Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8911b51d-569d-39de-938d-ad310a6e40f8.roa
File:                     8911b51d-569d-39de-938d-ad310a6e40f8.roa (raw, json)
Hash identifier:          p70qo732kfFBOSfwRPdG9IGel47uLNQvksBI4I3SORs=
Subject key identifier:   1A:19:02:DD:1F:FB:40:30:6A:64:81:FA:EF:7E:7B:3B:E2:AB:00:51
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4FC1FBDEFC095387D5700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8911b51d-569d-39de-938d-ad310a6e40f8.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.196.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:fc:1f:bd:ef:c0:95:38:7d:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=e08ffe0e-807f-4b69-a670-ea33b41e85e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d6:dc:e6:7f:57:0a:04:8e:3a:ad:7a:03:d0:
                    7c:11:08:c7:49:ad:77:4b:19:39:ee:ae:fb:c4:c9:
                    50:85:e3:e1:26:81:b7:0b:78:11:08:cf:ad:1e:39:
                    09:f1:10:79:b5:11:c2:69:91:de:76:9d:2a:53:d6:
                    dc:b4:a2:ae:a8:da:11:00:9e:1e:10:9f:b0:5b:70:
                    22:0c:b5:fb:47:f3:e0:73:68:80:9a:f5:18:47:9b:
                    2f:6c:c4:72:21:5b:29:f0:e0:4b:9b:97:61:c1:f2:
                    5b:f1:63:26:29:51:39:e1:be:f4:a7:e2:d8:10:4e:
                    a2:cc:bb:02:bd:4e:b9:58:4f:4e:7f:f1:92:3c:20:
                    5a:95:19:4a:ab:83:05:b0:dc:55:ae:f1:cc:e1:6e:
                    60:7d:89:3b:fd:24:96:65:52:74:b9:71:5c:64:6d:
                    09:65:5f:a7:83:9a:95:98:de:5e:aa:d5:19:b4:c7:
                    3a:94:47:fc:b6:cc:00:dc:db:b5:3d:9a:a3:7d:fa:
                    b5:62:58:1a:33:46:c5:2a:be:6a:f3:54:a6:94:9f:
                    17:45:08:b3:0d:40:88:59:74:7e:d2:72:79:2f:88:
                    27:ec:bf:f7:78:8b:4d:bb:fb:0d:75:25:67:b0:4e:
                    69:94:3e:d4:66:65:5d:04:54:a2:90:db:b8:18:13:
                    98:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:19:02:DD:1F:FB:40:30:6A:64:81:FA:EF:7E:7B:3B:E2:AB:00:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8911b51d-569d-39de-938d-ad310a6e40f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.196.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a5:7e:ae:47:33:0e:5c:42:4a:f5:44:0e:e8:12:39:7f:13:
         99:d7:a2:de:cf:19:06:54:67:94:0c:a3:ec:e9:b6:1c:13:7a:
         f3:b9:77:4d:89:af:1d:b6:e5:36:74:23:6d:35:40:fb:1c:01:
         b2:78:e9:c0:da:1e:b7:14:5e:23:e0:e7:09:76:07:ae:61:92:
         37:0b:b0:1b:49:5a:77:7e:a7:4d:73:e3:c6:5d:32:b4:6c:50:
         63:e8:29:4f:21:ad:8c:a1:ae:a2:f3:dd:2f:3b:39:84:9c:75:
         ad:74:c8:26:7c:09:3e:48:73:45:7d:55:b8:c9:06:73:8b:6e:
         2a:2f:96:7d:c9:5c:44:53:d4:51:fd:56:c2:d5:7d:8a:d6:a1:
         01:7b:d5:10:94:08:74:1a:ad:0f:06:32:19:02:6b:a6:a4:e0:
         53:61:6b:8a:7f:d8:d1:55:c5:ab:12:0d:a2:0c:b5:16:be:43:
         1c:91:7d:e2:29:b5:76:dc:87:35:48:e0:71:67:47:8f:d6:01:
         a8:6e:21:f5:1d:12:dc:cf:64:57:ce:7a:99:18:1e:8d:63:d5:
         bf:53:9f:56:ca:88:39:9b:50:9d:20:83:bf:4e:24:86:a8:9f:
         93:e5:15:53:14:26:59:16:c0:d2:99:ba:43:24:02:5a:04:2c:
         3a:00:94:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:55:26 2025 by rpki-client on console.sobornost.net