0:be:78:41:55:
         4d:58:8a:e8:e4:69:27:3b:33:98:13:bd:87:8c:bd:27:f0:72:
         eb:40:84:b9:4a:aa:6a:f0:77:4e:e6:42:99:4f:d8:69:84:b9:
         2f:90:9c:35:ef:98:79:88:26:f8:95:17:56:07:94:bb:b9:7d:
         ce:22:c7:74:d6:21:fc:d7:48:a3:82:12:d9:d5:f1:b5:f0:d7:
         4b:3b:5b:ee:86:37:23:04:31:b0:30:db:fe:2e:9c:12:21:7a:
         e5:9f:a1:d6:ef:5f:80:0b:86:b0:69:00:9f:d9:4d:7f:4e:56:
         b2:b5:55:63:2f:fb:93:d8:4f:98:ea:fd:ab:f5:be:b3:64:75:
         83:a2:2e:9b:79:c4:1d:93:ad:27:67:17:d1:7a:60:11:e7:ec:
         fb:ac:70:85:9f:23:0c:82:f5:26:b3:37:2e:b2:49:aa:01:30:
         9f:54:16:6f:2c:f4:c6:2d:15:aa:a2:39:d6:0a:43:c7:d9:de:
         02:a2:37:d1:66:4e:51:2f:7d:f7:81:1e:a9:1f:40:65:cd:ed:
         10:07:5f:35:09:0f:fb:e2:6c:d0:e0:ec:a6:99:3d:f8:f9:df:
         95:b4:94:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssf+U9VzTW8POwkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NWIzYzAzZTgtNjllZC00MDU2LTg4MTQtM2M5MzM0NTExNzE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylaYUwwH92XxoCi0j9SrrH2q1iBCWKJQ6eIz
VbQpKXDOuIaj8mY+TAhIdsYvpkbOeas6Msca4O37jsWUe0LvZ43UYUSfTYG/IAar
Nso4ay9dmg1YWaoV2EpJyIqUB0m798IWf5E/mEV8lC5CMQHmna5VrCmr4VlHzYsN
qihZejgaTbL5+RxVI8vsUpmkCK4FnwYCt84ZCRK83h09qnJQLBc9H0ik2HnCFEr+
5Z8UOZSWvLwbZUdiBlZaGSVumX9ye3jSjknF6tBBgF1NXfmxew/nbjP7d4gPdiRj
NHCU+gdxYToezPBbMEZxBL5EAdc1A//lBv+iAP2q2HvkXW0jIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEXhn3JCrF3I84tWFwPtKtou23aeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTQ4NzJkMzgtMmYzZC0z
ZGNlLTg1NjMtMDYwZjQ1ZjFlNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYi8kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAYzSw4/hPtelXn5b0BxHS4iS1TG+B5oIcSo3zXiVErwvnhBVU1Yiujk
aSc7M5gTvYeMvSfwcutAhLlKqmrwd07mQplP2GmEuS+QnDXvmHmIJviVF1YHlLu5
fc4ix3TWIfzXSKOCEtnV8bXw10s7W+6GNyMEMbAw2/4unBIheuWfodbvX4ALhrBp
AJ/ZTX9OVrK1VWMv+5PYT5jq/av1vrNkdYOiLpt5xB2TrSdnF9F6YBHn7PuscIWf
IwyC9SazNy6ySaoBMJ9UFm8s9MYtFaqiOdYKQ8fZ3gKiN9FmTlEvffeBHqkfQGXN
7RAHXzUJD/vibNDg7KaZPfj535W0lIo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:06:12 2025 by rpki-client