Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d97a8e0-a8c9-3114-8f60-ccac63d3fe30.roa
File:                     8d97a8e0-a8c9-3114-8f60-ccac63d3fe30.roa (raw, json)
Hash identifier:          e5siQtXdT9HxaXtlwgJx3ygDou4d2GHe/8gJLoEaGJM=
Subject key identifier:   F8:D2:62:C8:16:09:30:54:76:47:7A:28:FB:C1:13:92:B9:C3:A2:68
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FB7FDAA8357E0DF3934B0C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d97a8e0-a8c9-3114-8f60-ccac63d3fe30.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     21609
IP address blocks:        40.141.58.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:b7:fd:aa:83:57:e0:df:39:34:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=c278ab01-3bba-48ee-9ddc-1e5b4e4505f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:18:08:9a:f3:ca:1a:f7:f5:9f:db:9d:23:dd:
                    6e:1c:d6:fc:e1:73:81:93:f9:a5:f0:35:a0:50:ac:
                    32:9e:3e:3c:11:2f:fd:dd:ec:8e:5c:16:9f:3c:8d:
                    ab:ef:0c:7a:ab:45:94:c4:d8:be:8d:d3:43:e8:41:
                    e1:4a:47:0f:80:cf:77:8e:1b:63:89:68:68:a7:8f:
                    00:b2:1b:01:c6:41:8f:49:60:95:69:c9:cc:c5:fa:
                    bf:9d:e5:00:98:86:a8:4e:2c:92:75:5f:ab:c7:4e:
                    7d:fe:23:67:29:18:82:1f:25:82:2b:a8:1a:a9:5e:
                    24:44:71:e3:1c:c4:81:37:52:39:67:9c:95:a9:59:
                    b9:20:19:37:64:59:db:22:6b:21:d1:4f:45:ae:d3:
                    77:26:7d:17:ea:a9:5f:ac:bf:c7:54:10:92:b9:8e:
                    49:c0:a3:bb:a3:19:cf:99:e2:2f:56:d1:06:f7:47:
                    91:e3:18:44:bd:76:bc:fb:f6:0a:d2:57:7c:eb:a6:
                    f2:c6:0d:5d:11:54:85:49:bd:49:b0:7f:b0:f3:d8:
                    22:9d:62:79:7f:81:43:b6:8b:12:7a:d5:c2:9a:de:
                    fc:4f:92:83:a1:b8:84:ae:3a:cd:1a:d7:6d:8f:62:
                    4a:24:7e:bc:87:3e:fb:31:d7:25:90:2c:bd:59:a4:
                    e3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D2:62:C8:16:09:30:54:76:47:7A:28:FB:C1:13:92:B9:C3:A2:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d97a8e0-a8c9-3114-8f60-ccac63d3fe30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.141.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a8:17:f1:01:6c:aa:27:ab:7d:78:b4:a3:b4:26:de:e6:0a:
         bc:95:7e:54:de:99:3b:5a:7f:11:70:b5:e1:b4:6a:f5:db:d3:
         79:ec:a2:a3:3b:0e:9a:9e:0e:79:74:a5:a1:f3:d3:a2:c6:25:
         15:32:50:14:c1:d9:0d:29:27:7f:2a:5f:a1:fa:37:31:04:b2:
         87:06:8f:47:03:4b:9b:ea:da:27:e0:71:fe:cd:75:c8:69:51:
         b9:2b:49:1c:9e:4b:01:7d:b6:68:97:49:32:6c:f1:0e:fd:5a:
         df:31:02:20:cb:1e:96:8b:c0:be:7b:4e:1c:f7:48:ec:6b:d5:
         b9:76:d8:40:d5:a2:a8:36:ea:99:7d:90:8c:2e:84:0b:d6:00:
         79:c0:ad:e0:8b:d1:e5:6b:69:f6:01:d7:60:50:3b:8e:00:18:
         c5:53:06:cd:75:b3:32:93:34:d6:62:7e:e0:f3:ac:c9:c6:75:
         9c:e5:0f:5c:48:e3:8f:d1:43:2d:f7:40:e1:7b:1d:64:b0:8d:
         78:d4:7c:5f:9e:ab:c3:c6:bb:24:18:b4:f7:af:88:b5:2d:33:
         8e:e3:e6:7a:64:81:90:bf:cd:ce:23:a4:81:6b:b0:40:69:27:
         7e:a6:f6:c7:97:5d:50:db:22:26:f1:29:7d:af:e1:9a:e7:09:
         55:c4:45:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:42:41 2025 by rpki-client