Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f54fabe0-d6ce-3a22-a4ef-130fe3d38ae8.roa
File:                     f54fabe0-d6ce-3a22-a4ef-130fe3d38ae8.roa (raw, json)
Hash identifier:          xssKo2QZf7D/4PcOsQLyzmkJiXyC9/qr9WcQhUkBwbs=
Subject key identifier:   28:C8:CF:56:88:C9:C8:22:99:24:34:D2:95:D9:58:FC:7F:8E:35:1C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0C70BB65D83462DCDF488
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f54fabe0-d6ce-3a22-a4ef-130fe3d38ae8.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        67.162.28.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:c7:0b:b6:5d:83:46:2d:cd:f4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=feadce25-aea6-4f2a-b9c7-ff3c523e07f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:d3:76:5f:ce:15:ba:29:2d:94:92:3d:3e:
                    37:b1:6c:ae:05:e5:b7:e7:f8:5e:5f:51:3d:3d:4e:
                    d4:e5:21:ff:e6:e4:c2:fc:da:fa:2a:6d:49:ac:04:
                    51:e0:45:17:96:06:1f:85:28:0f:d0:25:2e:48:1b:
                    2c:cd:1f:50:28:dc:2a:d1:75:37:70:c3:0e:ae:8f:
                    ac:1c:99:13:89:1f:41:b7:20:62:4b:ca:d5:1a:e1:
                    4a:91:2e:13:5f:c1:67:9f:50:b2:93:2c:a6:27:cb:
                    a8:78:0f:6a:99:c0:50:bd:8a:6f:72:f7:81:c6:9d:
                    0a:ec:eb:99:5a:ca:ad:a7:ae:de:ce:08:64:d8:b9:
                    b0:dd:c8:04:b2:3c:63:6c:99:c7:dc:8a:f2:84:b1:
                    10:99:20:78:80:29:d5:95:4a:d1:76:d2:8b:d4:da:
                    27:71:0a:e9:a0:57:62:77:b5:fc:d2:b5:29:4a:b3:
                    89:42:e0:b3:76:4e:56:95:41:b3:c3:9a:d5:c3:e9:
                    09:14:9b:22:35:53:c3:ae:b5:fa:13:47:07:cc:7d:
                    7c:bf:9a:89:c8:a6:c1:57:d2:85:70:02:14:4f:d5:
                    f3:3a:e7:6a:5f:c6:31:49:97:7f:e6:fa:2d:17:e9:
                    ee:04:5b:89:a9:6f:76:c7:c7:aa:3d:ac:99:4d:b9:
                    bb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C8:CF:56:88:C9:C8:22:99:24:34:D2:95:D9:58:FC:7F:8E:35:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f54fabe0-d6ce-3a22-a4ef-130fe3d38ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.162.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:4d:29:2c:e4:69:99:70:7a:35:3b:c2:7c:b5:7d:4d:44:60:
         f6:b7:e1:00:61:6e:04:b9:b0:5e:95:39:61:5f:66:34:71:ae:
         46:29:30:ac:ee:5a:62:28:f0:73:27:fd:18:30:8a:64:42:0d:
         25:5c:fa:cb:e6:06:81:f1:b5:a3:8a:73:fd:d6:b3:1c:87:b5:
         5d:dc:1e:90:ba:87:56:24:8a:8e:b5:24:99:a1:bd:4b:7c:e6:
         5a:f7:1a:60:3f:bb:a8:db:99:ad:66:08:17:2d:06:1e:57:ba:
         b8:00:4f:d1:80:f5:60:11:91:65:94:b2:af:7e:30:6b:85:fb:
         85:31:51:a7:8b:af:02:fb:bb:64:49:32:1a:1f:65:af:f7:34:
         a2:34:09:7e:1b:08:7d:27:86:87:c1:7a:75:66:3e:76:43:ed:
         62:24:20:82:5e:25:e8:ad:31:65:5c:ae:40:61:56:00:d4:b1:
         69:5e:5f:1d:12:4f:d7:64:8d:39:de:52:1c:46:ac:5d:67:11:
         9f:65:6e:29:ba:92:d8:ea:43:75:90:b1:5e:87:92:39:bb:dd:
         61:44:9e:53:25:36:a4:25:0e:e1:ae:d1:41:31:c8:a0:d6:1b:
         e0:76:68:5b:39:50:15:95:3d:75:ed:8d:ed:51:7a:94:9e:dd:
         52:49:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:13:25 2025 by rpki-client