Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f46ce988-a06b-3160-858d-63cc2b52aa84.roa
File:                     f46ce988-a06b-3160-858d-63cc2b52aa84.roa (raw, json)
Hash identifier:          pWxVvdejU0STM/MS12+gCQxcWBfJe/W1lFaxKwHwkGc=
Subject key identifier:   32:79:C1:12:5A:88:33:A1:5D:35:84:0F:9D:22:B0:60:ED:37:64:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C8A7B471AEDA0D890B400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f46ce988-a06b-3160-858d-63cc2b52aa84.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        24.98.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:8a:7b:47:1a:ed:a0:d8:90:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=b88b57ea-b109-477f-8927-1d6c2386e700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:52:b1:e5:5e:79:69:0f:30:85:ec:64:c4:
                    5c:c3:e7:72:4d:84:31:33:5e:d2:fd:7d:9d:06:83:
                    c8:12:a8:a4:fd:8c:a3:7f:c8:b7:6e:ef:4b:c4:8b:
                    81:73:50:80:2e:64:5e:86:11:fa:26:1a:9a:4a:9d:
                    d3:ea:d2:c4:1c:9d:0f:3a:d7:49:0e:9e:27:83:ba:
                    cd:86:9c:47:e0:22:bd:3b:c6:1c:18:41:59:d5:40:
                    2b:75:70:f5:27:22:cf:5f:9a:cb:c6:3b:a5:22:13:
                    9b:ae:e8:19:1f:cf:91:dc:41:47:36:61:c5:75:8e:
                    ea:f9:4f:40:5e:23:80:2f:b7:81:c4:d3:0e:f3:ba:
                    c9:fe:9e:38:8a:b9:9f:94:56:d1:2b:d2:21:4d:cd:
                    17:84:7c:a5:70:34:21:1a:9b:ef:db:97:5d:c9:7e:
                    e5:b6:62:23:3b:84:82:01:c8:0b:e5:e7:e8:a6:dc:
                    fe:a3:cf:22:4a:25:10:c3:7a:c2:a4:e2:99:04:61:
                    f5:19:aa:b4:c4:81:39:55:6c:d9:8f:46:80:5b:39:
                    fd:9d:00:39:b5:14:00:07:18:dc:9f:fb:c8:ea:de:
                    ef:aa:2a:d7:6b:83:52:e1:73:2d:0c:ce:b2:5d:56:
                    9a:a0:58:45:2c:28:a7:98:1a:3b:26:1e:5e:2f:46:
                    52:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:79:C1:12:5A:88:33:A1:5D:35:84:0F:9D:22:B0:60:ED:37:64:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f46ce988-a06b-3160-858d-63cc2b52aa84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.98.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:12:ec:8c:a2:8a:78:e3:f1:ac:dd:41:a8:59:72:be:f6:01:
         b7:5b:4c:37:a1:93:44:c0:51:b3:f9:a5:e4:fd:4d:f9:9f:56:
         97:90:b7:24:7a:59:53:cc:af:c8:3d:54:39:d4:55:e5:bb:ff:
         36:69:aa:45:fc:97:5d:cf:1a:ba:85:2e:c6:3a:3c:7c:f0:31:
         cb:a7:16:f8:23:a7:f3:40:57:c9:3a:1e:ae:2c:7d:f5:03:66:
         70:7e:80:56:f0:e8:5c:d6:a2:b5:a3:a2:41:ff:13:3b:99:45:
         8c:c3:91:8b:97:94:af:11:a4:10:37:e9:84:66:36:62:36:36:
         c8:3f:13:97:31:0d:29:9c:b0:21:35:5c:82:a0:f8:4f:35:77:
         0d:c6:c2:aa:7e:c3:65:48:ea:a6:5f:2a:8d:76:ce:2a:f4:0b:
         bf:32:78:d4:ee:1d:bd:10:07:27:87:52:8d:21:00:75:28:fc:
         f9:cf:f4:90:10:8a:0f:25:57:0d:fa:58:b8:b2:67:e3:b5:65:
         24:0b:b5:7d:29:af:29:e2:25:8f:a1:f7:69:70:22:e5:d6:83:
         a9:0a:4f:6b:6b:98:99:c0:a0:71:ff:14:86:a0:fa:56:0e:a7:
         09:fd:36:77:d1:97:82:02:40:83:ae:07:ee:36:d2:07:7c:24:
         47:17:ab:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:31:48 2025 by rpki-client