Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e32297ca-540b-37ea-a072-fb22e0d1b602.roa
File:                     e32297ca-540b-37ea-a072-fb22e0d1b602.roa (raw, json)
Hash identifier:          MrwrRKGOx73qtomUYbyylr1+BbhZe5ReLbZsDhQZxfk=
Subject key identifier:   F4:A2:FA:63:EA:E2:BD:CF:37:97:14:F4:84:C8:75:46:35:0F:38:99
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F43285848E16BD83A3F519B8FCE43F800
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e32297ca-540b-37ea-a072-fb22e0d1b602.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     18460
IP address blocks:        2001:49d0:100::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:d8:3a:3f:51:9b:8f:ce:43:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=94c8c714-6855-4733-87ed-b9bc8ceee4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f3:c8:24:d8:bd:64:7a:f3:8b:c8:cb:84:a9:
                    ae:fa:18:1c:45:10:34:ec:ec:13:a5:27:fa:ba:5e:
                    bb:84:f7:7a:75:d1:a1:88:aa:74:5f:51:3c:c9:df:
                    48:7a:c8:a4:8b:50:77:66:55:5c:48:68:f9:dc:51:
                    9b:4e:04:0b:b1:1f:23:10:d5:6e:75:0a:b2:5b:1e:
                    d3:47:59:bb:6d:d0:49:39:79:5b:14:61:be:aa:7d:
                    f9:b0:47:85:78:2f:fc:ff:b2:76:b5:85:70:82:19:
                    4c:5c:01:56:9f:e9:52:b4:2b:30:24:d5:20:9f:d4:
                    56:02:6a:37:0d:5d:a6:34:1d:40:e9:bc:18:00:15:
                    d0:4c:13:be:6c:c7:a5:3c:ca:00:56:38:6b:b8:ee:
                    bf:90:67:fa:60:92:a4:0b:04:37:0f:41:e9:a7:78:
                    3e:cd:c9:2d:68:0e:56:d8:e7:e2:17:03:1b:d3:11:
                    8a:86:55:7a:3c:8a:fd:e2:f1:74:b1:48:af:b5:ce:
                    4b:6a:97:61:71:73:61:25:21:7b:36:83:ba:90:65:
                    52:27:61:8f:df:99:3f:c5:d4:b1:eb:b3:db:02:ee:
                    74:59:23:2c:4d:eb:96:51:55:26:38:03:2e:28:c2:
                    9f:2d:75:ab:8d:bd:bb:5b:c4:d8:84:07:5f:07:83:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A2:FA:63:EA:E2:BD:CF:37:97:14:F4:84:C8:75:46:35:0F:38:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e32297ca-540b-37ea-a072-fb22e0d1b602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49d0:100::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:35:0d:a9:30:2a:63:a9:42:63:00:e6:48:b9:d4:bc:d0:d5:
         e3:54:07:fb:42:f4:dc:19:46:52:67:59:19:b3:d1:44:ef:03:
         6d:60:1b:7b:45:41:0c:d1:49:89:bb:26:92:0e:33:87:0b:98:
         cc:6b:7a:04:4c:4c:94:b7:5e:2d:91:37:29:89:60:29:e1:47:
         83:44:e8:f3:7a:05:c5:e1:13:a3:52:ca:ab:93:2a:71:50:93:
         60:aa:c4:a1:3b:11:b5:fe:0e:ba:83:43:20:e6:33:5a:58:a2:
         4e:c2:49:e4:32:49:46:f3:b2:f2:a5:90:8f:e9:10:c3:39:21:
         e1:84:65:a2:2f:c4:5d:ae:42:1e:13:fd:59:23:07:a2:58:54:
         69:a5:b8:bf:03:3e:1e:08:6c:8a:e4:a2:36:97:e5:9c:25:6a:
         20:9d:21:7a:e4:9c:61:3b:ca:04:f8:46:14:15:e8:cd:40:00:
         15:36:d6:0b:cc:65:5d:ed:26:a6:7c:5f:3c:38:fb:5b:98:26:
         97:9f:2f:01:a2:f4:54:ad:a1:21:91:0c:11:fd:c3:0e:14:eb:
         98:83:5e:60:39:91:7c:05:61:8e:f3:21:eb:5c:48:55:22:a8:
         2f:1c:1f:05:42:13:10:13:b1:a6:c0:47:32:ca:31:a6:85:f2:
         64:a5:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:54 2025 by rpki-client