Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2054faa1-d4da-34ae-9da8-6fccf3ad8ab1.roa
File:                     2054faa1-d4da-34ae-9da8-6fccf3ad8ab1.roa (raw, json)
Hash identifier:          ULq/MEGe6rqp8Sm4enUECH2mjuVYnRxuy/KtK7fRcdE=
Subject key identifier:   55:8F:87:81:59:13:F9:0C:E9:27:78:D0:ED:88:DC:A0:4E:9D:E3:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5E96F5A5D28B790C71160
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2054faa1-d4da-34ae-9da8-6fccf3ad8ab1.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        98.240.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:e9:6f:5a:5d:28:b7:90:c7:11:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=67a42388-675b-465c-b551-8e6df95ba1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6e:4d:6f:a5:97:e5:b2:95:cb:16:7a:11:3b:
                    90:1f:94:cf:d7:a4:ba:87:46:3a:15:a2:79:44:be:
                    60:ea:14:5e:e8:74:bf:3e:33:9b:ff:78:c3:e8:ec:
                    e4:9a:41:f2:40:bb:2d:d6:25:05:85:75:b7:54:0a:
                    04:3e:c1:0e:9f:8d:f9:40:71:52:27:99:3c:1e:a6:
                    c0:98:f1:78:41:73:ab:1d:e4:10:ae:fb:e8:28:10:
                    d4:7f:5a:67:64:a3:e6:63:d6:4b:13:77:20:0e:4f:
                    b2:9e:2d:98:ac:85:7e:f6:a7:b3:33:4c:41:e0:8a:
                    8c:35:64:4e:58:ac:ab:42:78:bf:b9:be:f9:00:a0:
                    35:67:0c:88:55:44:a7:1a:81:9e:8a:7b:9d:d7:5b:
                    67:76:a3:2c:9c:94:f4:23:39:f8:25:3a:e0:5e:75:
                    a8:49:f5:f0:07:01:7e:f0:8e:27:8e:ec:f8:86:6b:
                    b6:a8:f6:08:9a:dd:ff:0c:6e:43:32:79:de:50:d6:
                    8c:a3:a9:d2:a6:83:90:e8:af:6c:5a:85:eb:87:ef:
                    8f:0b:17:e3:f0:15:a9:ca:87:69:ad:96:9a:e7:d1:
                    ae:12:44:c1:aa:e7:31:17:9c:c6:00:24:37:59:94:
                    83:61:dc:a7:f0:62:1f:d4:ee:73:da:f9:87:4e:c6:
                    c2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8F:87:81:59:13:F9:0C:E9:27:78:D0:ED:88:DC:A0:4E:9D:E3:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2054faa1-d4da-34ae-9da8-6fccf3ad8ab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.240.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:7a:8a:6f:84:d6:f4:5e:63:61:8f:70:4f:4e:2a:7c:0c:4d:
         7c:e2:60:be:4d:b0:37:e1:70:5d:cf:18:fc:27:07:c5:c7:9c:
         04:0c:eb:c3:a9:45:2e:22:24:b0:a8:04:a1:aa:cc:c9:75:0e:
         6f:cc:ff:fa:61:3a:54:96:6c:f1:51:8f:89:94:30:a9:91:e7:
         67:4a:5e:d5:94:f6:85:ec:04:d9:c2:b3:8a:e7:27:75:ae:bc:
         91:3b:5d:6b:c0:af:30:d4:61:f7:3c:37:a1:d8:30:23:c7:f1:
         60:10:f5:09:51:db:ff:9a:25:fa:89:2c:fe:7a:0d:ba:40:5a:
         68:81:02:59:b4:13:90:e9:50:ca:1a:5f:6c:d1:7b:0a:6a:f9:
         6a:be:50:03:f3:89:c1:eb:b7:10:b2:11:53:ec:f6:36:15:2b:
         2f:26:c6:ad:2d:b4:9d:62:96:2b:b0:40:d2:93:8e:08:af:00:
         36:74:99:86:d5:2f:3b:7c:a8:46:22:09:2d:62:3a:3b:02:f0:
         87:b6:bd:72:39:74:f4:0e:00:df:8c:5f:6a:10:6f:4f:1b:a2:
         c5:aa:fb:7c:47:05:1a:da:88:c7:c0:a8:1f:1f:92:ed:8d:11:
         a7:62:17:ae:50:67:26:71:0b:e6:68:15:01:83:67:10:3b:dd:
         67:9c:15:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----