Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/5db78074-c975-3b6b-bed1-6fc0a0633b64.roa
File:                     5db78074-c975-3b6b-bed1-6fc0a0633b64.roa (raw, json)
Hash identifier:          oThDJrlz0Gkb+i/FMnk1PDBKksPE6XUfKSvnckw75DU=
Subject key identifier:   3B:75:3C:27:32:E1:70:05:5F:B6:51:55:75:15:32:25:ED:6E:5B:60
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F43285848F22C6DA98CA22B18FBC98E00
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/5db78074-c975-3b6b-bed1-6fc0a0633b64.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     7794
IP address blocks:        199.185.192.0/20 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:6d:a9:8c:a2:2b:18:fb:c9:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=53743a3e-93cc-428e-9d42-006bb74200c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:48:c4:21:ad:54:f2:d6:d9:69:52:89:fb:40:
                    8a:83:a6:15:b4:95:f8:ab:00:ec:8f:45:1c:ab:90:
                    76:07:c0:3f:c7:4d:27:73:b2:23:8e:b1:a4:1f:91:
                    c5:77:c6:40:96:64:9d:c9:2d:eb:48:02:b7:7a:ca:
                    55:3c:23:6f:6c:cf:9e:6f:aa:b1:e1:5c:09:e1:75:
                    81:85:21:e0:5b:a0:65:bd:6e:e8:09:ce:d7:dc:c2:
                    db:bd:7a:79:47:35:e2:be:c6:16:48:8c:a0:7b:f5:
                    2d:e1:1f:6d:4f:10:7d:7a:ed:74:53:c9:0b:b5:42:
                    9e:48:e8:f3:11:08:3a:8b:f5:7a:8c:2c:df:a8:ff:
                    ae:eb:dc:27:33:56:e8:b8:c1:a3:9c:3a:7c:45:09:
                    ea:ac:49:0e:08:2a:d0:da:28:1a:73:53:85:f5:3f:
                    8b:5a:71:ab:5a:de:d0:d1:f0:00:d5:30:4e:35:c5:
                    ba:b7:75:58:a2:b9:3a:4c:33:c5:03:2d:6f:42:bf:
                    1a:8b:c0:db:9c:07:89:77:46:14:0a:c6:03:75:ad:
                    31:da:0a:9e:e1:8c:75:b0:f3:39:bc:79:bb:32:95:
                    1c:43:1b:8c:e8:15:9a:e2:e8:86:2d:ab:28:dc:0a:
                    25:e5:5b:7d:57:fb:b2:71:2c:f8:1b:28:d0:d6:23:
                    58:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:75:3C:27:32:E1:70:05:5F:B6:51:55:75:15:32:25:ED:6E:5B:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/5db78074-c975-3b6b-bed1-6fc0a0633b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.185.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0f:3d:d8:85:c1:66:18:48:3a:34:e8:89:ac:d2:dd:04:b3:
         19:ff:dd:9f:84:16:87:ab:1f:ff:7f:dd:ab:90:06:32:f8:bd:
         cf:9f:3e:45:af:7d:45:f1:a7:4c:d0:45:de:3f:c6:a0:6b:1b:
         a5:31:a6:67:92:41:1f:76:0a:b3:5a:e8:0e:6c:e2:7d:7d:be:
         68:7c:b3:8d:47:d5:23:1b:b9:29:67:c1:35:af:2c:d6:74:33:
         84:7d:fb:5f:86:be:66:59:4f:a6:60:a9:7c:d9:3e:cc:85:54:
         57:f2:96:18:2e:d9:68:aa:76:a7:13:63:e1:5a:3b:a4:ba:ed:
         75:c8:86:64:bd:1f:f4:f5:0c:02:2a:6f:50:9d:ad:3f:af:62:
         8f:dc:93:f3:b9:2f:66:c6:58:75:f2:ef:b4:ba:b1:b8:02:5c:
         a7:a6:46:68:77:38:ba:0f:b8:a3:9d:20:e1:b7:d1:67:db:f9:
         d6:e0:f7:c2:e0:1f:9b:b3:3e:01:aa:c9:2c:c0:bf:5b:ea:64:
         0f:cd:52:3f:d3:26:10:46:f4:36:ae:b0:2a:6f:f1:30:57:a0:
         8e:8a:4d:ae:ca:7c:e1:e7:23:f1:4d:ca:bb:70:48:71:e2:b7:
         a3:dc:5a:bd:f1:e4:37:4d:6a:8c:7a:b5:0b:99:b1:5a:75:08:
         73:01:4a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:43:15 2025 by rpki-client