Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/784af75b-603b-3c22-ac5d-108e9859709b.roa
File:                     784af75b-603b-3c22-ac5d-108e9859709b.roa (raw, json)
Hash identifier:          yC6LnJPCPOZ8azYAgC5t+fOwx1l5dOkVPlG5eSyf1HQ=
Subject key identifier:   95:82:C4:06:ED:7E:1B:4C:EA:10:CA:8D:B6:EE:E8:49:59:FD:FD:5C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584711E0A721FA0EB57544AE5B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/784af75b-603b-3c22-ac5d-108e9859709b.roa
Signing time:             Sun 01 Sep 2024 13:00:41 +0000
ROA not before:           Sun 01 Sep 2024 13:00:41 +0000
ROA not after:            Sat 30 Nov 2024 14:00:41 +0000
asID:                     7029
IP address blocks:        198.14.224.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:11:e0:a7:21:fa:0e:b5:75:44:ae:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep  1 13:00:41 2024 GMT
            Not After : Nov 30 14:00:41 2024 GMT
        Subject: CN=6d1f2806-4252-4ba3-88e9-83185ceb456d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f8:a6:19:df:e9:8f:72:d7:36:73:24:cb:18:
                    1d:51:42:ac:73:33:00:aa:9c:7f:c4:10:fb:1c:68:
                    fb:42:13:14:01:1c:d3:64:d9:bc:5c:89:56:5c:a5:
                    f3:22:65:00:05:72:eb:1b:19:ab:91:ea:fc:48:20:
                    66:2a:61:82:ae:b5:9c:64:77:64:bb:d4:0e:73:a4:
                    c3:4c:97:ac:98:17:2c:9b:dc:89:fa:5d:6d:d8:eb:
                    71:49:da:30:36:d1:fd:f6:66:aa:35:ab:66:a9:04:
                    fe:c9:1c:4c:f1:1e:20:f9:89:ff:de:72:e0:8e:70:
                    1d:a9:b3:92:74:ae:26:d2:01:ed:95:1d:4b:1a:27:
                    8f:cd:be:18:0e:82:ac:83:6d:ae:69:6b:e2:5a:37:
                    94:36:a0:7f:33:c1:b5:a0:f3:6f:8f:b0:20:d1:25:
                    f3:37:67:91:fe:93:a9:d7:52:c0:b4:b9:d5:7c:8b:
                    96:da:09:3d:84:0f:c0:45:41:f5:56:d9:17:c2:72:
                    ec:41:5c:d9:26:9c:53:04:ec:f8:33:29:7b:ae:2f:
                    0a:ca:33:de:23:46:68:c0:54:e1:69:9a:74:01:21:
                    59:f4:20:d7:5b:3c:cf:5d:f4:4c:fa:cc:3d:5a:1c:
                    8c:06:ea:c0:bf:a0:3b:bc:5a:b6:8d:9e:99:11:28:
                    01:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:82:C4:06:ED:7E:1B:4C:EA:10:CA:8D:B6:EE:E8:49:59:FD:FD:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/784af75b-603b-3c22-ac5d-108e9859709b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.14.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:91:af:c6:b7:5c:47:52:57:41:5e:8f:7e:cd:3c:df:30:b1:
         9d:b2:c3:7c:4e:5d:dc:26:2c:01:f3:1e:c0:ee:95:7a:8c:21:
         b2:9e:44:b4:6f:b2:89:6f:c1:68:d8:ab:f6:3b:46:0b:97:ab:
         aa:b1:a9:45:3f:3a:25:ac:c1:c2:cd:47:dd:c7:74:07:46:ee:
         83:80:2b:e5:55:b9:43:b4:8e:11:15:5c:83:43:d6:18:62:e5:
         96:01:26:90:e4:6e:ec:4e:94:3e:19:06:76:b7:f0:dd:15:f5:
         45:a9:d3:61:78:f8:24:59:92:44:76:ad:a4:0e:82:49:96:42:
         60:39:38:c0:c5:f9:b5:b2:d6:0c:d7:fd:af:2d:13:82:93:6a:
         92:c0:a6:23:a6:bb:8b:52:5a:92:e8:11:fb:3f:65:0d:b9:ba:
         1d:8f:1b:01:0e:97:73:93:de:27:b9:8c:ae:fa:79:9c:71:2e:
         08:9e:36:4e:47:b3:7e:d0:e6:9c:96:95:28:03:9f:ec:76:40:
         a8:db:70:c5:ba:97:49:c9:76:09:32:7f:67:d2:96:bb:8c:35:
         ca:90:42:2d:f6:15:8a:23:4c:12:11:1e:58:f7:f3:5e:fc:d3:
         90:80:d1:89:02:c9:8d:f6:a6:c1:c4:90:1e:cd:4d:51:98:dc:
         ee:af:0d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:29 2025 by rpki-client