Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2329b40-4576-3ad6-b612-368174b7e5e2.roa
File:                     a2329b40-4576-3ad6-b612-368174b7e5e2.roa (raw, json)
Hash identifier:          8cJU4ww2Nbgfc2wUm15gWC/ygV8QP+o/JSOhvcLz1nI=
Subject key identifier:   50:A5:5C:BF:DC:57:E5:1B:AA:1C:F3:06:89:0A:45:B2:17:66:C7:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA691ACC0EEC22C90AB6B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2329b40-4576-3ad6-b612-368174b7e5e2.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        98.61.172.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:91:ac:c0:ee:c2:2c:90:ab:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=cb12a91b-f273-4753-a275-4b410561d787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b5:74:88:82:52:80:9c:05:ab:e9:2f:f3:4c:
                    e1:d6:b1:a3:a8:09:34:9a:c8:50:0a:65:b0:9b:d6:
                    b3:b1:48:7c:b3:4e:1d:f4:5b:c9:0b:9b:26:3a:12:
                    b5:1a:83:25:05:33:f1:fc:16:b2:2a:fe:ea:09:dc:
                    9a:5a:6a:86:02:68:6e:5c:a3:bd:61:8f:96:68:0e:
                    6e:a1:99:52:d5:29:41:6c:72:9c:f7:1a:26:8a:f1:
                    8e:60:f7:ff:df:05:36:a8:09:06:1c:01:db:0f:fc:
                    5e:d2:58:df:35:6e:d9:d3:55:37:77:85:25:76:e3:
                    01:c0:5d:66:24:e9:a8:bb:c6:0a:61:1c:65:02:e0:
                    8f:78:96:60:d9:12:e2:ae:77:31:44:a1:0f:d3:aa:
                    89:f7:78:be:e4:d0:30:3e:52:24:11:65:23:2e:bf:
                    84:ad:9d:b3:2b:5c:00:42:79:6a:4f:03:be:3e:b8:
                    60:ab:c5:0c:ee:62:38:5c:16:76:a4:1c:81:be:42:
                    c2:7e:68:4f:48:67:7e:2f:63:fe:80:4e:15:71:2d:
                    64:8d:9d:e4:e2:51:c9:64:fe:8e:8e:c5:3b:b8:12:
                    62:01:8a:82:ef:88:29:3b:f5:ef:9f:21:9a:2d:8f:
                    0a:27:57:86:2e:63:e9:e2:ef:da:8a:e3:a6:5e:e7:
                    0e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A5:5C:BF:DC:57:E5:1B:AA:1C:F3:06:89:0A:45:B2:17:66:C7:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2329b40-4576-3ad6-b612-368174b7e5e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.61.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:9a:be:95:d5:bc:a0:d8:24:f5:4e:5c:c6:a8:87:e3:f7:25:
         01:5b:2d:73:2a:09:d9:82:40:ce:45:2a:c6:52:ad:e8:b5:f1:
         42:a5:d5:8e:08:5b:06:49:75:9f:a0:2c:cc:20:70:3f:f2:6c:
         a6:2a:91:74:ad:95:91:25:28:12:5f:be:96:dd:84:5a:44:d8:
         8c:c6:b6:eb:50:0a:e0:64:21:e7:5c:93:be:09:fb:24:54:fc:
         82:2a:03:3c:ad:6e:09:4c:af:af:13:6b:1e:0a:99:d4:67:43:
         a4:16:d4:09:7a:9c:ea:95:67:06:ea:57:17:6a:f7:e0:cb:61:
         8b:c2:20:31:91:ae:33:a3:d1:b8:a5:cf:72:fe:77:97:36:51:
         21:ac:c8:a3:af:38:e1:70:87:25:49:ec:c6:b7:38:6a:c6:c5:
         1c:e6:8f:83:41:e8:ad:9e:17:a7:c8:44:00:13:63:f9:59:ad:
         4e:fb:80:88:2a:59:f4:a8:fa:4c:ea:b8:90:3c:d7:a8:7b:dc:
         80:e6:58:4e:43:bd:55:ec:6d:14:9a:5f:fa:81:19:f5:65:81:
         65:c9:1b:76:44:64:6d:f2:60:7e:31:79:02:87:2e:ed:78:2f:
         e8:dc:c9:eb:8e:5f:2c:bb:58:2d:4b:03:6f:e3:39:54:52:7c:
         72:2c:d0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:01:11 2025 by rpki-client on console.sobornost.net