Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/603723b6-f69d-3cf5-811f-146c1335bb3f.roa
File:                     603723b6-f69d-3cf5-811f-146c1335bb3f.roa (raw, json)
Hash identifier:          Q4QcrpkCf6Mec0tg4eVwSBVzE/IQxgpW1Tc9Dzf233c=
Subject key identifier:   E5:37:1D:5E:DD:E4:30:CB:45:76:B3:C7:34:C1:C2:47:5C:15:27:13
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584711E0ABEA0D6A91C900804580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/603723b6-f69d-3cf5-811f-146c1335bb3f.roa
Signing time:             Sun 01 Sep 2024 13:00:41 +0000
ROA not before:           Sun 01 Sep 2024 13:00:41 +0000
ROA not after:            Sat 30 Nov 2024 14:00:41 +0000
asID:                     7029
IP address blocks:        209.92.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:11:e0:ab:ea:0d:6a:91:c9:00:80:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep  1 13:00:41 2024 GMT
            Not After : Nov 30 14:00:41 2024 GMT
        Subject: CN=df097efd-2c79-431d-8ab2-029065506245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ba:86:81:89:13:3c:7d:28:12:2a:79:2e:dc:
                    ff:d4:8f:8c:8c:77:86:b0:85:87:fc:0e:c0:47:27:
                    0a:a8:fc:e1:ff:b1:6e:10:f4:f7:35:d6:fe:76:3a:
                    c0:f6:d9:6a:a6:af:05:d7:b1:ac:4a:34:08:ce:b5:
                    86:1d:08:68:46:26:e8:d2:9f:b6:0d:26:71:90:06:
                    55:64:31:1c:8e:9f:de:2d:f5:2b:90:6e:c8:5c:de:
                    49:a0:c4:4e:16:0a:a7:7a:01:58:18:39:60:6a:e8:
                    1c:16:71:42:60:35:0e:1e:e7:b8:3a:56:85:f2:f8:
                    99:43:1e:82:59:1b:49:3e:d9:2a:c3:08:a1:0c:16:
                    79:82:51:79:3d:40:60:ed:2f:d0:a4:12:8c:ce:ff:
                    fc:fb:2a:90:56:5e:3d:01:06:ba:bc:71:b8:35:db:
                    f9:ae:96:4f:7e:6f:c0:e4:b1:97:7c:c3:cd:42:8b:
                    0d:d7:0c:fa:0d:81:9b:cb:66:d4:ad:84:1b:80:20:
                    a7:1a:29:1f:aa:30:35:55:1b:3c:d5:bb:06:cb:5c:
                    21:dd:fb:2d:99:9b:88:ef:80:c8:91:7b:d1:ef:e3:
                    8b:7d:ad:49:ec:d2:49:e4:51:50:9c:b8:90:dc:49:
                    72:a5:c9:1b:4c:fc:aa:1b:cf:46:b6:96:a9:94:16:
                    67:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:37:1D:5E:DD:E4:30:CB:45:76:B3:C7:34:C1:C2:47:5C:15:27:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/603723b6-f69d-3cf5-811f-146c1335bb3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:38:ac:b3:e3:67:0d:bf:3a:30:eb:4e:37:85:43:48:b0:17:
         88:1c:3b:cb:1e:71:e9:db:51:ea:7a:69:c1:83:2e:74:55:ec:
         db:b9:d0:90:70:2c:cd:72:a2:e5:85:46:f8:b1:b4:bb:14:b7:
         ad:ac:68:48:d0:05:c2:25:5b:33:c3:90:88:4d:c7:b3:c4:d9:
         8c:7a:5f:fa:03:f0:95:84:91:f2:98:64:ff:9d:fc:d4:f7:1c:
         d9:b4:f5:2d:53:4b:92:87:9f:91:03:d0:58:0c:4a:cb:08:41:
         57:19:93:af:74:71:f0:09:9e:eb:a9:db:41:2b:33:d9:67:80:
         90:c1:48:f7:59:c2:bd:ba:60:c3:02:17:4a:ee:e2:64:d9:e7:
         c0:b8:16:90:28:b7:6f:ca:68:ae:41:3d:4e:ce:b4:1a:57:00:
         b8:76:42:02:39:18:04:46:a6:5d:bb:fc:ae:34:67:10:1e:4c:
         17:fe:6b:9e:73:a6:a3:13:2c:0e:c8:90:06:a7:1d:d0:14:3e:
         41:76:e6:40:62:45:d3:5a:9d:e4:35:e7:45:d1:de:f4:52:96:
         17:03:d0:f7:84:cf:7b:d9:4d:4e:79:27:3a:81:26:b3:b2:ac:
         79:94:2f:eb:16:39:5d:1a:44:e4:0a:83:ef:32:3b:0a:fb:64:
         be:16:b7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:20 2025 by rpki-client