Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/2fa2bd2b-06e0-3857-96ec-ba156658b908.roa
File:                     2fa2bd2b-06e0-3857-96ec-ba156658b908.roa (raw, json)
Hash identifier:          8RZ+OgP5k9nWlvrCRjOuUQ6hRmlWZSX0vkOvqKKOGWY=
Subject key identifier:   B7:54:EF:EF:79:E3:7F:89:83:24:99:5B:1D:D2:2C:FA:A1:6D:E2:6F
Certificate issuer:       /CN=01430e13-506f-444b-8727-f36154b32c07
Certificate serial:       010D0C9F432858483AF4FFC7BCD86516C4A4C5D4
Authority key identifier: 49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/2fa2bd2b-06e0-3857-96ec-ba156658b908.roa
Signing time:             Mon 16 Dec 2024 22:57:25 +0000
ROA not before:           Mon 16 Dec 2024 22:57:25 +0000
ROA not after:            Sun 16 Mar 2025 21:57:25 +0000
asID:                     46256
IP address blocks:        198.217.72.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3a:f4:ff:c7:bc:d8:65:16:c4:a4:c5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01430e13-506f-444b-8727-f36154b32c07
        Validity
            Not Before: Dec 16 22:57:25 2024 GMT
            Not After : Mar 16 21:57:25 2025 GMT
        Subject: CN=8a969091-e558-4011-a616-0da7657a0805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a3:f0:55:b5:d0:29:09:6a:c7:1d:16:4a:1a:
                    0a:9f:ae:fc:38:e0:54:2b:b9:56:6b:ec:67:99:2e:
                    8e:bb:ec:aa:63:4a:47:5a:9c:90:b6:9f:55:25:40:
                    ef:e6:6c:8c:bf:39:5b:32:36:8d:ff:63:eb:9d:21:
                    e6:89:3d:df:05:24:e9:bb:a2:8a:99:2b:c2:ee:ba:
                    87:af:54:ea:63:3b:8b:f5:2d:a2:e1:f8:f4:9b:0c:
                    90:a4:fb:c4:8a:58:fb:a2:31:b8:8c:59:05:aa:37:
                    82:0e:ad:25:5b:d6:86:c3:74:13:35:30:4a:f8:d1:
                    5a:4b:29:05:dd:32:c4:a6:c1:70:dc:11:2e:26:d9:
                    dc:bb:64:32:1a:a2:27:f6:c4:da:95:21:18:31:cc:
                    91:ee:04:c5:bd:ae:60:55:fe:02:a1:8d:4c:10:e3:
                    b9:0f:e9:a4:eb:e3:91:9b:38:e0:db:68:47:3a:62:
                    8f:c2:6a:be:93:17:73:de:59:00:ad:e9:1d:31:85:
                    14:9d:38:ea:c0:ec:ff:73:0c:a9:72:94:9b:27:bf:
                    83:25:0c:30:44:cf:9d:11:8e:c4:ae:ab:8d:0f:78:
                    84:09:80:85:41:ea:56:5d:9e:f6:3a:62:fc:3c:5a:
                    10:3a:a1:62:e6:35:cd:40:b4:c4:fa:e6:73:62:48:
                    0c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:54:EF:EF:79:E3:7F:89:83:24:99:5B:1D:D2:2C:FA:A1:6D:E2:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/2fa2bd2b-06e0-3857-96ec-ba156658b908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.crl

            X509v3 Authority Key Identifier:
                keyid:49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:5d:8f:cc:47:cd:6b:93:46:12:59:8c:3c:d0:a3:5c:e9:d2:
         cf:62:6c:0c:66:6e:55:de:da:1e:1d:ed:5e:dd:50:3e:8c:e2:
         9e:a4:22:34:32:40:cd:e7:94:4e:fc:46:87:9a:fa:cb:0b:10:
         2b:d1:c3:28:54:70:e3:16:e7:d4:8a:a0:ee:64:69:ce:a5:8d:
         82:b7:a1:72:ce:ca:2c:56:92:5e:47:53:8b:ac:01:4d:40:58:
         4f:e9:53:e4:16:ea:b5:82:af:0a:48:4b:f1:ca:e5:82:ad:53:
         ad:5d:23:ec:ad:88:f1:86:7b:7f:ce:17:3e:a8:ca:fb:be:64:
         1f:cd:ef:a5:dd:d2:55:40:8b:b3:09:07:4b:ee:a8:9c:cb:0a:
         9b:ef:21:fe:29:88:1f:15:55:c7:28:a9:8e:64:48:11:44:5b:
         88:fa:27:c0:06:be:0c:bd:de:b1:f8:d6:4b:1f:30:fc:1b:56:
         64:59:60:1f:e6:a2:7c:2d:77:75:05:85:d6:d7:15:9e:9e:85:
         c9:30:4c:20:0f:70:e7:fc:bf:f5:eb:f8:f9:29:6d:df:13:78:
         07:6d:07:1f:59:24:b5:1d:44:49:a9:61:4f:3e:c4:47:1d:f0:
         24:e2:82:c4:e6:79:a3:2c:13:43:d3:20:b9:18:6b:e9:70:c7:
         68:7c:93:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:03:00 2025 by rpki-client