Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea9201cc-1515-30ab-9982-98501eb38e69.roa
File:                     ea9201cc-1515-30ab-9982-98501eb38e69.roa (raw, json)
Hash identifier:          RiIQ6RRodewMaVtttpZxCWVVRN4RFX/ayBXXwfwf0Yo=
Subject key identifier:   67:6E:75:01:DB:B7:84:6D:5B:F1:7D:96:55:67:12:0D:2F:E5:F6:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB02A1843C4CD70C6ABB800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea9201cc-1515-30ab-9982-98501eb38e69.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        98.37.226.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:2a:18:43:c4:cd:70:c6:ab:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=05590a49-1a86-477a-a873-b691115b5af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f5:1f:ba:2d:20:3e:23:4c:c9:c5:cd:9d:ff:
                    84:51:bd:cb:58:53:eb:46:35:05:9f:e8:3a:b2:b7:
                    fa:71:10:0e:1b:dd:04:5f:9c:96:1b:02:74:79:0b:
                    1f:ad:f3:7b:e0:55:b2:31:54:76:fe:28:75:e5:70:
                    9f:db:05:4a:95:d4:6f:76:38:32:08:dd:11:9b:d6:
                    80:63:83:b5:e9:86:d7:2f:ec:bd:2c:fe:2d:72:ab:
                    20:98:61:e7:ba:40:ec:9b:fc:a6:f8:58:b6:5b:91:
                    63:e1:0e:a8:1c:83:6e:57:da:23:97:c9:8a:bf:06:
                    c6:44:9b:e5:95:14:a6:e1:61:06:6c:db:5d:0a:b9:
                    88:6e:31:fb:08:24:6f:6c:e4:f7:88:b5:31:ae:ae:
                    4f:8e:96:35:f0:48:b2:cc:90:10:7e:e9:e4:51:9c:
                    40:06:c8:22:4d:0e:5a:45:de:62:55:c0:90:2e:ca:
                    58:2d:a5:f5:8b:ef:ae:8c:6e:3d:e3:e0:d5:27:d6:
                    3e:8d:8e:54:75:d7:a0:98:01:ef:82:13:7f:b2:77:
                    c9:7e:c7:ee:bb:ae:0d:5c:92:90:47:8f:4a:0d:6e:
                    f1:0e:0d:69:a8:61:38:0f:1d:12:3f:78:a0:3d:00:
                    06:e0:f3:83:f3:20:49:ed:7c:62:c7:8e:08:01:02:
                    98:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6E:75:01:DB:B7:84:6D:5B:F1:7D:96:55:67:12:0D:2F:E5:F6:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea9201cc-1515-30ab-9982-98501eb38e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.37.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:8a:bd:fe:ed:e0:c8:a2:00:cb:38:83:3d:f2:ba:7e:e1:4e:
         99:39:ea:9f:00:a3:42:3b:24:44:a7:36:2f:2c:96:fa:87:07:
         3c:9f:33:65:9d:f5:32:9f:96:9e:e8:7b:ae:6b:30:20:82:b7:
         fd:83:74:9b:c0:44:b2:bc:03:5a:3e:9b:46:2d:14:f3:c8:ac:
         e5:b2:2d:89:dc:79:3f:c7:4a:48:fa:9b:2d:a3:25:bb:c4:a7:
         50:b0:07:0e:b4:b5:43:12:67:11:a6:2c:e5:ca:85:72:be:37:
         8b:47:b3:c7:9c:39:70:bd:1a:ed:1f:32:ab:0b:31:74:50:2c:
         e2:96:60:1b:5d:d8:f1:06:ef:27:52:6a:30:8d:5c:55:e4:16:
         37:9f:7d:f2:da:59:0c:64:41:86:73:07:93:e6:36:3d:95:56:
         2e:b9:8c:41:c0:13:2e:9f:d2:ea:f7:56:f1:a1:7c:b4:2e:f4:
         26:1f:bc:39:a7:91:15:9c:d4:da:37:26:47:56:51:0f:06:9f:
         8d:97:d9:bf:72:07:28:ba:67:9b:09:6c:1a:3c:b9:d6:52:3f:
         2a:e8:db:cc:a4:7f:08:d0:2a:75:01:1a:ff:c0:a6:1d:3e:2a:
         cc:d3:7b:7b:29:f6:26:ba:3f:56:21:21:96:10:c2:99:e4:e7:
         a0:6e:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:34:06 2025 by rpki-client