Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d81e0081-33a7-3630-8fb1-8454d50e44ac.roa
File:                     d81e0081-33a7-3630-8fb1-8454d50e44ac.roa (raw, json)
Hash identifier:          QNL90N6c17NBmReuPcgZpebXxLyOc6OOrMjcfBFN8aA=
Subject key identifier:   B5:DA:37:8B:FE:D1:C7:EF:F6:77:D7:8E:F1:82:14:4D:1D:E2:75:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F80FC9D28DC7BA0A4D6500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d81e0081-33a7-3630-8fb1-8454d50e44ac.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        98.199.56.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:0f:c9:d2:8d:c7:ba:0a:4d:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=fa6c67d5-9163-4981-862f-98126d43b74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:72:f3:de:29:ac:79:dd:6a:d5:e1:b5:3a:08:
                    9a:66:72:16:a9:37:67:a7:99:32:3d:5d:ad:19:a8:
                    1d:09:30:37:f2:8f:21:46:4d:a7:07:41:00:7c:a0:
                    5e:ff:da:76:2a:6c:65:43:6f:80:75:4a:c4:f9:3d:
                    57:9b:cd:48:4a:ec:1d:c4:7a:57:03:19:a2:fc:0c:
                    2a:ec:00:45:83:d3:62:f6:db:74:b1:c6:de:7b:06:
                    68:d4:92:3e:13:24:bd:49:a2:20:47:a1:05:ad:98:
                    66:bd:5a:71:35:f5:b4:4b:d0:53:1f:de:8a:4d:25:
                    a5:d9:de:48:86:4a:36:4e:9e:de:da:42:4a:4d:0a:
                    ba:60:21:49:9d:40:04:41:cd:f5:90:ea:01:ff:ae:
                    aa:ae:59:64:10:99:7b:89:e0:fd:53:21:f1:3f:8c:
                    e8:2d:2b:29:2e:b5:6d:1d:34:f4:1d:25:b1:e3:53:
                    37:55:7f:a1:a3:6a:b7:83:71:89:a7:f6:56:d8:7d:
                    d3:72:36:86:76:36:09:28:9c:d8:a3:ef:df:77:69:
                    7b:4a:42:76:88:ce:92:8b:ef:b4:fe:33:2d:f6:90:
                    57:a8:0b:d7:02:cd:1e:f1:90:b0:d8:eb:03:90:52:
                    2c:4c:9e:dc:90:05:98:eb:4a:98:9e:2f:84:30:fd:
                    13:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DA:37:8B:FE:D1:C7:EF:F6:77:D7:8E:F1:82:14:4D:1D:E2:75:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d81e0081-33a7-3630-8fb1-8454d50e44ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.199.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:3f:d8:a1:81:27:5d:ae:4b:7c:6c:78:db:d0:3e:39:3d:b8:
         0f:50:e0:aa:97:c8:78:56:4f:80:44:32:df:fc:d9:2e:be:26:
         d3:56:32:ed:13:e0:8f:c4:e2:cf:99:38:7b:af:75:d4:13:64:
         80:d9:ad:02:fb:a2:f5:19:57:09:43:c6:44:55:c0:fd:15:09:
         6d:10:f6:12:75:61:0e:8f:24:2a:78:92:f6:6d:fc:94:f2:0f:
         cc:d0:09:cd:b3:7b:d7:2f:32:c6:b8:a0:b2:a2:5b:d8:a7:b1:
         ef:ac:01:a2:4a:14:e0:6b:ce:02:3f:fa:e6:75:4f:b3:94:41:
         15:8b:89:36:83:2e:37:60:b8:81:a9:a2:77:fc:73:67:6d:c2:
         e9:d9:e3:30:22:59:bb:43:83:f9:92:98:cf:79:2d:c1:2a:be:
         07:c0:b1:ab:71:84:63:9d:88:65:72:aa:4b:ba:ba:88:99:ac:
         1b:a8:8b:67:64:78:67:bf:71:71:05:bf:6e:71:86:9e:80:ce:
         0c:f7:6d:2f:ef:ec:09:60:d5:ca:00:1a:ab:41:50:de:47:29:
         18:43:cb:a1:22:95:e4:db:0f:c0:39:77:c7:30:0f:1a:89:56:
         00:c3:cf:74:1a:b2:9b:33:e0:f2:8b:1f:f3:00:75:ff:6e:71:
         86:b5:45:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:19:20 2025 by rpki-client