Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/abe08fdd-27c7-3e5b-a0cb-979b69681a5c.roa
File:                     abe08fdd-27c7-3e5b-a0cb-979b69681a5c.roa (raw, json)
Hash identifier:          2uWA5lcbq/HHYVckG9cFlpm+TnuAaugd1lWeeoM1tAQ=
Subject key identifier:   D2:A6:A4:CF:0F:13:C4:2F:9E:3E:F5:26:2B:ED:FD:5D:C2:7C:6A:84
Certificate issuer:       /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Certificate serial:       010D0C9F43285848FD56B4500FF0C0ACD6CF5F40
Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/abe08fdd-27c7-3e5b-a0cb-979b69681a5c.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     134521
IP address blocks:        199.27.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:b4:50:0f:f0:c0:ac:d6:cf:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=694f7320-f0ba-4bcb-9a7c-9a324208ac27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:58:bc:15:90:33:74:f9:e3:66:7e:5b:2c:
                    f7:5e:ad:ed:aa:d6:d4:d3:33:f5:d3:59:c4:00:f3:
                    a9:c0:5d:6a:a7:70:0c:a1:d8:74:9d:0a:3b:e8:78:
                    7f:2c:26:d2:c1:2d:90:d1:87:2f:d8:2d:28:02:3e:
                    3e:0f:8e:0e:6a:43:41:81:9f:8c:2f:27:07:28:7b:
                    fb:50:aa:dc:6d:93:e2:6d:23:ae:3a:c3:7a:66:75:
                    38:cb:e7:92:78:d1:8e:65:37:4b:72:94:c3:9b:5a:
                    6c:f7:71:9e:9a:4c:be:55:6e:f3:04:53:e0:17:97:
                    38:b1:d9:cb:80:77:77:d9:00:45:b0:9c:11:1a:59:
                    9f:9b:00:c0:fb:46:c8:9e:f3:b6:a7:3d:47:03:84:
                    b1:ce:7e:77:0f:55:2d:d8:16:19:8c:8a:47:7c:80:
                    2f:7f:27:4c:48:4e:84:d3:b8:a4:75:bf:2f:99:04:
                    ab:a9:6b:22:a3:16:29:3a:bf:ce:7d:45:7e:4c:01:
                    0f:d1:3c:7c:e7:e2:41:f2:65:9e:c3:17:a8:0e:78:
                    ea:e4:b5:b1:0d:7c:55:e8:c6:4a:db:16:72:ac:9e:
                    b0:54:68:2f:d3:6f:f1:3e:b2:d7:1b:cf:15:12:67:
                    a4:e1:ae:12:41:e6:e5:9f:9f:81:e1:df:0d:5b:97:
                    44:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A6:A4:CF:0F:13:C4:2F:9E:3E:F5:26:2B:ED:FD:5D:C2:7C:6A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/abe08fdd-27c7-3e5b-a0cb-979b69681a5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl

            X509v3 Authority Key Identifier:
                keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:98:e4:40:c9:98:f8:ae:52:2a:bf:43:3f:72:45:39:57:6c:
         d5:94:26:16:46:37:ac:57:b1:ea:d9:85:35:c9:36:0e:36:fd:
         d6:f6:41:59:23:d6:69:ff:c8:64:09:00:09:df:7b:02:7c:6f:
         7b:3b:26:4b:a4:7d:bc:17:11:0c:06:c7:15:a3:a0:e2:53:b2:
         b6:84:55:70:76:9a:cf:fd:a8:1a:a9:e0:cc:c6:8d:eb:c4:e0:
         c1:f3:3a:12:a0:92:e1:fd:60:f8:1a:fc:af:a3:60:2c:8c:5a:
         80:63:a5:d3:80:92:45:c9:ae:74:8d:bc:6e:f9:f7:c5:30:87:
         9c:31:ab:f0:81:2c:5c:0c:ee:4d:0c:6a:9a:15:35:a6:8a:91:
         72:2a:41:94:a0:5b:2f:0f:bc:f2:f9:58:81:b3:41:4c:93:e0:
         ae:2a:0a:50:ab:9f:b4:05:7f:4c:60:bd:67:eb:7a:11:c9:16:
         cb:4d:10:5e:9c:bc:d2:0e:21:e1:8b:5d:be:b2:a4:0e:f4:1a:
         55:17:b4:24:e3:b2:9d:d8:95:5f:53:19:e8:d8:73:1c:80:15:
         d2:0c:db:1f:d5:dc:2b:b9:7e:87:fe:72:d0:c8:7d:56:8a:5a:
         0d:ac:48:9f:01:71:e9:0b:c0:d1:49:0c:a3:f0:90:8a:2a:60:
         2a:2b:43:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:50 2025 by rpki-client