Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90ef2e04-ec2d-3a4f-993f-3fc4311d1f1e.roa
File:                     90ef2e04-ec2d-3a4f-993f-3fc4311d1f1e.roa (raw, json)
Hash identifier:          g2dVWdFyCRryfkPtBexUibAmBBjFVa1kItYIDvrkvHc=
Subject key identifier:   BC:70:5F:5D:29:11:E8:BA:45:74:74:EB:09:2B:35:7F:01:27:05:4E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848DF092C95B5D3FDFA82290380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90ef2e04-ec2d-3a4f-993f-3fc4311d1f1e.roa
Signing time:             Thu 13 Feb 2025 17:30:38 +0000
ROA not before:           Thu 13 Feb 2025 17:30:38 +0000
ROA not after:            Wed 14 May 2025 16:30:38 +0000
asID:                     7029
IP address blocks:        98.17.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:df:09:2c:95:b5:d3:fd:fa:82:29:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 13 17:30:38 2025 GMT
            Not After : May 14 16:30:38 2025 GMT
        Subject: CN=881cb625-5a1e-4dc1-bce3-973f10a63f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:9b:3e:19:bc:87:d6:c8:0f:e4:f3:6d:67:
                    65:8f:92:e2:0e:03:83:72:1c:83:3a:17:f7:77:9f:
                    af:68:8d:ec:d2:67:56:8a:94:b4:3a:69:c7:b0:90:
                    83:5c:90:b2:14:f1:29:20:69:a2:9b:1f:5b:80:f6:
                    79:3a:54:28:e5:c6:58:4d:76:90:08:98:47:e6:6a:
                    55:d2:50:30:32:5c:cc:94:31:24:cd:4d:8d:c5:2c:
                    3b:1d:63:79:9b:70:d8:65:0a:6c:19:0d:a4:45:e8:
                    0c:13:e4:31:cf:86:42:b8:a4:38:60:76:7c:85:ce:
                    12:c0:fc:82:35:0a:a2:ee:02:f6:63:6f:ab:31:dd:
                    73:49:b8:4a:dd:e9:a1:e6:d9:23:d0:d4:5b:67:e9:
                    b0:15:a4:c8:07:64:a0:83:bc:3f:b6:c2:9a:22:9b:
                    ae:0e:a2:8e:11:01:95:0b:89:9f:06:bf:5f:05:e7:
                    8c:40:36:7c:ff:c2:5a:a8:de:b0:df:b6:77:e1:1c:
                    1f:27:42:15:18:0e:36:a0:cf:d9:0f:b7:3b:b3:e0:
                    cc:21:69:03:7e:1f:7c:f9:9f:85:13:f6:92:32:a9:
                    f4:0f:56:d1:1a:13:6a:77:fa:f9:c2:d6:4a:5e:3f:
                    fd:5b:59:12:ec:5c:69:c5:3f:68:50:36:d8:2f:a7:
                    da:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:70:5F:5D:29:11:E8:BA:45:74:74:EB:09:2B:35:7F:01:27:05:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90ef2e04-ec2d-3a4f-993f-3fc4311d1f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.17.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:11:94:59:94:bd:9b:44:5e:3e:6d:60:0e:72:c9:3f:e4:db:
         ad:87:74:de:b3:20:bc:13:80:39:4d:cd:14:30:fe:6c:c8:23:
         36:66:39:e1:c5:e3:58:c2:7e:f6:06:33:0a:7c:10:b8:21:43:
         56:b3:09:ba:ee:2e:9c:bc:b7:04:f4:a7:a2:9b:04:14:8e:9c:
         2c:b8:85:87:81:be:bb:c1:e2:d7:7a:f6:58:94:d8:84:12:45:
         e4:ab:6e:7e:c5:df:1f:ed:66:29:75:44:be:4c:09:4e:dc:16:
         67:34:d7:e5:c8:62:57:01:9c:09:46:52:57:de:cb:e2:ec:8c:
         8a:d0:97:fb:37:77:4e:36:54:e8:a0:d6:ec:5e:ef:0d:a2:bf:
         cf:58:b7:de:50:9d:e6:82:cd:af:92:44:39:a3:37:1a:a2:6f:
         8c:74:4b:76:41:22:d7:54:b3:a1:b4:cc:6b:43:8b:c0:4a:2c:
         dc:f1:2f:07:81:20:6c:99:2f:a0:9d:62:a6:d0:82:53:d6:cf:
         3a:1b:d2:c5:90:c2:b0:4f:a5:c2:2f:1d:82:68:2e:16:33:fc:
         00:ff:25:f8:30:e4:3a:04:ba:a2:e2:0b:95:bb:74:f9:3d:19:
         20:b8:29:15:3c:6f:f7:52:ef:e4:d4:7d:da:4a:74:06:b6:34:
         8c:45:f0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:14 2025 by rpki-client