Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c70e7fe9-1ff8-3142-8495-b2890e3b80dd.roa
File:                     c70e7fe9-1ff8-3142-8495-b2890e3b80dd.roa (raw, json)
Hash identifier:          NZtO3LXJDcIH4l/RAjV0uyU3DG8DaPF23W3v0GUpZkg=
Subject key identifier:   7E:3D:7E:E6:42:85:25:B6:B3:DE:6B:83:8E:92:3D:9C:EF:49:D2:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8C8179677A7C127FCD040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c70e7fe9-1ff8-3142-8495-b2890e3b80dd.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        98.217.28.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:c8:17:96:77:a7:c1:27:fc:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=929509b4-5126-4ae2-a9ea-5104372d9132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:1d:9b:1c:81:79:fb:3b:d4:a5:fd:fa:0a:
                    ce:93:dc:29:b1:4c:30:01:64:ae:74:9f:d6:b4:20:
                    00:34:6f:11:50:f3:7f:78:7d:1d:f3:57:6d:fa:c1:
                    38:2a:59:42:d3:4d:4e:32:fd:aa:bf:9d:3c:92:14:
                    c5:a0:9b:ba:af:02:d0:6b:5f:cf:1e:95:4c:10:d9:
                    df:2b:77:8e:91:e9:ae:ec:ec:00:3c:2b:cc:91:c7:
                    5a:11:7f:22:fe:7d:28:ba:7b:ae:28:5c:fc:42:e3:
                    5e:1f:58:37:e5:9d:99:e4:93:e4:ae:53:07:fd:97:
                    41:a2:e8:0b:cc:58:74:39:30:a1:4f:03:6e:bf:ae:
                    93:79:0c:89:da:de:a8:5f:b3:91:b0:85:18:43:60:
                    19:bd:f5:11:7a:7d:a8:26:a8:57:de:f4:85:c8:0e:
                    9f:00:81:0b:bb:64:3e:48:e5:9c:a9:9b:0d:4e:16:
                    72:f7:1e:9f:0b:d6:d7:42:0d:40:de:b4:10:82:90:
                    e5:dc:14:99:41:7a:f9:0f:16:88:09:34:d4:83:18:
                    7f:d1:be:27:84:61:8c:bb:14:af:b6:c5:32:55:6b:
                    11:d0:26:e1:11:da:af:77:62:4a:cf:96:65:f5:0b:
                    77:40:55:13:ae:bd:af:82:19:52:98:9b:be:74:be:
                    8e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3D:7E:E6:42:85:25:B6:B3:DE:6B:83:8E:92:3D:9C:EF:49:D2:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c70e7fe9-1ff8-3142-8495-b2890e3b80dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.217.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:e5:31:58:0c:4d:04:d4:0a:68:79:21:d6:f6:5c:a3:32:55:
         4e:ba:1c:9b:2e:ab:b6:81:b8:54:9a:b7:48:b5:4a:e5:3e:fb:
         4a:c1:e4:79:c4:d4:24:97:23:b2:cc:14:29:9a:91:f8:47:a1:
         26:e6:3c:25:dc:58:04:90:d4:39:b6:8d:1c:fd:5c:ce:64:2a:
         44:65:76:3d:1e:49:12:57:d8:26:60:a3:20:f8:b6:10:d7:ea:
         49:f0:b9:f8:cb:3a:3b:b9:02:e4:e9:bc:76:d0:56:75:c5:ea:
         d3:46:34:ea:0e:82:db:84:d3:b5:2d:18:22:25:55:4b:ae:83:
         b8:00:21:b9:04:e3:cc:86:9d:c0:37:02:4e:9f:64:09:59:cf:
         8d:bc:1b:88:04:ea:8b:d8:27:c9:a6:9b:0a:11:a8:cd:61:6a:
         9c:59:02:b4:a6:c6:d0:65:ea:26:24:26:47:51:a2:43:e8:71:
         4d:bb:55:16:39:98:7f:c5:34:2a:47:ad:13:42:6e:37:17:2a:
         54:e8:a2:97:a2:bf:61:68:3e:2e:10:b1:bb:84:31:da:6f:79:
         a6:a1:61:4f:52:57:45:0b:75:e8:1a:84:53:c2:e0:93:b2:89:
         80:3e:51:40:75:e1:fc:92:f4:65:19:7e:8e:d7:c5:91:d8:e9:
         5c:7d:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:15 2025 by rpki-client