Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/9f4d11d9-8296-3ce8-94fa-7aa94f2f5b6a.roa
File:                     9f4d11d9-8296-3ce8-94fa-7aa94f2f5b6a.roa (raw, json)
Hash identifier:          LotBEbZLA5tqJEmLJacJ7fd4O/1nPgddVgi1mX8lA1k=
Subject key identifier:   B0:F9:DF:5D:E5:BB:38:A4:D8:38:61:F1:F1:D7:C4:D8:62:5A:97:2C
Certificate issuer:       /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
Certificate serial:       010D0C9F432858492E13C7B7CDBD8D31E45F9840
Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/9f4d11d9-8296-3ce8-94fa-7aa94f2f5b6a.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     32604
IP address blocks:        208.91.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c7:b7:cd:bd:8d:31:e4:5f:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=a1cfc9d7-fd77-40c0-979d-b3876a18ab0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:75:2f:48:e3:9f:cc:ed:24:82:f3:c5:4a:37:
                    b0:b6:05:31:04:0c:c6:ab:55:6b:02:e9:3e:ab:08:
                    40:2e:e5:08:1c:21:91:ed:cf:a5:12:ad:db:76:e2:
                    5c:cc:76:6c:2a:2a:02:63:d5:e6:34:f7:95:00:3c:
                    8a:6c:74:ab:32:0c:86:b4:cb:b2:bb:62:ae:86:24:
                    5d:c8:fb:4a:b2:7c:61:4b:bd:3e:b1:d0:74:1a:16:
                    f9:9b:37:16:cc:44:8b:92:cf:cf:08:cc:9f:32:33:
                    02:b8:41:24:4d:d2:43:d6:0e:81:a0:45:07:61:cd:
                    24:6a:e0:1c:07:f6:b0:d9:93:db:bb:df:d4:85:23:
                    7d:28:b5:bc:6c:a6:14:6b:38:ba:2e:07:e8:64:8b:
                    3f:57:59:66:e9:a5:01:d3:49:6f:bc:c6:e2:53:f3:
                    d5:b8:3c:d8:47:c8:91:07:10:5a:0a:e8:1d:e6:9d:
                    69:63:54:88:e0:82:bb:54:97:d9:13:21:bd:42:bc:
                    a7:5a:1f:da:25:9c:46:9e:3d:06:73:0f:24:47:24:
                    4c:19:f8:9c:5e:23:aa:f4:3b:c8:ef:30:b1:92:2e:
                    06:e0:9f:54:74:f7:fb:41:35:52:62:b7:51:3a:c9:
                    c7:c8:6a:08:55:b9:4e:4a:7b:31:4c:9e:35:de:24:
                    84:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F9:DF:5D:E5:BB:38:A4:D8:38:61:F1:F1:D7:C4:D8:62:5A:97:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/9f4d11d9-8296-3ce8-94fa-7aa94f2f5b6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl

            X509v3 Authority Key Identifier:
                keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:24:bc:0a:c9:dd:d4:a1:bb:69:07:1b:5d:17:11:1e:ad:59:
         16:f1:15:38:ef:6e:fd:9e:41:7e:71:74:e8:d2:4d:76:86:ae:
         ea:0f:aa:56:7e:f4:fa:a4:21:ac:19:3a:e2:69:a9:e2:49:b7:
         6f:fe:f8:2c:52:be:19:6a:0b:9a:b0:2f:d8:5e:35:18:56:2b:
         5c:e5:7c:8c:77:62:71:09:df:e1:bc:c0:f3:b3:74:63:73:f4:
         27:84:28:35:81:ae:eb:af:06:1a:07:df:6e:60:0d:37:f5:2d:
         59:c1:54:27:9a:ee:99:b8:9d:d6:b0:bf:04:81:dd:c8:5c:b9:
         d3:46:bd:f8:6e:68:2d:0c:19:26:fc:cb:36:94:32:83:d2:ca:
         75:ce:b6:eb:e1:30:8f:00:03:93:a6:88:a3:e6:5f:f0:75:62:
         c3:30:94:11:b3:51:92:1d:0e:f5:89:a5:f9:0c:fa:c6:4c:3f:
         53:c3:06:e0:b9:91:dd:21:a2:c1:44:d2:8d:7f:b6:68:b8:e6:
         9e:47:4b:f8:47:20:e1:1a:de:04:2e:d0:97:85:7c:3c:af:a8:
         d1:c3:a7:92:91:62:e0:64:be:db:42:f0:75:42:1c:32:22:58:
         e6:af:9d:47:b2:60:a6:04:13:6d:24:2d:35:0b:1d:9a:12:05:
         06:3a:9e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:48:47 2025 by rpki-client