Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b97ac18e-82cd-3fd1-8f15-9d9ed01bf41a.roa
File:                     b97ac18e-82cd-3fd1-8f15-9d9ed01bf41a.roa (raw, json)
Hash identifier:          zIuZK+UKShyaacHBkY7ps9BJZqIA+lIZ0x7R3HbxqvQ=
Subject key identifier:   47:57:96:CE:65:D9:0A:72:F2:31:25:E0:90:A3:C4:48:08:4F:C6:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F81988087ED036E5070D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b97ac18e-82cd-3fd1-8f15-9d9ed01bf41a.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        98.44.26.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:19:88:08:7e:d0:36:e5:07:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=b5b7c92d-96b5-4155-abd4-90f6e84b9f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:21:db:dd:4c:3b:12:fd:37:ec:e1:4c:09:
                    e3:02:ed:d1:cd:ae:c6:10:0c:94:96:29:86:09:c6:
                    5f:0e:6e:0f:13:92:10:02:cc:58:6e:3c:9c:e0:aa:
                    37:80:a2:f5:29:fc:79:50:ab:20:08:2f:d1:a6:2d:
                    36:f3:a2:fb:fb:b8:5d:1e:f0:06:b9:1a:dd:bd:09:
                    f3:20:75:cb:96:68:68:18:b6:e4:a0:14:63:18:63:
                    86:1c:82:ac:e3:81:a1:8f:3b:f8:66:a6:28:d4:6b:
                    79:0d:2b:23:dd:70:44:e0:b4:a4:1e:cd:f9:07:ac:
                    77:69:49:06:b7:11:77:03:6c:75:a0:51:e7:93:9c:
                    3b:2d:fe:19:24:64:c4:c8:40:fd:8a:9b:7e:01:57:
                    58:1d:e8:6e:df:49:d6:1d:06:99:67:9e:81:02:d9:
                    b6:b2:e0:50:08:16:84:9e:1b:c5:bd:3c:b3:a6:21:
                    5b:0c:a4:f7:37:14:16:80:f7:2e:20:e4:f3:37:10:
                    18:5c:2a:e3:7a:26:d0:89:b4:27:07:36:80:5c:b0:
                    3b:dd:e8:f7:7f:95:c4:c6:8d:85:ba:d7:d8:26:ed:
                    29:6b:66:9a:75:32:2f:ca:dd:f8:64:7b:e5:8d:64:
                    3d:30:4f:c4:2d:9e:1c:80:ea:18:90:3e:59:a9:9f:
                    a0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:57:96:CE:65:D9:0A:72:F2:31:25:E0:90:A3:C4:48:08:4F:C6:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b97ac18e-82cd-3fd1-8f15-9d9ed01bf41a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.44.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:7e:d5:07:30:9e:1c:63:c5:83:0d:85:8b:f2:8b:88:a0:a0:
         76:3b:cc:48:7a:3b:f5:d2:29:81:eb:0e:99:05:4c:40:d2:87:
         fb:32:b4:3f:47:c3:2d:a1:99:39:c5:f2:8a:55:95:0e:4b:8d:
         6b:7c:81:fd:32:28:ef:03:60:f3:72:e5:1d:5c:53:6f:bb:35:
         88:10:95:8a:c1:43:e4:4a:39:d9:85:44:cc:46:33:ac:71:28:
         99:78:8f:85:20:78:f3:21:0d:18:9f:27:b8:59:7d:45:92:18:
         00:68:20:9a:14:f7:f1:11:c2:3d:e7:47:b7:fd:68:1d:8f:84:
         2a:c6:a3:ec:1e:d6:8f:c3:62:1c:c4:74:29:b2:da:56:77:b9:
         7c:60:06:ff:a5:de:5c:df:37:46:f8:b5:f9:09:e4:3d:39:7b:
         e8:4d:21:e7:ad:8d:8b:b3:e7:1b:c9:e7:fa:7f:57:17:0e:53:
         4a:ac:fe:97:1d:01:12:1c:d2:3f:4d:42:fc:0a:33:93:eb:a1:
         ee:ae:68:55:bd:bf:4c:fe:12:14:48:49:1c:3e:27:8e:c4:17:
         01:b5:3a:ec:c9:d5:4b:f5:e1:cf:b7:73:4d:53:be:87:be:78:
         72:a4:2c:33:1b:d7:0c:4b:9c:35:57:57:9b:6c:a5:0b:98:10:
         69:d4:31:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:25 2025 by rpki-client