Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/37e5f043-27bb-3b16-9141-d63f18d8b19d.roa
File:                     37e5f043-27bb-3b16-9141-d63f18d8b19d.roa (raw, json)
Hash identifier:          Z7CWs0OMNF0jCT7MmUz/tsAphfVdm6Y0lXWusNlIJDI=
Subject key identifier:   AE:CC:BA:AA:D5:D2:7C:1D:95:CF:C3:ED:AA:4B:BE:0D:9C:EE:F1:F3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858492134695F5656DF24B22CB800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/37e5f043-27bb-3b16-9141-d63f18d8b19d.roa
Signing time:             Sun 09 Mar 2025 10:21:06 +0000
ROA not before:           Sun 09 Mar 2025 10:21:06 +0000
ROA not after:            Sat 07 Jun 2025 10:21:06 +0000
asID:                     7122
IP address blocks:        216.55.216.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:69:5f:56:56:df:24:b2:2c:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:06 2025 GMT
            Not After : Jun  7 10:21:06 2025 GMT
        Subject: CN=789c9505-1dab-4749-af31-e563c3c92bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:94:13:c4:61:f6:b9:2d:a5:09:c7:e1:f7:50:
                    1c:61:54:1c:28:4f:d6:57:66:1c:c4:f1:46:db:8b:
                    da:66:86:7c:63:c2:50:38:d0:bf:9e:6e:c3:fb:b7:
                    4c:35:37:74:57:08:27:e5:bf:93:85:38:1f:eb:6e:
                    54:21:01:bd:57:43:a7:df:6f:17:67:ab:0d:ef:59:
                    53:f6:39:db:b8:c0:83:a9:33:d9:21:fd:ae:bd:53:
                    b1:d1:df:ad:b4:5a:fc:57:45:a2:4a:8c:13:2e:ba:
                    95:c4:2a:84:e0:b8:65:99:78:67:ee:c1:f0:d0:fd:
                    e2:7f:50:18:58:74:6d:e6:ed:33:43:05:01:9a:3e:
                    1e:d9:6b:3d:4c:1f:7a:42:22:93:aa:1f:6b:c4:cb:
                    34:5a:f5:52:3a:51:ba:17:70:ed:ff:07:71:40:1f:
                    0b:79:42:75:66:94:07:02:ab:57:8b:dd:c5:f9:81:
                    d6:9a:20:4c:3f:76:b7:da:c2:03:9c:cd:7e:74:93:
                    ec:95:8e:2b:4f:a1:f8:df:83:d8:8b:16:c8:53:b0:
                    4e:73:3b:a6:54:24:8a:6a:98:32:95:3a:86:37:b5:
                    9d:d6:b2:fd:a8:c7:8b:3b:e9:f4:94:e7:e5:14:91:
                    cb:8b:b3:c4:f6:58:5a:56:8e:e1:05:51:76:80:0b:
                    d1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CC:BA:AA:D5:D2:7C:1D:95:CF:C3:ED:AA:4B:BE:0D:9C:EE:F1:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/37e5f043-27bb-3b16-9141-d63f18d8b19d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.55.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b5:a4:23:ca:ee:86:fb:08:01:53:91:a8:65:5c:ca:13:70:
         60:7e:1e:17:67:b2:62:8c:b5:3a:88:db:d2:80:44:77:cd:87:
         df:d9:d4:1b:7c:27:87:88:12:51:69:02:1c:a1:35:83:bc:5d:
         b2:4c:57:77:a7:56:99:71:f8:29:7f:cf:44:7c:a7:02:0a:eb:
         88:07:8c:6d:3a:89:ca:4d:f0:de:cc:e8:4e:21:19:9a:18:70:
         7c:2a:a1:93:9a:33:ed:e4:96:b8:88:7c:a8:98:b2:9b:f5:f9:
         a7:18:8c:9f:ab:59:7a:8c:8e:64:c9:b4:3b:13:70:61:58:1b:
         bc:ad:2c:9c:25:61:00:82:06:1e:0d:d0:82:d0:ce:db:ea:47:
         0d:8c:46:0b:c7:eb:f0:71:85:d1:03:2c:cd:49:5a:b8:b2:2c:
         2c:78:84:20:17:c5:29:3b:02:6d:c3:ec:9b:5b:45:b6:ca:a7:
         a8:9e:6a:12:e8:e9:e1:3a:6e:70:8d:d1:cd:9a:ee:c3:d6:3b:
         1b:aa:25:bd:8b:ec:ea:8d:ee:cc:87:fd:69:42:57:5b:3b:34:
         b6:e4:4e:06:09:85:8e:fa:3b:0c:93:f3:de:6c:23:f4:61:26:
         97:1d:1d:eb:b7:aa:a4:f9:75:f6:26:fd:6c:a6:c1:9a:d5:0d:
         af:4b:73:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:49 2025 by rpki-client