Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5032ce5d-75ce-389a-bc56-b5235f6a8b74.roa
File:                     5032ce5d-75ce-389a-bc56-b5235f6a8b74.roa (raw, json)
Hash identifier:          38BbAC/pHC6cOLGIDfjVpaOq0NF1QzOJl+xrpiW9OM4=
Subject key identifier:   48:D3:15:93:11:8F:A1:35:58:5F:D1:9B:5F:9A:E4:3B:D5:8E:B6:42
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B601EF3BF503D2EAD535A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5032ce5d-75ce-389a-bc56-b5235f6a8b74.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     577
IP address blocks:        198.235.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b6:01:ef:3b:f5:03:d2:ea:d5:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=adccc091-7817-4822-9c27-85633f3d0e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9f:47:b7:a1:51:49:5d:cd:14:7f:4b:a2:48:
                    fc:f1:e8:26:5c:74:b3:e4:f4:7d:da:dc:10:a9:67:
                    83:14:d8:73:ce:71:70:d3:f7:f7:8b:79:e4:b7:c7:
                    0c:75:6d:fe:a8:83:67:31:c4:2e:0c:22:12:be:2e:
                    52:01:42:b1:ca:c2:c4:7b:6a:7b:37:b2:43:2d:dd:
                    3d:27:25:f6:d1:07:84:6e:70:3d:82:02:44:d2:12:
                    63:fe:20:d9:16:d2:84:1b:ea:38:11:42:a1:19:94:
                    b7:f5:07:ef:19:e5:16:41:e4:de:d1:8a:28:b7:89:
                    50:d3:15:42:b4:98:96:1f:8e:c4:d7:58:0d:e9:4b:
                    2c:ef:5f:fd:b0:67:e2:d5:b1:ab:eb:63:5b:ff:45:
                    99:25:29:07:4c:47:61:61:1d:49:1b:4d:18:60:ba:
                    7a:8f:80:9d:24:81:6c:52:18:a8:c1:df:59:98:d6:
                    dd:e2:85:68:1a:43:4e:74:f0:c6:8a:fe:3b:b7:90:
                    5b:56:a7:5f:e8:aa:bf:a7:33:61:4b:4a:b9:09:58:
                    f9:1f:d8:10:d2:0a:e9:45:ce:dd:77:c9:72:39:10:
                    76:64:4c:5d:c1:47:69:d7:91:7b:ed:ac:21:1e:ef:
                    73:ef:1c:23:1b:86:66:80:7f:8d:f0:67:9f:2f:49:
                    98:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D3:15:93:11:8F:A1:35:58:5F:D1:9B:5F:9A:E4:3B:D5:8E:B6:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5032ce5d-75ce-389a-bc56-b5235f6a8b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:25:16:e5:71:82:f1:ef:b6:34:e2:52:c4:c1:45:b3:8d:8a:
         1a:e0:7f:0c:f3:f8:9b:8a:9a:3c:c0:a0:c6:8b:e8:1f:e2:20:
         82:26:82:98:e3:87:7f:64:00:ad:ab:71:68:b0:4e:39:3b:4a:
         03:29:00:99:7b:f8:2f:78:2d:14:b9:ca:64:4e:9c:de:a9:57:
         7a:47:0c:38:3f:ff:16:94:bd:02:28:9a:a7:95:3d:08:d4:83:
         69:bd:eb:84:21:98:f6:b7:7b:75:03:ce:71:3e:80:46:14:f3:
         f7:d5:16:b8:18:ac:af:7d:79:c7:d3:17:e3:24:e0:2b:a6:aa:
         19:80:cc:ef:e8:71:f4:dd:82:e1:8e:e8:36:1c:b4:ad:63:85:
         c7:73:4a:58:36:82:6b:4e:45:15:14:58:8c:00:4a:d1:d0:4b:
         1e:d7:46:46:81:f6:23:63:bd:0e:c8:7a:94:26:a8:1f:03:61:
         cb:df:43:89:bd:25:8c:a5:12:c6:9c:aa:01:82:89:4c:3b:05:
         b6:1d:5a:68:c1:7a:87:12:82:f6:24:a9:f3:c1:da:7c:52:c1:
         f6:85:db:1c:74:a9:15:07:71:19:f4:bd:ab:d3:4c:de:cb:b3:
         53:5f:b9:31:41:14:19:e0:db:3a:2c:8d:fe:c1:d0:74:14:06:
         db:d4:cb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:27 2025 by rpki-client