Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/06427ad0-b026-3122-b95e-1ca7ffd5cd62.roa
File:                     06427ad0-b026-3122-b95e-1ca7ffd5cd62.roa (raw, json)
Hash identifier:          nCigTFvH8WT5Pdc/Vs1UKL2g03E7IvMXf7X1MVJNxKU=
Subject key identifier:   37:E7:FD:8F:EC:BC:82:A9:F4:5B:E5:68:E8:72:8F:C4:79:67:BA:02
Certificate issuer:       /CN=4d2b08b7-5038-407d-8712-a13cbe5c7164
Certificate serial:       010D0C9F4328584898D610857BEA73EAA454C600
Authority key identifier: EE:54:CE:85:94:E2:A7:11:74:32:92:D3:A0:D8:74:9A:35:89:0A:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/06427ad0-b026-3122-b95e-1ca7ffd5cd62.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     20307
IP address blocks:        198.72.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:10:85:7b:ea:73:ea:a4:54:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2b08b7-5038-407d-8712-a13cbe5c7164
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=8c8219df-1c41-4657-a1a1-5a3efdc2312d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b6:8b:b3:cc:a6:f5:9e:52:f5:ab:2c:e4:80:
                    0c:2b:7d:93:e7:88:37:00:0c:79:05:0a:73:d3:84:
                    6d:68:1f:d4:98:81:e6:a0:44:ae:75:5f:34:f5:65:
                    b8:ee:00:19:9e:ee:dd:80:ff:76:d3:c9:14:35:2c:
                    50:ef:5d:88:23:9e:cf:37:d1:18:18:27:f3:db:6d:
                    fb:82:4b:b7:67:5b:2c:35:af:72:05:cd:f4:3d:b7:
                    87:62:63:b5:15:86:ee:a5:b3:b2:06:01:77:21:10:
                    08:18:78:16:f4:03:9a:55:0f:60:40:09:f4:d1:41:
                    93:0c:bc:b3:d4:b3:db:e0:83:40:7e:16:95:33:a6:
                    72:c0:94:2a:ce:b5:8b:73:ed:fd:40:26:b7:bc:c7:
                    aa:60:44:9e:9f:c0:74:9a:27:59:4d:2f:22:62:c7:
                    c3:60:45:1c:29:69:47:8a:87:93:43:77:85:9b:5c:
                    39:d4:c3:e4:d2:44:fc:83:71:92:dc:4a:8d:11:68:
                    da:70:e5:27:3c:59:c4:e3:c4:94:a2:ef:ef:01:62:
                    b4:80:4b:ff:75:f0:95:6a:fe:83:40:10:be:b5:b5:
                    17:c8:db:1e:be:19:ad:51:2e:06:05:84:d0:6e:ea:
                    81:13:c6:9c:a3:5c:24:7b:ee:f2:79:81:6c:65:88:
                    7f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E7:FD:8F:EC:BC:82:A9:F4:5B:E5:68:E8:72:8F:C4:79:67:BA:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/06427ad0-b026-3122-b95e-1ca7ffd5cd62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.crl

            X509v3 Authority Key Identifier:
                keyid:EE:54:CE:85:94:E2:A7:11:74:32:92:D3:A0:D8:74:9A:35:89:0A:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.72.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3c:85:f2:3e:b8:f1:17:4a:f0:96:a1:b2:d6:b6:d2:72:b2:
         2a:fe:c4:ed:e1:6d:50:7f:3a:e5:94:7c:18:cf:b2:d7:5f:28:
         a0:d7:c7:3d:7d:b8:05:73:51:42:61:0f:dc:aa:35:6b:1c:d9:
         36:7e:7b:35:01:54:0d:91:ce:33:24:04:fb:1d:57:41:b3:05:
         92:43:86:41:80:0b:f9:78:7e:90:7b:55:04:9f:b5:60:92:21:
         a4:b6:54:f2:81:01:f3:3e:e0:9b:ad:67:e7:96:45:eb:2d:83:
         f2:32:b4:35:07:c6:6f:6d:0b:94:39:a0:2e:bb:a6:ab:f8:ac:
         56:f8:fd:30:3f:f9:7d:65:b8:56:b9:65:97:9c:a7:6e:f9:88:
         f4:e3:b8:6e:18:c3:8f:4f:fa:77:41:95:9e:79:71:45:19:c4:
         54:1a:77:58:f2:c5:c3:24:d5:dc:28:44:ad:c2:27:5a:cb:dd:
         25:8c:f7:42:36:9b:31:3c:2b:98:e4:6b:d7:fe:d4:93:2b:fc:
         29:f5:c9:c2:85:a6:6c:47:d6:5e:43:ef:f7:b4:04:31:2f:96:
         51:4a:e8:1c:44:0b:d6:06:6a:95:b2:9f:18:7b:2e:d5:94:bd:
         29:41:91:84:ff:cd:96:5d:5b:a0:98:98:8e:5b:39:bc:68:73:
         08:48:48:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:51 2025 by rpki-client