Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a10e5add-57fa-3890-a192-5a380ee8a028.roa
File:                     a10e5add-57fa-3890-a192-5a380ee8a028.roa (raw, json)
Hash identifier:          01TlWKEsIEFItdU99m5UL1MKVHgfwHfM5CzakyqBrpQ=
Subject key identifier:   0E:10:F3:3E:84:7B:4B:28:12:CA:6F:D2:40:7E:75:2C:B4:AF:85:99
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490F7BFABC0940402EFEF2CD30
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a10e5add-57fa-3890-a192-5a380ee8a028.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        198.41.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7b:fa:bc:09:40:40:2e:fe:f2:cd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=75efc5c8-6752-4d4a-a79f-14447d61b40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:94:c2:93:f3:21:48:69:78:d6:40:83:aa:f0:
                    71:30:0b:1b:00:0f:09:7c:24:2c:7a:c0:34:51:51:
                    22:b3:b0:de:f6:45:6e:c0:88:e2:df:98:56:30:64:
                    d5:ae:a4:6e:9d:14:a3:f4:6c:fd:bd:c2:0a:4a:2c:
                    6e:c4:09:c6:ff:83:ae:9c:aa:fc:68:78:64:e4:dd:
                    86:2f:7c:a4:55:a6:29:f3:af:a8:1a:a8:9a:10:65:
                    b1:df:a3:5e:54:3a:b2:e9:11:87:83:33:b3:13:ba:
                    8e:0f:89:58:6e:7c:e6:72:c2:6f:12:6b:e3:7b:28:
                    7f:02:41:c9:29:5f:00:b4:a4:e4:c7:b5:76:29:4e:
                    68:c5:0a:d5:19:52:ca:c8:2e:55:e6:c9:ee:fe:47:
                    e6:d5:93:0a:d2:a0:bc:46:f2:8e:55:88:45:33:60:
                    eb:1f:21:75:64:07:47:56:5a:67:f6:8a:7f:12:0c:
                    fc:22:88:f8:8d:d1:9d:04:b0:b1:de:40:54:0f:f3:
                    90:51:fa:3c:cc:20:ea:9f:8b:a2:66:60:77:60:b7:
                    d8:9a:b9:0f:0e:e4:25:02:c5:95:fc:14:0e:33:5f:
                    10:79:65:3e:53:b6:c4:77:be:63:a7:0f:c0:1d:60:
                    c7:54:0e:39:7d:71:c6:bf:c7:7d:36:68:06:0e:75:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:10:F3:3E:84:7B:4B:28:12:CA:6F:D2:40:7E:75:2C:B4:AF:85:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a10e5add-57fa-3890-a192-5a380ee8a028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:9c:19:e2:a7:f8:46:0a:6b:eb:da:57:54:8b:6b:b9:40:ac:
         d3:f7:67:5f:6c:e5:cb:15:04:74:bd:4f:f4:fb:7a:0c:f7:03:
         4e:e3:6f:91:96:95:15:a5:84:52:76:f9:ca:91:27:73:35:be:
         18:82:46:5f:9c:9b:9f:14:91:63:77:d8:d4:5b:0c:f2:95:8f:
         ad:da:e8:ce:84:55:a7:83:06:3d:af:41:71:08:70:59:79:f5:
         b7:82:d6:9c:e4:04:fa:56:71:ed:ad:0a:81:29:af:64:66:b8:
         92:06:79:da:ab:e6:51:aa:2f:0d:08:84:df:c5:49:5d:b3:35:
         6c:9a:8e:90:c7:dd:21:50:65:06:18:54:f1:cc:62:34:44:4f:
         ff:70:21:53:e6:43:d4:1a:d5:b7:5a:19:35:b8:14:70:ca:52:
         ad:1f:41:a9:74:42:d5:dd:d6:5c:57:56:a2:22:b0:b0:c6:ce:
         02:05:76:d6:5f:be:9b:4e:a5:47:cc:e0:42:8d:c3:fd:3c:c2:
         ea:81:d0:9c:d0:98:4e:30:a4:a1:f7:99:9c:63:59:80:8f:84:
         10:f4:16:c6:df:5a:5c:f1:f3:12:61:1a:d2:07:ba:15:ee:a6:
         92:fd:f0:6c:25:5b:ad:5f:2a:36:6d:68:3f:0e:c3:40:b8:2e:
         70:ba:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:02:13 2025 by rpki-client