Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d91244df-6327-340f-83eb-883454b1bd78.roa
File:                     d91244df-6327-340f-83eb-883454b1bd78.roa (raw, json)
Hash identifier:          2iWu2TJcaSbPVFLO+nNFBkp6ax6bHcvGU7H0XYA558U=
Subject key identifier:   A2:39:C4:8B:A9:9B:57:EF:74:C6:8D:CA:14:6E:0C:14:6E:EB:D5:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B1F6504809B845A395FB8080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d91244df-6327-340f-83eb-883454b1bd78.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     7922
IP address blocks:        76.96.174.64/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:50:48:09:b8:45:a3:95:fb:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=7588406f-788d-42ec-8a4d-453e88115207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b2:cb:ae:0d:36:7b:a6:f7:80:74:33:99:2d:
                    49:92:0f:af:b9:6a:be:6e:5e:bc:dd:f5:8b:66:6f:
                    4b:a3:66:4b:18:7f:76:4d:15:56:55:80:b5:11:bb:
                    e4:bb:bf:2f:2d:be:e7:6a:46:e8:78:48:64:25:10:
                    fb:94:25:d4:9d:6a:8e:ed:a3:ae:fb:7f:f5:3c:56:
                    33:be:11:61:b7:03:df:ef:f0:79:39:c3:cc:8b:c6:
                    c3:1a:f7:4b:19:35:70:62:21:87:a4:0f:7b:0c:54:
                    95:e9:5b:27:fa:2a:91:d7:c5:c3:3d:c2:05:db:9e:
                    d7:c1:8d:5e:bf:92:4b:68:bd:22:27:b9:45:5e:13:
                    6f:3e:60:08:61:be:4e:24:62:df:eb:ed:af:61:ec:
                    e6:b9:3a:9a:c8:49:a3:c0:7b:e4:f2:17:3b:06:3a:
                    09:58:05:de:c3:19:c4:a4:35:8b:ef:fc:b8:d4:b5:
                    4d:a0:c6:d0:b1:e6:a9:ab:f2:62:c8:83:2d:95:b6:
                    7d:0b:3c:5e:1e:0d:b7:94:21:79:b0:1c:5e:a2:94:
                    91:02:4a:60:cd:dc:6e:97:93:94:02:2b:98:4d:cb:
                    05:e2:f5:e1:6f:2b:50:15:a3:65:a0:1c:25:9d:48:
                    32:b5:52:33:b8:b2:19:d9:11:38:2f:97:10:d1:a4:
                    24:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:39:C4:8B:A9:9B:57:EF:74:C6:8D:CA:14:6E:0C:14:6E:EB:D5:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d91244df-6327-340f-83eb-883454b1bd78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.96.174.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:77:8c:a6:bb:db:c3:3e:c1:31:47:10:a9:28:52:0a:25:8e:
         22:8d:23:c3:46:4c:4a:a9:c8:c2:77:53:c9:5a:0c:49:3b:be:
         be:b2:32:fb:cf:c8:84:1a:ff:0c:98:28:90:4e:a2:ac:04:e3:
         1b:34:43:57:f9:42:18:f5:67:33:ce:8e:c9:79:1e:4c:37:ee:
         fe:26:73:26:e9:4a:47:47:de:23:35:f7:b0:48:d6:cd:1a:3a:
         a4:e1:60:0a:29:36:32:e9:c0:a5:af:41:a9:32:2f:22:8b:40:
         cc:a4:41:17:73:c8:07:fb:e1:3f:f3:01:15:10:55:a1:fd:95:
         fd:0c:ad:49:98:e2:1e:fb:1c:8f:56:2d:23:60:2f:92:7f:57:
         96:4a:4b:7d:4e:8c:23:44:4b:da:25:24:37:68:07:cc:ae:e5:
         22:b9:44:25:4f:a5:05:26:da:04:58:7f:e9:bd:a6:db:86:ee:
         94:a4:f4:04:28:aa:80:23:6b:97:13:c4:0f:2e:93:57:d1:ba:
         12:69:95:6d:fb:ce:6c:b0:9d:8a:82:60:e1:72:b2:56:2c:38:
         43:87:0d:6f:88:e4:c9:52:e2:cc:3a:a3:86:be:b1:c6:ad:22:
         b7:ba:57:81:cf:77:b0:1c:e3:f0:af:2a:ba:10:91:70:d8:6e:
         03:6f:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:24 2025 by rpki-client