Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5b53ec5-6e2f-3187-b246-50fa6c518536.roa
File:                     b5b53ec5-6e2f-3187-b246-50fa6c518536.roa (raw, json)
Hash identifier:          OLg2EtnGG1FQ+jN9nuCb3m/z5BrV7TwhNEZGXcNZQrA=
Subject key identifier:   32:68:9E:C2:BD:82:5D:39:B0:91:11:7F:BD:46:55:1D:BB:95:B9:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAEB7E8E1FEDB9EAEF0DFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5b53ec5-6e2f-3187-b246-50fa6c518536.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33660
IP address blocks:        96.216.78.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:b7:e8:e1:fe:db:9e:ae:f0:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=2fdfc515-92d9-4ff8-ae2d-208419336d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:33:e7:e0:5a:56:01:78:61:03:90:78:ec:
                    9a:55:9f:df:38:78:bc:ab:1c:08:0c:db:f9:67:56:
                    34:d0:c2:09:27:4b:d5:11:84:fd:72:62:2f:e8:38:
                    3f:cb:ce:ce:b5:20:39:02:85:73:91:c8:82:ce:e9:
                    b3:5d:cc:22:7b:6e:63:2a:8d:ed:c2:06:83:ed:60:
                    67:4d:22:a6:82:99:5e:cc:69:80:67:d9:3e:92:03:
                    0e:65:15:b8:33:ab:0a:47:12:ce:ed:81:53:6a:96:
                    a5:dc:55:f1:5d:3a:98:48:90:73:12:07:5a:dd:cc:
                    ab:8d:d0:c5:e9:52:46:33:00:d3:75:55:f9:18:64:
                    18:f3:78:5e:b2:af:37:7f:2d:14:38:04:36:29:87:
                    32:d3:9d:91:d3:b9:a2:c5:5b:db:07:4c:6a:ec:cd:
                    83:89:be:c8:df:b6:ca:6c:f5:a6:14:95:c3:53:1b:
                    6b:9c:61:1f:70:d7:e2:c4:aa:81:de:5e:6d:18:9c:
                    5c:5d:dd:81:eb:3e:62:8a:0d:5b:74:24:dd:4c:9e:
                    aa:1b:83:a7:ea:8d:98:07:ce:03:54:12:90:90:ab:
                    85:5f:6f:8f:6e:65:a5:ec:86:3b:95:44:a8:34:f3:
                    a2:1e:58:61:18:e8:9d:a8:0e:c1:9b:4c:d9:dc:0d:
                    cc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:68:9E:C2:BD:82:5D:39:B0:91:11:7F:BD:46:55:1D:BB:95:B9:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5b53ec5-6e2f-3187-b246-50fa6c518536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.216.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:6c:86:07:3c:c8:4d:f6:61:36:81:7a:48:fc:49:4b:4d:a2:
         0e:68:3d:fd:d1:59:4d:bd:05:47:e8:bd:e1:20:fe:e8:fd:c7:
         15:ad:07:c7:d1:08:13:66:cc:76:48:f3:58:2b:5b:50:5d:27:
         87:d4:ae:92:a4:b2:46:9e:e6:34:14:9b:90:1f:3e:a2:69:9f:
         90:6a:a1:7d:89:3e:35:10:32:61:11:af:27:a7:27:e4:54:69:
         fd:c0:68:cf:70:ff:af:5c:34:53:c3:01:18:e0:f8:28:16:7f:
         af:49:1d:5d:13:65:da:02:0a:e1:e7:a0:0e:3b:eb:90:34:a3:
         93:15:14:35:f7:26:f6:99:3a:fc:2c:49:7f:6a:6a:98:22:f1:
         09:70:0c:d7:53:8f:6f:f6:87:5e:d9:9b:ed:ca:c0:73:bf:87:
         3e:1e:78:f1:a2:f2:70:4a:63:24:1e:57:cf:7e:83:70:b2:88:
         32:44:64:f8:2b:4b:f6:5f:8d:9f:11:1e:c3:a1:9c:27:ef:1f:
         32:62:ca:45:c8:c7:0b:b9:7b:70:7f:03:31:81:55:07:77:c4:
         0c:1b:d2:f5:58:81:fd:c6:9d:5c:f7:08:40:00:60:95:f5:2e:
         d3:56:63:44:7b:c9:6f:a8:39:f6:bf:9f:6a:30:c4:25:10:b9:
         b2:2b:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:17:23 2025 by rpki-client