Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b14c0239-e181-3d57-9fd4-e65e6889dd2e.roa
File:                     b14c0239-e181-3d57-9fd4-e65e6889dd2e.roa (raw, json)
Hash identifier:          fQBjiy6u/XDh+ISkpo2IcKZV3zl+4IdlaCEmjNnLhS8=
Subject key identifier:   C9:10:F8:B1:BD:3B:95:6F:1A:7E:09:EB:37:31:D6:5F:3A:91:6C:69
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584902EC1116400C99267E419A00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b14c0239-e181-3d57-9fd4-e65e6889dd2e.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     16696
IP address blocks:        199.192.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:11:16:40:0c:99:26:7e:41:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=c9ab1851-3fe8-4d82-80d7-6eb1d14f7b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:24:40:89:79:20:60:82:b1:01:cd:65:f5:
                    52:14:91:a9:41:80:87:10:c7:94:4f:2b:02:33:b1:
                    1e:c9:c7:26:dc:c7:98:e9:f4:ac:20:c9:83:f7:15:
                    e3:5b:44:73:4f:11:1c:01:e2:bd:0e:64:9f:49:16:
                    66:c4:cc:66:0f:4a:9d:b4:9b:41:13:d4:a3:8b:f1:
                    30:d8:9e:f5:a9:11:46:95:5b:97:75:40:87:1e:49:
                    b0:f0:c9:d3:c4:97:51:75:19:79:2d:5e:53:49:fa:
                    09:97:19:b1:fc:73:da:5f:5f:d4:c2:24:be:af:c0:
                    76:f7:e4:84:68:46:1c:4f:ea:a0:09:18:5e:12:ca:
                    31:fb:24:b5:ed:5b:d2:f4:99:51:3e:85:c6:f0:9e:
                    6e:cc:b8:ce:4d:c5:40:88:20:7e:b1:c1:3b:c0:65:
                    f2:2d:bc:e2:2e:4a:9d:69:c8:6d:59:72:87:4a:24:
                    fe:4a:95:e0:70:af:29:79:ea:d8:23:b3:a2:df:92:
                    0e:e8:1e:55:2b:da:6e:04:d7:68:71:fd:21:bf:92:
                    c4:e0:39:e8:6d:4b:62:df:a2:ca:4d:2b:36:b0:cb:
                    f2:a5:2e:d7:f9:25:e3:15:7e:8f:66:bc:18:cf:d0:
                    9d:1c:b8:b7:13:19:25:4e:35:f1:ee:92:85:38:da:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:10:F8:B1:BD:3B:95:6F:1A:7E:09:EB:37:31:D6:5F:3A:91:6C:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b14c0239-e181-3d57-9fd4-e65e6889dd2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:86:10:fa:22:af:10:ed:18:ef:ea:1b:59:be:c2:45:70:4c:
         e1:b4:37:80:05:84:b1:2c:8d:a8:e5:e3:bc:11:ae:b4:36:2c:
         b4:50:bc:0f:59:53:c2:a0:d8:84:d4:07:e7:95:bc:27:7b:fd:
         35:40:ab:9a:93:5b:0e:aa:9b:7f:2f:1a:8c:a8:d6:3b:46:a4:
         67:c3:1d:eb:4f:15:54:9b:03:f7:3d:cd:33:2e:49:39:32:fd:
         ab:f2:c8:e7:d7:4f:18:0a:cc:eb:81:93:c2:a5:b3:07:ca:61:
         f1:15:5e:72:78:46:d8:7f:10:d8:a9:7e:9f:a2:84:31:56:6b:
         8e:7f:12:36:83:d0:9b:c4:38:e7:34:ed:e0:9e:6d:e3:a2:2f:
         44:96:f4:b5:b8:a4:7a:e1:a9:df:10:8c:d1:93:f9:ca:98:f0:
         ed:69:63:78:f9:e6:8f:64:9c:7e:da:97:12:fe:3e:4b:2d:ee:
         28:e6:99:3d:53:d2:28:c1:ff:23:e2:0a:c0:19:55:8b:67:6e:
         98:57:12:e2:91:55:c0:77:78:62:fd:92:cf:47:3a:6c:07:0a:
         41:25:72:21:7b:a8:cb:43:55:11:24:a7:54:ba:8b:c5:52:31:
         e9:b7:0a:ef:da:ae:22:cc:9f:6e:89:6c:8e:b9:35:d7:d7:c7:
         9b:19:41:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:33:56 2025 by rpki-client