Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2be363c7-1809-38dd-b4fb-e6b8e2c56e62.roa
File:                     2be363c7-1809-38dd-b4fb-e6b8e2c56e62.roa (raw, json)
Hash identifier:          PRRSw9V632dph4fVagQdVU7Y5+IY6kEYOVtL2g/COY4=
Subject key identifier:   D6:A0:7D:B7:14:3E:F2:24:B8:48:C6:6B:95:12:79:EB:EA:A3:96:88
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848BFEBDA4438ADC3353FAA99C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2be363c7-1809-38dd-b4fb-e6b8e2c56e62.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     7029
IP address blocks:        98.19.208.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:da:44:38:ad:c3:35:3f:aa:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=636c6d10-30d2-4713-94c9-0d110ce71b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:10:e9:32:66:f9:30:d4:c4:d5:7d:e6:fe:4a:
                    a3:9f:9b:7b:d7:1f:a1:12:09:07:b3:6d:68:72:12:
                    18:ce:ee:5c:09:ab:47:39:4a:e1:11:6d:7a:4c:06:
                    24:41:7d:a2:0f:e8:e9:97:00:04:e9:b0:92:e8:e6:
                    62:e5:7d:14:78:5c:bd:09:14:31:b2:5e:04:29:0e:
                    3f:2c:04:ad:7c:fc:3d:06:f8:1f:28:ee:76:90:29:
                    01:8c:88:5b:b0:b3:94:d9:5f:fb:1e:97:d9:3f:28:
                    16:11:98:f5:93:7c:02:33:a2:c6:82:43:6a:75:66:
                    84:09:e5:6c:ef:f9:3c:84:e2:fa:45:52:99:23:6c:
                    c5:49:a7:0b:50:19:29:0c:83:30:70:95:4c:07:6d:
                    ef:a3:52:d0:86:6f:ba:52:32:ca:a6:85:65:cf:0a:
                    00:b7:18:1c:95:e6:bf:10:e7:77:9e:46:7e:42:73:
                    c7:26:48:e7:d3:65:f8:e0:de:eb:b7:e5:64:32:8c:
                    ee:83:1d:96:e0:9c:58:48:d0:d3:22:81:de:11:f3:
                    16:ff:6b:7a:25:07:02:82:2f:af:53:de:7c:12:c7:
                    37:1c:bb:4b:6e:f6:44:90:4d:5f:06:17:68:85:5a:
                    1b:e3:38:1f:28:59:82:32:f1:78:ce:6b:3f:42:cc:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A0:7D:B7:14:3E:F2:24:B8:48:C6:6B:95:12:79:EB:EA:A3:96:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2be363c7-1809-38dd-b4fb-e6b8e2c56e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.19.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a9:14:2a:cb:a9:88:d9:94:11:8c:4a:f9:82:4b:d7:61:3d:
         3c:7f:70:d0:c9:2b:2d:83:8b:51:a3:52:f0:b3:f6:34:c8:a1:
         41:ba:f0:9b:08:c2:18:63:6f:05:34:ce:f0:ff:35:60:d9:81:
         13:b2:1e:82:40:da:a2:89:9d:f0:ec:f7:5e:c9:33:e2:d6:de:
         5a:d4:53:58:a7:a0:f5:2c:3b:7c:87:04:d7:61:67:b2:d5:46:
         e1:57:9d:a5:c5:a3:0b:0c:99:97:14:a7:ee:75:22:2f:11:f0:
         b5:56:36:26:35:28:a8:e2:b6:7f:ec:6a:36:cd:83:19:4b:9e:
         38:94:58:a5:7c:c7:eb:29:5f:ab:cd:fc:11:38:40:f5:00:18:
         b6:af:e7:9a:0f:21:77:4e:cc:00:c1:6c:c5:93:c0:df:6b:57:
         6f:47:da:e9:17:54:97:58:1f:25:9c:db:8a:27:6f:08:bc:d9:
         47:13:20:59:6c:a7:19:f0:c1:8b:ff:e7:b4:d0:21:7d:a4:77:
         11:7b:ba:a6:b4:b1:d5:d6:52:a2:38:88:63:a4:d3:f9:66:93:
         80:2d:d3:f4:c1:6e:4d:c2:f6:e0:a2:2d:3e:d6:0e:09:83:14:
         29:7f:bf:34:63:9b:be:be:fd:61:ed:e2:dc:14:e2:36:d4:8a:
         fe:9d:19:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:23 2025 by rpki-client