Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/38c6efd7-1d8f-36b0-9f96-3087164283f5.roa
File:                     38c6efd7-1d8f-36b0-9f96-3087164283f5.roa (raw, json)
Hash identifier:          CZ2Gc80PANsCdPmnrV/Hx7ju4vBsKsFPbENCsIQbwOk=
Subject key identifier:   96:3A:D5:49:2A:31:4A:5B:A1:B4:F6:B2:42:79:3E:93:52:05:C9:6F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B71D56D4125AB8F7F31F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/38c6efd7-1d8f-36b0-9f96-3087164283f5.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     36522
IP address blocks:        207.164.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b7:1d:56:d4:12:5a:b8:f7:f3:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=ee0d63f0-f624-461c-9654-43456f6bf3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e9:a6:ce:5f:e5:1a:32:64:31:f9:d5:78:e6:
                    ec:8a:ca:f8:70:c7:70:08:a4:51:39:72:e1:45:7a:
                    9e:e2:ee:f0:ca:54:0d:c2:13:50:b3:02:1d:c6:3c:
                    ad:66:88:fe:da:82:67:e0:8a:ac:52:57:ac:57:6d:
                    2d:1e:73:4c:63:bf:d8:a9:50:2a:74:49:a3:c9:d3:
                    e5:0a:c0:94:f1:e4:74:f3:04:c5:f7:61:c9:0a:b4:
                    12:42:ed:8f:f0:4f:e4:56:1a:d7:8e:b1:bb:13:4f:
                    e8:d8:bb:6e:9f:0a:61:e5:80:a7:6f:fd:a4:ff:61:
                    51:1a:ab:b6:42:47:d0:0d:90:50:e9:da:5b:3a:89:
                    98:c9:f1:09:24:c8:be:3f:39:fc:d2:9f:2e:36:db:
                    05:91:98:03:39:fd:ab:97:03:17:ea:23:7b:4c:be:
                    8c:43:d0:30:5c:0b:07:fd:0e:ae:ac:c0:bd:be:40:
                    b8:7e:85:ba:de:9b:69:6d:40:3f:60:5c:af:de:b3:
                    a8:e9:df:12:8b:d5:c3:48:fd:ae:66:d8:7a:9c:59:
                    86:77:e0:ee:1a:57:87:9f:d6:cf:25:70:e3:58:8c:
                    37:97:28:16:8b:1c:44:85:ef:67:a2:8e:b3:95:47:
                    6d:9d:f4:0d:e3:a5:9e:6a:f4:94:63:e1:6b:1e:ef:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3A:D5:49:2A:31:4A:5B:A1:B4:F6:B2:42:79:3E:93:52:05:C9:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/38c6efd7-1d8f-36b0-9f96-3087164283f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:49:a7:49:db:c9:e6:0b:69:89:00:db:f6:9e:e3:e2:1d:e1:
         2b:ec:7d:fd:60:9d:8d:c9:b5:d0:39:07:34:44:93:1c:04:7f:
         7f:e8:93:40:93:33:eb:cd:0e:d0:0a:36:e9:41:de:fe:bf:c9:
         0e:44:db:09:ed:f2:dd:e7:52:94:36:a8:a3:2b:6c:90:3b:68:
         34:d4:1f:e0:91:b4:80:37:68:44:f2:d3:7f:91:e5:e2:0b:9d:
         d4:f8:79:92:8b:a1:36:4d:29:1d:c4:97:b7:33:ca:f9:d2:5b:
         f7:72:98:28:68:f1:32:d0:47:0f:48:16:ff:2a:b4:29:ac:a9:
         eb:e0:30:06:10:55:40:2d:dc:d3:92:31:f3:af:8a:bb:98:e6:
         62:84:1b:fb:ef:07:36:af:ae:a7:ac:f9:2c:3c:51:86:e0:13:
         77:51:b5:70:fe:41:e7:43:13:60:b9:e7:c8:ec:ce:68:64:5c:
         8d:e2:90:f9:67:01:5c:b7:dd:1c:cc:3d:f5:48:6d:c2:e1:24:
         5a:0b:46:81:dd:d4:56:9b:4d:13:2c:21:2a:b0:f3:cc:5b:a6:
         93:3d:6e:ea:e4:4c:3e:6f:3f:10:87:1b:48:e5:73:de:81:68:
         49:92:b3:68:59:88:88:33:82:35:f6:56:70:22:be:a1:0a:d6:
         4e:11:ef:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:36 2025 by rpki-client