Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4372190a-71b7-3ad8-b706-e96cf1cbac2d.roa
File:                     4372190a-71b7-3ad8-b706-e96cf1cbac2d.roa (raw, json)
Hash identifier:          48zN2iqU9Y0IcIG+8di17dY05JkFx4AndYjO068RK+M=
Subject key identifier:   55:98:9C:10:9F:F4:41:F7:E3:98:39:C2:72:58:0A:E8:77:E0:F4:46
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FB5B85DCA3B50EC770CFD40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4372190a-71b7-3ad8-b706-e96cf1cbac2d.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     30373
IP address blocks:        40.128.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:b5:b8:5d:ca:3b:50:ec:77:0c:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=dc8db402-f23f-484d-9ebe-09b092ee77d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:10:df:4f:80:6f:2b:0d:63:21:94:1d:07:ca:
                    1f:f7:6f:24:3c:b4:a1:7f:c9:40:8e:8a:5f:aa:96:
                    00:65:30:95:2b:7c:37:c6:93:33:8d:8a:f2:c8:b0:
                    0d:b3:28:70:20:ab:4a:1d:66:d8:b1:87:a9:9a:94:
                    90:6a:6b:c8:0d:8d:15:06:e0:36:ad:91:3a:3c:1c:
                    34:8a:4f:e6:b6:50:03:50:5e:5b:bf:11:35:bf:4c:
                    c4:33:ce:5b:14:c6:2b:8d:92:29:66:93:ba:fa:3b:
                    4e:93:58:76:34:53:c9:35:b6:c2:4d:69:96:e8:f5:
                    8e:eb:19:11:41:9a:bc:3e:68:3c:6c:64:6c:2f:90:
                    de:7a:8d:47:53:e5:11:cb:e0:77:ac:04:20:b4:a2:
                    28:d9:dc:b8:b9:ef:2b:39:7c:9c:61:6c:1a:30:96:
                    a6:30:0d:77:d7:6e:c8:8d:47:09:fa:21:8a:8c:d9:
                    88:d7:a6:a3:27:fc:ce:4a:fc:8b:19:2d:c7:49:76:
                    ea:7a:8e:76:6e:5e:03:1b:7a:90:28:32:ac:5c:9a:
                    66:0c:84:4a:5d:51:9b:3a:5a:07:c0:68:a6:47:eb:
                    f8:0d:ef:db:ab:53:02:ee:b6:1d:8b:35:3a:33:d3:
                    60:83:b3:6d:28:92:1d:89:ab:03:d6:e8:6d:1d:04:
                    fe:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:98:9C:10:9F:F4:41:F7:E3:98:39:C2:72:58:0A:E8:77:E0:F4:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4372190a-71b7-3ad8-b706-e96cf1cbac2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.128.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8a:0e:f9:3c:d0:14:96:e6:3d:6c:dd:eb:e8:0c:22:1f:2a:
         50:db:31:86:fb:06:13:69:c1:1b:60:df:42:e5:1e:00:c3:4e:
         d4:e6:aa:a4:c6:a8:a7:30:d0:53:fe:f9:0b:30:7f:94:f2:09:
         31:da:29:ca:e4:d8:5e:e6:9a:e5:bd:11:32:6c:e2:ee:b3:00:
         47:1a:92:a8:03:b6:82:7d:13:00:e6:f0:0e:b6:82:e3:dd:a1:
         10:fe:ee:69:4d:da:8b:7f:ac:c3:1f:92:5d:ea:66:9d:1c:3b:
         b5:04:b8:74:ba:4a:1b:ea:ee:b5:b9:fa:13:f1:45:02:4c:92:
         e7:c3:61:c7:90:88:60:d5:c9:b5:30:78:85:73:e6:cb:6f:f0:
         ff:b1:39:8c:de:64:fd:54:ec:40:37:e7:2b:e2:8f:82:34:f8:
         d3:a2:dc:41:9c:65:fc:73:8b:39:a2:7e:90:90:d2:5e:12:62:
         8a:a0:b5:6f:a4:51:e6:fe:e1:79:e8:c4:8f:e2:7f:6b:a7:26:
         f6:da:ab:cf:8e:36:a9:94:b3:15:f5:e6:db:3e:5a:02:bb:a0:
         d0:98:da:7e:bb:5e:6e:0e:d3:c2:98:ce:ce:a0:b7:26:ee:0f:
         af:fc:51:9f:86:c8:bf:77:82:aa:b5:c5:fe:a2:59:78:44:46:
         5e:62:dd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:59 2025 by rpki-client