Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c3ded88-4d72-37e9-be15-d846a3fae5e9.roa
File:                     9c3ded88-4d72-37e9-be15-d846a3fae5e9.roa (raw, json)
Hash identifier:          dXJ19KxmYPg1Oea/8FdFylVoj0KBfK/6/LCC9ifjX0U=
Subject key identifier:   6C:C1:68:91:CB:19:B2:63:D2:70:6B:EC:B8:66:96:48:D5:32:85:3D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661E316474D6093677E35480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c3ded88-4d72-37e9-be15-d846a3fae5e9.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        98.22.48.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1e:31:64:74:d6:09:36:77:e3:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=6a386c12-5ec4-433a-88bf-0545b5fc8410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:de:28:54:66:7a:57:2d:3e:0f:62:e3:a5:69:
                    ef:6b:78:76:35:cd:14:45:98:12:96:97:e2:7b:6e:
                    81:ea:30:9f:e6:04:b7:0a:ad:5c:5b:5f:b0:69:11:
                    ba:50:2c:77:9b:c9:b9:be:ae:79:be:86:3e:62:4e:
                    34:f6:31:71:ae:50:59:6c:cb:50:04:0b:27:2d:7e:
                    e5:5e:36:ba:ad:94:b0:db:e8:22:e0:0c:84:19:63:
                    08:67:5d:1f:2d:55:3c:10:6d:9a:71:12:2d:dc:1c:
                    be:f0:1e:22:95:57:69:14:33:3b:db:94:de:b0:ee:
                    f6:33:68:44:95:2a:99:dc:83:e9:70:9b:d3:0b:98:
                    57:a5:6f:da:df:f2:79:60:0f:b5:93:24:c9:60:94:
                    fd:c7:2e:08:89:bb:61:45:4b:71:0e:54:3b:6a:3b:
                    f5:29:27:17:9b:78:69:89:71:b0:23:6f:93:a8:87:
                    5a:ee:a6:5b:a7:fa:19:6e:c7:80:7c:ca:b8:87:eb:
                    38:4a:a1:26:cd:0a:94:58:24:74:3f:4f:f1:0e:b3:
                    be:48:af:66:8c:79:33:77:b1:36:5d:15:c4:5f:37:
                    1f:fd:30:19:95:88:00:c6:9d:64:61:b7:f1:57:f6:
                    55:79:46:e2:29:dd:ad:04:64:9e:56:02:ef:31:19:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C1:68:91:CB:19:B2:63:D2:70:6B:EC:B8:66:96:48:D5:32:85:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c3ded88-4d72-37e9-be15-d846a3fae5e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.22.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:cc:ff:61:3a:55:d4:18:2f:7d:47:91:2d:43:41:d5:f3:f6:
         56:eb:e4:f3:e7:7f:1e:94:23:6b:a0:8c:82:14:7b:ba:d3:e6:
         b8:57:f0:c1:43:af:62:31:18:c8:a9:74:fd:6b:91:32:48:15:
         38:0a:5f:34:03:cc:78:d2:4a:b3:48:8f:ff:1d:61:54:3a:94:
         40:1d:c6:6e:90:5d:a8:99:3a:f0:d2:3c:3f:b6:97:0d:00:16:
         13:21:b4:e9:7f:64:2b:3d:97:11:54:f5:46:8d:69:0b:e4:cb:
         f4:54:44:68:aa:d8:f4:31:3b:db:3d:bd:c7:44:e3:7e:8a:30:
         b1:6b:e0:e7:3e:6e:27:b7:fb:35:6d:f5:67:ae:bf:b9:fb:bf:
         9f:9b:2f:10:b6:a1:07:63:69:13:53:14:cb:33:4f:a6:11:dc:
         d8:80:a5:d9:fd:03:a2:95:bb:7b:40:3f:4b:7a:67:02:09:ab:
         c9:d8:17:b9:59:03:c7:ff:bd:52:4b:3f:87:ce:18:ec:a6:ac:
         8f:5f:38:e7:16:78:2f:08:a4:2e:92:50:b7:20:fe:5c:6f:c0:
         80:d4:11:bc:1b:8d:a3:87:92:37:41:c8:1c:91:d1:e1:08:40:
         83:08:d9:cd:25:c4:6b:d3:df:ae:f7:e8:a1:f4:10:21:be:79:
         61:b6:3f:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mHjFkdNYJNnfjVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
NmEzODZjMTItNWVjNC00MzNhLTg4YmYtMDU0NWI1ZmM4NDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid4oVGZ6Vy0+D2LjpWnva3h2Nc0URZgSlpfi
e26B6jCf5gS3Cq1cW1+waRG6UCx3m8m5vq55voY+Yk409jFxrlBZbMtQBAsnLX7l
Xja6rZSw2+gi4AyEGWMIZ10fLVU8EG2acRIt3By+8B4ilVdpFDM725TesO72M2hE
lSqZ3IPpcJvTC5hXpW/a3/J5YA+1kyTJYJT9xy4IibthRUtxDlQ7ajv1KScXm3hp
iXGwI2+TqIda7qZbp/oZbseAfMq4h+s4SqEmzQqUWCR0P0/xDrO+SK9mjHkzd7E2
XRXEXzcf/TAZlYgAxp1kYbfxV/ZVeUbiKd2tBGSeVgLvMRlvQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGzBaJHLGbJj0nBr7LhmlkjVMoU9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWMzZGVkODgtNGQ3Mi0z
N2U5LWJlMTUtZDg0NmEzZmFlNWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhYwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABrM/2E6VdQYL31HkS1DQdXz9lbr5PPnfx6UI2ugjIIUe7rT5rhX8MFD
r2IxGMipdP1rkTJIFTgKXzQDzHjSSrNIj/8dYVQ6lEAdxm6QXaiZOvDSPD+2lw0A
FhMhtOl/ZCs9lxFU9UaNaQvky/RURGiq2PQxO9s9vcdE436KMLFr4Oc+bie3+zVt
9Weuv7n7v5+bLxC2oQdjaRNTFMszT6YR3NiApdn9A6KVu3tAP0t6ZwIJq8nYF7lZ
A8f/vVJLP4fOGOymrI9fOOcWeC8IpC6SULcg/lxvwIDUEbwbjaOHkjdByByR0eEI
QIMI2c0lxGvT36736KH0ECG+eWG2P9s=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:42 2025 by rpki-client