Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3e65e15-0100-3be2-8c29-c196b754caf0.roa
File:                     e3e65e15-0100-3be2-8c29-c196b754caf0.roa (raw, json)
Hash identifier:          +eGvTA7X5sFkFxR6NwA3FXUUxOvuoNuLjpJCSxNR+cI=
Subject key identifier:   A5:7B:75:31:2B:39:E9:26:A9:91:C8:6E:A5:55:78:E8:7D:EA:6B:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B269A145CB27BF92342ACF60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3e65e15-0100-3be2-8c29-c196b754caf0.roa
Signing time:             Tue 28 Jan 2025 17:53:36 +0000
ROA not before:           Tue 28 Jan 2025 17:53:36 +0000
ROA not after:            Mon 28 Apr 2025 16:53:36 +0000
asID:                     33651
IP address blocks:        98.47.248.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:69:a1:45:cb:27:bf:92:34:2a:cf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:53:36 2025 GMT
            Not After : Apr 28 16:53:36 2025 GMT
        Subject: CN=c5050c6b-60c1-4cd8-ba7b-2c24021861e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:91:8a:d3:c4:14:6f:79:24:01:01:d0:2b:
                    b5:79:32:09:3d:e8:6a:d6:19:01:2d:1e:58:73:dc:
                    ef:ff:91:a9:c1:d4:a9:4d:d1:a9:91:7d:dc:ca:50:
                    1e:6a:f6:dc:d6:3c:2f:4e:d5:3f:c7:81:b1:a7:a0:
                    22:dc:d2:5e:86:1e:be:e6:51:08:a6:42:6b:4f:b9:
                    8a:da:39:45:e5:a4:58:09:07:b6:b8:4d:2c:fa:d3:
                    07:ef:d9:55:77:07:1c:a2:ca:27:38:4e:83:c3:5d:
                    26:f1:8b:91:3a:3c:d2:68:15:73:67:56:8d:be:ca:
                    bc:3d:69:0d:20:35:12:23:4a:6f:0a:41:a4:09:43:
                    e2:29:80:36:b3:a7:a1:84:97:7d:ac:27:e8:17:67:
                    ae:60:d1:f3:69:fc:d2:eb:71:6c:14:00:0f:46:5e:
                    db:8c:ed:37:b1:b4:29:2c:97:3e:f6:7b:60:4f:e6:
                    6c:20:d5:16:fe:36:14:d7:3d:f5:e0:1f:16:79:0f:
                    3a:fd:d3:d0:4e:6f:e8:89:39:44:70:3b:43:85:a9:
                    22:fc:14:67:70:2e:42:3e:5d:c7:df:b7:4d:a9:1f:
                    c0:c5:01:62:e9:49:0c:88:1f:cc:0b:51:a4:e9:cf:
                    1d:e2:3c:21:6d:43:45:6a:a7:cd:de:8e:d2:e2:da:
                    b6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7B:75:31:2B:39:E9:26:A9:91:C8:6E:A5:55:78:E8:7D:EA:6B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3e65e15-0100-3be2-8c29-c196b754caf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.47.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:04:b7:cd:ee:53:ee:e9:44:60:b5:24:b0:ac:fc:33:7a:c8:
         56:ac:58:bc:b1:79:f9:68:56:d8:1b:ba:f2:75:55:f7:06:c9:
         cb:28:bf:be:31:19:da:d5:3c:eb:bf:41:62:b0:e8:75:c8:75:
         2d:be:aa:fb:18:d2:33:86:60:d6:08:9c:3a:c5:49:b8:23:54:
         c0:4c:91:f5:7e:3c:ad:1c:46:66:a4:ec:ca:4d:bb:11:06:62:
         cf:c6:37:5c:f3:56:08:13:11:fe:d5:ff:c8:dc:09:d5:b4:ee:
         5e:23:49:df:4e:00:3a:4f:90:92:d0:72:c3:eb:ee:9e:5d:ab:
         d4:56:8e:bb:f1:1d:0f:ce:bf:1a:f3:4c:66:f6:98:eb:6b:50:
         e6:62:9e:a4:80:bd:68:ea:89:52:2f:73:5c:88:8f:94:79:b2:
         66:80:f2:98:2c:0e:75:af:bb:6f:18:c4:d4:86:ed:2e:42:03:
         7f:d3:f3:25:8e:c5:4f:bf:41:d3:1a:66:e6:a0:81:39:c9:c7:
         11:65:58:26:52:29:01:cd:8a:d7:45:e9:d7:83:bc:9d:46:b6:
         a2:fd:49:ab:a8:58:1d:71:21:50:9f:6c:c4:b2:16:a1:e4:e4:
         7a:47:3c:9e:3b:c4:4c:4d:7c:78:e5:bf:39:da:59:7b:48:8d:
         9e:40:f6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:18:54 2025 by rpki-client on console.sobornost.net