Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/100b0975-9194-3059-8370-4a05a69b3ffd.roa
File:                     100b0975-9194-3059-8370-4a05a69b3ffd.roa (raw, json)
Hash identifier:          nIIo5b1DdKZsvoIKvGUW0eKD8kW7ybqIs6HOloOC0i8=
Subject key identifier:   A7:47:65:62:E0:46:A5:8A:DA:6B:D9:2D:B9:E8:3C:4A:4A:47:80:92
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B2658A226D1272234F94D990
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/100b0975-9194-3059-8370-4a05a69b3ffd.roa
Signing time:             Tue 28 Jan 2025 17:45:22 +0000
ROA not before:           Tue 28 Jan 2025 17:45:22 +0000
ROA not after:            Mon 28 Apr 2025 16:45:22 +0000
asID:                     33491
IP address blocks:        98.222.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:65:8a:22:6d:12:72:23:4f:94:d9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:45:22 2025 GMT
            Not After : Apr 28 16:45:22 2025 GMT
        Subject: CN=5af378e9-54a5-4c8e-bab8-0ff77add2d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:0a:44:23:00:42:02:cf:e8:78:e9:dd:5a:
                    a6:cc:e4:72:e5:16:af:99:71:d7:fe:18:16:34:e9:
                    a7:da:ee:2d:4f:bf:60:91:7e:ec:00:62:99:f8:86:
                    2f:9f:23:78:3a:32:45:2b:ff:e7:2b:4c:a2:35:2d:
                    44:35:13:f6:75:6d:7c:e3:76:39:d6:99:a2:af:90:
                    6c:f5:c0:8e:a5:0b:5c:a2:e0:84:4f:68:47:d8:bf:
                    a6:71:e8:30:35:43:81:a2:9b:83:1c:74:42:a4:69:
                    a8:cc:13:e4:eb:02:3f:6d:c9:7a:b8:b9:e3:df:c1:
                    dc:24:f5:c3:ac:7f:48:90:c6:6e:a3:7f:39:e4:11:
                    2b:64:29:e6:6f:69:e4:d3:dc:e4:98:20:f5:3b:4b:
                    2a:21:86:7b:1c:0a:1e:ec:74:ae:66:5e:02:cf:f1:
                    7b:90:90:f4:c5:b9:8d:b4:1d:de:c7:aa:7e:34:fd:
                    17:35:06:5a:37:bd:9b:70:f9:39:67:90:84:d5:ae:
                    a5:e9:06:67:5e:d9:6c:cd:33:11:84:01:44:77:f6:
                    04:8a:ab:11:48:95:9a:a0:12:24:ec:4d:87:33:30:
                    c5:28:c4:08:ab:eb:f3:ae:77:ca:5d:87:84:92:f7:
                    2b:40:47:2d:46:bd:67:be:c0:60:98:a3:de:ad:64:
                    6c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:47:65:62:E0:46:A5:8A:DA:6B:D9:2D:B9:E8:3C:4A:4A:47:80:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/100b0975-9194-3059-8370-4a05a69b3ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.222.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:3f:6f:9d:34:9c:1d:cd:5e:99:3b:42:ae:8b:c6:f5:6e:f5:
         c5:90:ef:f5:ac:9d:af:57:4b:0c:67:3b:f3:39:be:cd:7c:a4:
         2d:bb:d2:3f:0f:4d:83:55:84:96:41:8a:fc:6d:5b:b9:ee:d5:
         da:9d:e1:f9:b1:0f:44:19:d4:97:4b:68:35:51:ef:a3:eb:91:
         09:c0:54:d7:d4:9c:27:d2:5f:be:79:34:64:31:d2:02:ed:95:
         e2:02:68:d5:1e:1e:4d:a4:c8:50:a6:fc:75:83:5c:69:ea:c5:
         bb:e7:4e:b6:71:84:64:cf:0f:c5:aa:75:e5:d0:be:d5:0d:aa:
         8e:66:b8:ec:d0:b0:53:2a:cb:ce:35:be:af:2c:bb:35:8e:eb:
         d5:b9:ac:e4:92:f6:9f:07:55:90:61:c8:53:fe:4f:9a:e1:1c:
         c9:d3:e9:73:1e:77:76:ef:16:cb:d7:71:31:5b:4c:cb:de:7c:
         44:fa:d2:31:76:9b:5f:96:6d:9a:ff:aa:29:f0:bf:5d:fa:a3:
         e8:15:df:3a:02:bb:ab:3d:4b:4a:df:73:42:57:76:65:d3:e4:
         a7:94:fb:23:b7:c2:13:ab:bb:85:47:e8:0c:e8:10:b2:31:6b:
         9e:4b:e4:cd:18:2e:f6:5d:2a:fa:89:17:2d:df:c6:ec:ff:2c:
         db:3f:21:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----