Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e7a53d7-4d1b-30c7-ac97-f865c1c1c418.roa
File:                     4e7a53d7-4d1b-30c7-ac97-f865c1c1c418.roa (raw, json)
Hash identifier:          pcr1/IvQ45vgWsBgNEbIrj8LGWjKNYQ8f88OyA6lJ8I=
Subject key identifier:   8C:F4:B1:37:7A:CB:1F:26:00:E9:CA:DD:01:54:C6:64:DB:A5:87:D9
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FA967B7555041230FF47040
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e7a53d7-4d1b-30c7-ac97-f865c1c1c418.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        207.93.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:a9:67:b7:55:50:41:23:0f:f4:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=fff32d1b-b1c1-4981-9abb-da448d0ac21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:dc:5f:46:04:a5:ec:1c:5b:b8:9f:ef:2a:
                    ae:e3:2c:24:5e:e2:70:a0:a3:c3:f2:4a:b1:75:03:
                    3a:61:fe:31:31:84:2f:2c:9b:da:a5:18:a9:bb:68:
                    fe:6e:54:b2:83:08:62:17:48:1f:4a:9a:d2:ab:3f:
                    42:6a:29:45:b4:5a:69:4b:f9:f5:73:d7:f2:eb:eb:
                    bc:79:cc:8d:21:32:32:ef:c2:90:67:91:8e:3f:16:
                    6c:48:4a:1b:0c:e4:7f:d7:5c:c5:63:57:38:94:2d:
                    f6:ba:4a:d2:1a:94:73:1b:57:7e:02:46:53:d4:8c:
                    0b:75:72:e1:8e:eb:f9:ad:48:0a:52:d8:5b:8c:ee:
                    36:6f:cf:55:9b:21:9f:4c:a8:b0:74:d9:f9:99:0a:
                    1e:5e:85:61:d0:bf:30:ec:ba:2f:c1:2b:c9:d1:12:
                    61:5a:26:d1:fa:0c:ca:b2:4c:9e:76:89:38:18:79:
                    e6:13:e1:6e:5f:0d:c2:85:1c:10:ba:f8:f0:58:02:
                    a1:db:02:e8:e4:c9:39:dc:cc:cb:be:00:68:89:dc:
                    28:0d:b9:7c:b1:17:ef:1f:5a:c8:c5:98:71:3c:35:
                    20:78:e6:40:89:a4:aa:e9:fb:f6:a6:34:39:dc:04:
                    66:06:a9:62:55:e6:cf:27:28:33:cf:c1:f4:49:70:
                    43:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F4:B1:37:7A:CB:1F:26:00:E9:CA:DD:01:54:C6:64:DB:A5:87:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e7a53d7-4d1b-30c7-ac97-f865c1c1c418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.93.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:e2:02:63:64:9b:74:f6:91:35:c4:da:34:b3:a3:35:9f:eb:
         26:a9:ea:9d:42:db:04:17:40:1c:a9:3a:13:7f:18:5a:42:fe:
         f8:1b:7f:0b:09:41:b3:16:cd:2c:9a:10:0d:9a:13:41:d4:f0:
         f8:b9:9d:d1:09:b4:12:12:f4:ca:b5:59:62:16:e3:e7:88:c7:
         ef:3b:0c:05:92:3c:2c:48:31:92:f5:9f:c4:36:87:b4:17:97:
         ed:00:79:2b:c5:2f:27:56:41:3d:f5:42:b6:e9:ae:51:01:9c:
         56:fb:ac:1e:9a:f5:35:65:9a:d3:d8:ae:48:4d:3b:67:21:15:
         9c:09:03:c0:f1:23:81:88:da:ec:37:46:e5:d8:47:7d:d1:d8:
         b4:c2:97:29:f2:18:74:87:d3:82:0c:20:a1:71:ac:e2:4c:8d:
         6a:b9:d6:10:32:dc:32:0a:0c:33:c5:3d:3b:72:9e:d7:5f:79:
         7f:20:e8:93:0c:f6:33:b4:b0:9d:76:10:99:21:42:c1:bf:32:
         f6:47:79:da:f8:47:c5:08:fc:ff:67:5e:ea:93:15:e3:f6:2d:
         17:91:27:7d:72:3c:78:29:f8:f3:32:46:69:32:21:0b:ce:39:
         86:48:65:6e:11:43:5b:26:03:c4:40:1f:42:10:fa:be:30:09:
         d8:76:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:36 2025 by rpki-client