Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4eae12e-265e-37a4-8b22-380628e3e2f3.roa
File:                     a4eae12e-265e-37a4-8b22-380628e3e2f3.roa (raw, json)
Hash identifier:          bhP1uJvfB1gEmr9cUAxUdemGhJOfCI124DNfjJLtsDE=
Subject key identifier:   F4:45:26:3E:C4:84:99:7F:1E:A1:C9:9A:B0:B8:4A:FD:07:88:3D:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB161CEA4BDD6FD6E46C740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4eae12e-265e-37a4-8b22-380628e3e2f3.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        98.46.0.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:61:ce:a4:bd:d6:fd:6e:46:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=90845772-49c8-4273-9d56-140c10eec7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:69:a1:9c:d8:af:1f:46:9d:fb:27:93:c9:23:
                    77:74:cd:2d:42:b0:38:ff:0b:8b:5f:05:77:73:d3:
                    d8:b6:e3:43:44:90:8f:b5:cf:81:88:da:5c:b0:5e:
                    ef:a9:3d:7e:5e:71:57:38:fa:77:5b:8a:38:1c:7a:
                    65:81:18:b5:6d:dc:b5:b5:61:fe:ce:35:02:5a:2d:
                    5a:da:09:ff:02:52:d9:00:01:cc:17:29:0a:aa:7f:
                    9f:1b:53:91:64:46:1e:6b:3e:9f:19:a4:5d:69:fb:
                    85:a0:4a:01:3b:57:ec:d9:cf:68:61:5d:1b:7d:87:
                    54:d4:e1:3c:42:98:36:c2:8a:a6:a8:a5:5b:f9:ca:
                    80:c8:a0:22:f6:e1:85:45:10:e7:fb:aa:9a:42:b6:
                    ab:e0:bc:b5:d5:77:50:01:02:02:d0:07:29:eb:b1:
                    d4:34:c0:16:45:d4:ad:20:a1:2f:fa:59:47:30:2f:
                    20:72:91:25:ad:56:c5:15:90:b4:56:67:21:57:c6:
                    2d:f2:7a:ed:47:a2:2a:a1:79:74:45:51:4d:4d:38:
                    37:0b:5c:59:78:8d:04:1b:e1:26:fd:47:5f:89:1d:
                    df:17:0a:b9:de:d5:20:88:55:a9:8a:f0:2e:ed:a0:
                    a8:5f:c1:c9:8b:4c:9d:c2:f3:3b:66:e5:90:6a:8c:
                    42:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:45:26:3E:C4:84:99:7F:1E:A1:C9:9A:B0:B8:4A:FD:07:88:3D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4eae12e-265e-37a4-8b22-380628e3e2f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.46.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:8a:26:12:5b:07:93:ca:4a:a1:ba:7c:06:9e:2e:83:c9:b9:
         3d:bf:22:3e:6a:4a:14:a7:27:33:71:e3:c3:24:29:9b:be:c8:
         b7:ba:db:a8:c8:f0:d6:bc:eb:0b:3d:9f:d8:c7:4b:f1:4e:3a:
         f2:40:9e:5b:28:06:dc:cb:52:6f:04:2f:2f:7e:22:63:8a:0f:
         38:0f:83:09:db:f5:eb:b1:eb:e4:5c:fe:3c:7d:eb:96:d7:42:
         56:02:2a:02:47:55:25:ff:7c:07:3a:a0:96:64:36:60:86:23:
         74:90:ae:1b:65:e8:d4:c3:d0:73:68:3f:a6:18:de:e4:80:3c:
         0c:80:f3:c7:13:cf:47:7d:cb:b7:86:97:bb:1c:44:5b:d2:22:
         9f:c6:e6:f2:9a:5d:1a:12:4a:ed:a0:89:70:54:2f:15:30:9f:
         22:9b:37:e2:dc:b2:50:e9:b5:0d:d9:0d:6b:1d:b9:e0:86:2d:
         51:2e:4f:4d:02:b8:dc:1a:62:ee:b5:ae:d0:cf:7e:71:ae:04:
         27:a8:ee:6b:13:48:f5:02:a0:33:e4:02:e6:ac:90:4a:87:0b:
         58:7b:81:df:89:a5:83:fe:c4:94:4a:df:ea:d2:e2:45:5c:2c:
         ab:0a:ff:a6:90:17:43:25:a3:33:ae:23:55:6e:f9:ef:b5:49:
         ba:c5:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----