Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f24006e8-587f-3bfd-bbeb-5013c21571a5.roa
File:                     f24006e8-587f-3bfd-bbeb-5013c21571a5.roa (raw, json)
Hash identifier:          Z+ZEdEL6A7Vps54Bkbw6qz+Mp3EMpdx75i53DDpkoRQ=
Subject key identifier:   04:39:ED:78:5C:F4:48:B9:3B:73:3A:F6:36:E5:23:4B:32:49:5E:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F94B2D47DC615CC7042B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f24006e8-587f-3bfd-bbeb-5013c21571a5.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        76.142.136.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:4b:2d:47:dc:61:5c:c7:04:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=4f0977ef-50bd-46b2-a31c-c47bcd9310e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:07:02:84:0c:b6:35:e7:bc:02:88:85:bf:85:
                    51:52:aa:c1:f2:f8:29:63:7e:d8:3b:01:d0:ab:f3:
                    7d:3f:88:42:60:44:3d:4c:2b:e3:12:c7:d2:bc:00:
                    f0:3a:c2:be:b3:0d:b6:0b:be:d0:44:ab:ca:d5:0b:
                    c4:29:d2:58:20:86:bb:ab:31:52:cb:4b:01:36:e4:
                    13:67:59:9f:6a:af:94:b3:2e:a9:a3:61:5b:f5:d7:
                    2d:61:07:ec:23:10:81:38:3f:d1:f9:de:37:ca:d6:
                    8a:f7:68:3b:62:29:2c:98:94:8a:7b:dd:fc:81:7e:
                    99:24:0c:81:69:e7:78:05:79:f4:3a:1a:b3:20:6b:
                    da:2c:38:df:c2:e3:c9:05:c7:4f:33:cb:12:02:92:
                    ce:49:ac:1f:ec:36:a3:8d:e2:20:25:0c:59:a9:00:
                    d2:6f:16:f3:77:b4:6c:5a:74:21:9b:62:df:43:52:
                    2c:a3:4a:79:d3:d0:b2:a0:20:d8:0b:c1:6a:57:23:
                    46:1f:b8:2a:81:53:1c:4f:b4:fb:88:87:84:cc:2f:
                    e6:b2:66:86:62:3c:54:37:5a:c2:c9:b2:a6:51:36:
                    49:93:46:f3:0b:c2:68:76:6d:f9:23:3e:94:89:a2:
                    f0:7a:39:c9:3d:e9:fa:9f:5c:ad:c5:a8:f8:9c:a0:
                    79:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:39:ED:78:5C:F4:48:B9:3B:73:3A:F6:36:E5:23:4B:32:49:5E:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f24006e8-587f-3bfd-bbeb-5013c21571a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.142.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:3c:1e:ab:1e:df:41:9f:e3:78:d0:90:1d:a3:c1:b3:63:7f:
         89:9d:14:26:0f:45:a8:d3:c0:ba:f5:a4:24:61:b4:25:1a:b4:
         9f:2c:df:f9:89:a1:7e:92:1a:6b:c2:de:8e:93:73:00:a7:56:
         75:b9:67:4a:26:67:70:69:0c:b9:cb:10:3d:4b:9a:ee:bb:9b:
         f3:88:e2:40:c9:ac:39:88:aa:36:5c:41:03:21:85:7d:8a:2e:
         fd:91:be:91:3e:6c:f2:05:3b:fb:6b:ba:c6:eb:79:43:66:d4:
         63:03:17:bd:19:87:0d:99:23:73:42:6d:25:e3:6c:c4:12:eb:
         a1:04:68:0f:bc:97:df:e9:f2:b3:75:6a:91:7a:bf:c9:36:39:
         b4:4b:54:14:6e:59:2a:d7:d0:c7:ed:06:be:76:0c:bb:06:cc:
         0d:e7:88:71:e6:5b:a6:7e:2b:40:96:c3:28:1a:0f:47:21:84:
         d6:9c:46:51:a2:5a:c1:77:70:32:30:78:31:c2:07:fa:e0:b7:
         08:34:5f:cf:32:b3:be:3f:5a:a3:4c:a7:9e:7c:29:b4:cf:c9:
         4d:42:d9:79:88:c7:af:9c:15:67:55:e6:f1:a1:9d:57:90:a8:
         61:9c:4d:f5:40:8d:b3:f6:3d:1d:57:0e:4a:69:5e:e2:27:d8:
         43:1d:32:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:26:37 2025 by rpki-client