Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7bf012d-7d72-35dc-a409-c6bc82ebe7a5.roa
File:                     e7bf012d-7d72-35dc-a409-c6bc82ebe7a5.roa (raw, json)
Hash identifier:          gqmRZuvBA4AGFwYo/NkS5Pf9DOzIepvXs8IcCiMD8i4=
Subject key identifier:   B5:EF:B9:C1:31:03:79:99:3F:5F:2C:9B:2E:76:83:F5:AB:C2:29:DD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D65FB2289B01FCEB05360
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7bf012d-7d72-35dc-a409-c6bc82ebe7a5.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33651
IP address blocks:        96.76.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:65:fb:22:89:b0:1f:ce:b0:53:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=c94f742a-bb96-4891-9806-2d9366aa6756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:09:9b:6e:7e:db:f3:fb:6e:e7:c0:43:23:bc:
                    79:15:08:aa:fd:b4:dc:99:8b:76:a9:cc:6b:b4:71:
                    9b:b4:f5:a5:5e:53:34:6f:14:fc:32:2c:b3:ab:5f:
                    c0:37:6d:c3:d3:41:ff:db:d9:4f:54:d0:45:b1:0d:
                    fb:e4:b1:72:06:82:55:fd:97:38:53:32:b1:95:a9:
                    2a:d1:1d:b8:a6:db:fa:12:bd:90:b7:6e:28:21:8c:
                    28:4d:f9:67:de:d3:bf:da:5d:d5:e2:c7:db:9d:14:
                    8d:00:52:cb:29:c9:ba:e9:dd:1b:ff:c7:6e:3b:22:
                    5f:91:05:bb:41:24:e4:a7:9f:38:dd:0d:d0:a7:3d:
                    d1:9e:29:7e:82:6e:f3:75:d0:4c:6e:da:6b:72:d6:
                    3a:d1:57:2f:39:c4:85:ee:b7:82:a8:be:bb:d7:29:
                    e6:d0:3f:d5:1c:da:60:d1:1b:45:ef:13:8e:2c:aa:
                    d0:68:9f:17:4a:71:82:78:37:af:02:2d:f5:c3:12:
                    72:c3:81:a6:ea:2a:42:4e:0a:63:6e:e9:c7:c8:0f:
                    0e:6b:c0:fc:5f:b9:10:d2:e0:e5:25:92:76:ba:65:
                    59:a5:f2:30:a0:aa:1a:d1:47:a0:3b:e4:52:fd:67:
                    1c:65:3a:77:98:22:74:19:3e:36:a9:d1:86:75:84:
                    c3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EF:B9:C1:31:03:79:99:3F:5F:2C:9B:2E:76:83:F5:AB:C2:29:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7bf012d-7d72-35dc-a409-c6bc82ebe7a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.76.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:5e:63:8f:dc:51:b7:81:c5:16:52:6d:02:3e:21:c6:2e:7d:
         9a:32:ba:d7:86:d7:d0:3f:b0:0f:00:90:be:5c:83:0f:a3:a6:
         0a:5b:db:51:4a:9c:d1:9c:a8:d5:94:56:f5:e5:80:fd:c0:5d:
         fd:4d:5f:44:a2:8d:4a:eb:a2:11:a1:dc:9f:f6:92:fe:c3:3b:
         49:00:ca:8e:1d:04:1f:a0:7d:75:8e:82:75:b9:4d:c2:84:a9:
         ab:ec:e7:c4:f2:ba:fb:c5:94:8e:82:ea:2f:45:09:a3:7a:93:
         3e:bf:a0:2c:b6:8c:8b:81:53:62:79:cd:3f:1c:9a:eb:03:a7:
         3d:96:03:5a:e6:32:95:91:d8:b4:67:42:cd:1f:05:37:97:97:
         8b:c6:04:1b:30:f4:a9:7b:f7:d8:87:e8:22:55:c9:8c:3c:55:
         a7:a0:3b:39:fe:22:dc:7a:1b:99:10:2c:09:42:97:14:d7:00:
         5c:23:51:9b:d2:f1:61:70:50:c0:58:90:ee:b3:60:aa:1f:4d:
         33:ec:6a:75:48:20:19:5e:a7:3e:b2:d6:6c:a4:67:f3:7c:18:
         7a:d9:8e:97:eb:62:02:c0:1d:b0:0b:5e:67:36:90:8e:f8:c3:
         95:2a:76:a1:28:55:38:02:de:0d:aa:f0:f5:31:39:cf:89:1d:
         58:91:7a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:14:48 2025 by rpki-client