Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f10cc6f2-a28f-3c55-96fd-806192f823f0.roa
File:                     f10cc6f2-a28f-3c55-96fd-806192f823f0.roa (raw, json)
Hash identifier:          OVmUyAML2uxiqI6vEN59xsAa9SaBUva4fZS5trJhT/A=
Subject key identifier:   D3:A8:83:BF:4B:0D:83:EE:2D:BD:55:BD:6C:3E:BD:DF:99:33:ED:08
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F432858491ED6ED435C1B08828E345800
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f10cc6f2-a28f-3c55-96fd-806192f823f0.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     16839
IP address blocks:        199.91.142.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:ed:43:5c:1b:08:82:8e:34:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=b671183c-89f2-43dd-8680-bcb10f7d2d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:eb:39:8a:9f:4f:e6:08:12:58:05:e0:0f:
                    bd:8e:20:75:e8:36:fa:7e:06:56:cf:f2:a8:0f:0c:
                    92:dc:b8:89:7e:90:b7:c6:22:e8:92:58:e4:d8:e0:
                    aa:77:37:00:af:05:a6:d0:5f:95:1c:21:77:94:5f:
                    50:e6:00:85:67:48:19:57:df:c5:21:a5:c3:7d:8a:
                    b4:a6:08:d2:09:b0:4b:d6:91:30:a5:44:08:9a:dc:
                    67:be:5d:b1:b5:1b:79:02:8a:51:82:aa:1c:c4:f1:
                    0c:35:58:77:ce:10:ae:a3:a9:ce:ee:da:66:63:67:
                    4e:f2:e5:c4:fb:40:c5:3e:19:b8:eb:79:db:bb:20:
                    7f:d6:43:06:b7:1c:d4:36:c2:b3:5f:56:0b:53:b8:
                    d3:b4:77:b3:e6:c1:90:7c:a1:41:36:7e:a7:77:db:
                    53:7a:4d:77:fd:b7:08:51:64:82:d6:ba:a5:57:37:
                    8b:cc:14:df:65:64:e3:05:3d:b6:bc:fa:cb:a5:1c:
                    a0:13:54:34:6c:cf:6e:33:9c:d6:5d:45:95:b3:98:
                    96:b5:32:3a:1f:bf:05:18:04:4c:04:c7:a0:bc:59:
                    cb:fd:72:25:1e:38:b4:02:2f:c7:30:e7:4b:e9:d8:
                    26:cb:23:0e:f8:1c:cd:72:b0:1a:b5:d4:77:0f:ab:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A8:83:BF:4B:0D:83:EE:2D:BD:55:BD:6C:3E:BD:DF:99:33:ED:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f10cc6f2-a28f-3c55-96fd-806192f823f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:85:d7:cd:a8:9a:81:d6:6f:6f:d7:9e:3b:1d:d9:ed:4c:90:
         d8:30:21:2b:98:6f:c8:84:71:93:01:6b:12:b7:1f:a5:53:fb:
         ff:82:8f:33:76:69:12:6c:03:62:b2:55:18:4d:5a:73:50:62:
         e5:70:15:c3:2c:61:64:57:70:54:d6:9d:23:06:2e:de:94:53:
         bf:ca:df:fc:92:61:aa:a8:59:10:0e:d8:a2:cf:04:2a:a8:96:
         82:1e:ff:fa:58:4d:ce:73:38:4a:1e:ed:b8:58:07:2b:37:a5:
         0b:fb:ef:6f:2a:a3:6c:5d:f9:79:5d:da:33:50:67:78:8a:38:
         9c:34:c2:4f:ff:22:8e:15:7b:dd:4c:7f:30:2d:da:d0:dc:7d:
         8c:a7:30:39:82:f4:0b:bc:db:9d:99:0c:da:94:8c:a7:10:d7:
         a2:75:0f:81:6b:cb:aa:6d:c8:2f:d6:89:56:4a:89:80:d7:46:
         38:f8:71:bb:57:89:0d:23:a2:db:f2:e3:2b:75:47:bf:3b:d9:
         cc:b2:96:fc:69:e0:58:b9:55:92:fb:66:41:11:a8:e6:ab:ec:
         16:1e:75:4a:55:57:5e:bb:cd:bb:7e:ee:9a:98:3e:3d:e7:66:
         9b:9c:64:48:05:74:8c:a0:4d:65:28:0b:1d:c9:10:56:fe:05:
         3a:e7:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:08:25 2025 by rpki-client