Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45b11f59-434f-3be5-939a-514b5bc3fd8a.roa
File:                     45b11f59-434f-3be5-939a-514b5bc3fd8a.roa (raw, json)
Hash identifier:          AKJkl99ssrG4qhpWX2tWeRSGIRKAd09eeXfpXRyG4tM=
Subject key identifier:   F8:FC:68:BF:69:27:58:08:50:A9:59:79:39:9B:9B:5F:D5:27:86:BE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848CDE11CDF4DE3E79A962A8400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45b11f59-434f-3be5-939a-514b5bc3fd8a.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     7029
IP address blocks:        98.17.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:1c:df:4d:e3:e7:9a:96:2a:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=f0e563fd-f0a0-4a40-94c7-4adc2e318dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d8:3a:96:c4:9a:ed:d5:12:39:fd:65:25:2d:
                    d4:02:5b:76:51:ad:37:1d:92:cb:64:80:b3:f1:b9:
                    6e:a0:3e:c5:39:fb:0f:7f:5e:39:49:51:64:03:24:
                    0d:1f:20:e5:63:df:23:ae:d9:7c:de:1d:2c:3c:57:
                    fc:66:01:1f:a1:c4:37:b7:e3:97:69:92:d2:b6:e9:
                    d3:16:8b:d3:75:0e:20:bd:e1:ac:14:82:2b:42:34:
                    cc:c0:c0:3c:0e:e0:53:e7:00:32:00:01:f1:cf:23:
                    43:56:8f:fd:89:cb:88:33:1f:0a:bb:b8:31:d1:9f:
                    ce:08:af:b7:d8:d4:9b:a2:88:73:79:d9:24:17:79:
                    3c:0f:f4:18:ac:5a:eb:cd:c8:78:e9:28:11:00:a8:
                    b5:40:00:e7:0f:8e:05:09:ec:a9:c9:b3:38:29:3f:
                    be:06:ae:a5:eb:d3:e9:bb:dc:5b:c7:9b:c7:68:e4:
                    72:32:af:40:23:16:a5:f9:5a:7e:19:27:99:f8:d5:
                    5f:c6:a0:7e:70:d8:eb:f7:fe:c1:1b:3f:67:ab:03:
                    e6:28:f6:a7:6f:77:4a:55:cb:3b:1f:b4:59:e8:0b:
                    66:f1:a9:2d:a4:0e:c0:64:b6:e1:4f:4f:a2:7d:24:
                    55:8b:d0:18:d6:8e:e3:e8:42:e5:57:50:c2:10:e4:
                    77:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FC:68:BF:69:27:58:08:50:A9:59:79:39:9B:9B:5F:D5:27:86:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45b11f59-434f-3be5-939a-514b5bc3fd8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.17.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:7c:34:70:33:89:8b:68:c9:09:77:cb:78:cb:85:c6:26:2d:
         24:58:c9:15:8b:c6:94:68:7f:0f:13:48:11:c1:89:55:cd:05:
         a1:ab:9d:82:20:1f:dc:b8:77:e4:6f:e6:73:93:53:84:e3:c3:
         c0:7b:ca:11:06:5a:ee:ea:45:fb:68:ca:4e:c8:b9:09:55:48:
         cd:be:08:28:29:8e:9c:c0:8d:95:69:2d:39:27:c6:e4:b9:9e:
         39:48:42:63:5b:69:16:bc:6c:d3:3e:5c:37:3c:d9:72:ed:4d:
         3d:db:45:b1:7a:44:c5:4e:ab:17:88:f1:4a:4a:52:26:4c:92:
         b3:a4:e3:af:ec:89:56:7c:b2:0d:a0:0b:19:d0:fb:2d:ca:a0:
         16:62:c7:fc:5f:ac:87:6b:fb:38:f3:c8:63:d8:9e:95:2c:15:
         72:be:d7:08:a0:b3:82:8b:8b:49:c7:70:d7:d7:e1:2f:f8:97:
         ae:0d:b8:ab:57:ca:93:40:13:ca:a7:c2:ec:94:28:c9:c9:d6:
         8e:22:52:2f:d4:ad:5f:d7:21:06:38:69:1e:be:21:3b:b5:5d:
         73:64:af:8c:e7:05:95:52:b0:a1:47:3c:77:26:f2:12:01:92:
         c6:3c:a0:0b:34:63:4e:1d:a1:57:3f:d7:fc:1a:8e:37:70:9f:
         8b:86:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:51:51 2025 by rpki-client