Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/01fd164e-7deb-3aca-97b2-be926935c45a.roa
File:                     01fd164e-7deb-3aca-97b2-be926935c45a.roa (raw, json)
Hash identifier:          mwOk7/sfuXUyVbARfJHh3nqoUskqQk0DAEIzlJs6w18=
Subject key identifier:   75:99:6A:00:0C:E5:33:91:FB:A1:8F:36:8A:79:C4:2D:D9:CE:B0:9B
Certificate issuer:       /CN=590468a2-be81-410c-b887-a35157322fb1
Certificate serial:       010D0C9F43285848F4F698F7BD5964A09E120560
Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/01fd164e-7deb-3aca-97b2-be926935c45a.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     393891
IP address blocks:        198.169.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:98:f7:bd:59:64:a0:9e:12:05:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590468a2-be81-410c-b887-a35157322fb1
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=c22b6aa6-d9ad-4069-bcfb-0cf83b92bdd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:78:d7:f1:60:cd:fd:6f:f1:34:c5:41:5a:
                    00:30:5e:b0:eb:e5:cb:1d:ce:c7:93:c4:e0:f8:08:
                    3f:e7:24:45:7b:b4:a5:2c:b3:1e:c8:3a:a7:fd:b2:
                    0d:78:69:33:12:1a:53:07:df:33:80:02:89:b0:11:
                    45:f3:2f:38:69:b1:ee:69:d4:5e:1b:3c:50:99:c5:
                    7d:65:41:50:3c:a2:aa:08:cf:a5:53:c4:08:4c:14:
                    1e:43:56:43:a1:44:c4:f6:6e:a8:d4:f1:9e:7d:b6:
                    6b:4e:36:9b:58:5e:77:a0:db:9d:35:7c:d1:d5:9b:
                    bf:05:d6:ec:95:a2:30:a4:16:ae:ad:e0:e9:9f:96:
                    a8:89:09:60:4a:8d:d5:f5:16:24:05:a6:2d:be:35:
                    e3:34:32:a5:e2:a2:2c:c9:2e:2d:38:a6:23:60:1e:
                    76:13:ea:01:ad:63:ff:09:65:a7:d7:99:5d:5c:9e:
                    85:01:6c:7c:dc:d0:17:c0:95:bc:cd:d4:cb:cf:aa:
                    a8:49:b0:08:a0:6d:4d:91:e0:47:ef:3f:b9:86:4e:
                    38:04:d4:a6:73:74:6a:12:64:05:9b:72:80:f5:40:
                    c7:ae:97:07:6a:9d:9b:bc:73:5e:e7:a2:24:5c:85:
                    8a:fb:34:8f:fb:b2:02:f7:60:ea:7b:21:32:30:ee:
                    75:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:99:6A:00:0C:E5:33:91:FB:A1:8F:36:8A:79:C4:2D:D9:CE:B0:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/01fd164e-7deb-3aca-97b2-be926935c45a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl

            X509v3 Authority Key Identifier:
                keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c6:ad:13:a1:85:f6:04:04:69:d0:00:94:a0:4f:b7:3a:50:
         8f:3a:09:c6:c7:90:dd:7e:e8:e7:4c:67:be:9b:41:8e:3b:76:
         1f:7d:52:89:71:1d:eb:b0:77:f7:93:16:84:a6:f4:0c:91:ca:
         fc:ca:c5:bb:6d:29:3c:4e:d5:cd:53:4a:fc:aa:f3:7d:d2:42:
         92:ea:89:3c:10:ff:a2:d5:9d:d4:e3:4e:0b:c8:20:77:ad:70:
         2d:5f:90:83:83:8d:76:a1:2a:65:66:a1:9c:fc:fc:72:48:23:
         cc:fb:16:fa:6a:71:02:de:d9:52:20:25:71:1b:6d:72:71:69:
         19:e1:67:ac:c9:e4:f2:15:a8:eb:d8:b4:60:9a:60:ed:ce:26:
         cd:9f:3a:37:73:3f:4e:f5:97:ed:33:65:34:1d:d6:5b:31:f3:
         7c:bf:e5:2e:81:db:9e:55:a4:a4:54:8f:80:86:51:40:61:fb:
         9a:7b:7c:d3:3a:5e:49:1a:77:e7:e1:a8:da:7e:24:95:5b:cc:
         7b:1b:c4:2e:2f:34:33:6e:23:f6:4d:2a:7f:ce:08:3f:e1:45:
         2e:58:92:3d:3c:1b:0c:26:8d:74:bd:26:07:b7:34:a2:85:58:
         6a:d3:63:54:21:06:6d:33:25:6a:f2:5c:93:44:1e:c1:25:2f:
         a6:73:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:53:09 2025 by rpki-client