Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/98b76af4-cda3-3d94-9551-677ba0cc353a.roa
File:                     98b76af4-cda3-3d94-9551-677ba0cc353a.roa (raw, json)
Hash identifier:          e1rEZ0sLMtq0Sty4ZUqZN+GaRFyDKNCgzc+EtOQeyYg=
Subject key identifier:   B4:C4:F4:D8:0B:14:84:81:C1:08:68:09:62:B0:E3:76:03:BE:07:0A
Certificate issuer:       /CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4
Certificate serial:       010D0C9F432858487CEB3193434987C2E393EE40
Authority key identifier: AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/98b76af4-cda3-3d94-9551-677ba0cc353a.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     394907
IP address blocks:        159.242.32.0/19 maxlen: 24
                          172.83.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:31:93:43:49:87:c2:e3:93:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=836163c2-7f18-4aa4-aa21-71d264100acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:ef:ca:e7:51:52:6d:61:55:f8:48:5b:b3:
                    91:f6:52:3b:3d:7f:7f:f2:0a:e0:73:53:d1:10:0c:
                    c5:69:1c:ab:ae:b1:e7:62:60:5a:a4:f5:69:bc:16:
                    c4:68:d3:22:96:83:5f:3b:a4:ef:62:7e:d5:d1:d2:
                    14:0d:c2:f6:d6:e6:fd:37:81:6c:1b:3a:72:be:1e:
                    cd:fc:04:2b:3c:f1:bb:f7:9c:51:82:47:cf:78:93:
                    00:3d:39:7b:4b:00:89:76:4e:99:9d:64:22:e3:48:
                    31:7f:32:a9:aa:83:a0:12:87:93:04:3e:49:89:4d:
                    ce:b8:6a:dc:9b:46:95:11:f9:40:d2:60:59:a6:c8:
                    84:a0:d8:6c:e5:02:5e:e9:13:f1:93:68:4c:98:7c:
                    f5:b6:23:de:74:93:23:32:c3:07:b8:c8:33:03:c5:
                    d4:86:b8:50:3a:e5:02:63:32:1d:be:3d:c4:c9:04:
                    96:8c:33:f8:c3:94:ad:63:1d:30:e2:62:e0:32:da:
                    f2:f2:9e:80:f0:d3:0e:eb:23:e5:b3:9e:60:ae:8a:
                    e9:5a:eb:da:1e:c9:2d:0a:d4:9f:b1:60:59:30:30:
                    a9:0a:29:50:08:86:36:6f:b5:1f:7e:98:eb:91:0a:
                    b8:12:b0:e4:93:de:86:90:87:ec:ea:81:d3:72:a0:
                    67:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C4:F4:D8:0B:14:84:81:C1:08:68:09:62:B0:E3:76:03:BE:07:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/98b76af4-cda3-3d94-9551-677ba0cc353a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl

            X509v3 Authority Key Identifier:
                keyid:AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.242.32.0/19
                  172.83.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:48:6f:c5:5a:49:b8:74:80:d2:83:97:d8:30:54:4a:d4:7d:
         a9:75:3e:86:36:73:f9:f9:39:67:09:e8:6c:65:e8:1e:2f:70:
         6b:8d:e0:37:e5:e0:25:5b:58:ce:07:27:f7:fd:ad:1f:a4:f2:
         b0:c5:9a:d4:ec:77:08:ca:83:42:81:e8:7d:63:a5:18:3d:bb:
         67:9a:fd:0f:1f:f7:0e:01:11:5d:e4:5c:77:3a:50:39:60:16:
         61:52:4c:15:df:dc:eb:b5:f8:a5:dc:45:c9:5c:30:ea:1c:4f:
         10:46:0d:ba:cb:b8:5b:bf:d4:b3:ce:f1:a3:7d:a6:df:8c:73:
         dc:ce:1e:f9:25:10:f8:17:3b:94:24:03:5d:de:e3:f8:58:d2:
         29:79:11:9b:1b:6c:b9:49:66:00:2f:5d:3c:23:4f:57:80:8b:
         15:f0:f4:4e:6c:db:3c:00:09:03:c0:1b:4b:67:d1:01:31:f5:
         c6:85:ee:88:37:fc:c9:21:07:cd:72:9f:8c:e2:40:c7:ed:01:
         3f:06:a3:06:9c:bf:6c:cc:ad:2d:0a:06:92:67:8f:fb:8f:b6:
         02:90:82:74:a2:97:72:fe:64:be:41:7f:16:72:9a:53:38:59:
         c4:1a:90:ba:d3:94:72:60:ee:f6:ee:bf:ac:a0:c4:de:3b:96:
         08:3b:3d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:53:07 2025 by rpki-client