Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bff59c23-924f-30b8-8297-76c7b96db3bc.roa
File:                     bff59c23-924f-30b8-8297-76c7b96db3bc.roa (raw, json)
Hash identifier:          20JoE+sOMFR9ytzMLDD8dbyAMIKWhCs2N6COyuf5FOo=
Subject key identifier:   6E:73:AA:3D:27:A4:37:18:F4:8D:E5:47:7E:D8:A5:74:C7:EB:99:54
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D57E24C2E59212C8F413096B8
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bff59c23-924f-30b8-8297-76c7b96db3bc.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 16 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        207.59.175.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:57:e2:4c:2e:59:21:2c:8f:41:30:96:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2028 GMT
        Subject: CN=ad545d88-d65f-4928-b584-dbb80c9f6cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3c:ed:a8:2d:b5:5a:2c:fc:77:b9:48:a3:1f:
                    5c:cc:94:5b:71:f6:eb:73:d0:4a:ef:ff:be:3b:ba:
                    8d:69:24:f3:56:c4:c7:4e:91:57:55:1b:a8:df:a9:
                    5f:97:56:8d:23:8a:e8:b7:5b:48:c3:30:0e:7f:ff:
                    23:22:5e:53:d1:bc:85:03:7d:94:02:b7:e3:84:6f:
                    10:dc:9b:79:87:59:21:d6:6a:73:a7:41:d4:cb:f6:
                    7d:ca:11:71:29:3c:5f:fc:ff:d6:28:56:eb:e6:b9:
                    13:68:64:d2:1e:10:21:73:20:a0:63:92:d2:83:98:
                    15:87:38:f3:8b:4e:52:44:f8:f5:dc:da:9a:65:2e:
                    eb:36:1f:d0:fc:10:83:ff:c6:51:36:79:26:f6:52:
                    62:44:7f:36:f0:91:35:8d:53:64:29:cb:2f:81:fe:
                    43:cb:38:42:8e:73:a9:52:bd:a3:13:40:1a:69:30:
                    62:28:35:63:57:61:96:34:ba:0e:d5:e1:a1:c8:01:
                    f0:cf:d2:f6:03:ec:a6:b4:9d:53:d7:03:49:f6:35:
                    ca:57:5d:0e:81:4e:d7:b1:90:f5:80:8e:12:07:d4:
                    59:2f:a3:17:b9:7a:95:bc:dd:16:9f:60:5f:20:0b:
                    d0:84:0a:13:50:a6:96:9b:ca:6a:63:b0:0e:fc:3d:
                    d8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:73:AA:3D:27:A4:37:18:F4:8D:E5:47:7E:D8:A5:74:C7:EB:99:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bff59c23-924f-30b8-8297-76c7b96db3bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.59.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a4:2c:c3:c4:34:dd:4b:97:39:62:e3:c1:4b:c9:9f:02:4c:
         10:2e:bf:d4:52:80:8c:97:9f:33:8b:64:eb:10:30:12:69:74:
         a7:32:2b:88:85:af:6c:67:c8:22:36:22:f4:87:ba:5a:59:2e:
         a5:15:16:c2:01:1c:69:3e:38:47:e0:67:49:99:11:d1:90:e5:
         46:2b:02:87:75:5e:07:88:20:17:0c:b7:e6:dc:b1:ba:42:72:
         39:24:d9:0a:ea:44:cd:7c:a5:70:95:39:9a:a6:e6:7d:89:68:
         92:7f:1c:60:11:df:17:0b:8e:13:cb:35:48:9d:fb:87:25:ee:
         80:10:30:a8:a9:36:d4:b4:a8:95:a4:f5:f8:c6:02:13:91:89:
         cb:9e:c6:10:2b:f1:05:c2:8d:08:3d:77:2a:b4:2f:ea:36:61:
         82:d4:a6:7d:02:1a:75:39:a0:a5:93:22:bd:40:ae:7a:92:6f:
         96:e5:45:67:1f:22:9e:bc:35:fd:46:ed:92:64:50:51:78:29:
         c4:6e:2e:17:5b:6e:7d:d9:3a:19:44:65:32:ff:b5:d5:d0:f3:
         1f:41:e8:d4:ce:62:b3:75:1d:b1:b8:61:db:7d:08:88:f4:78:
         c4:f0:27:9a:48:bc:8c:2c:43:4f:1a:55:ae:1c:70:df:b2:cd:
         f1:8f:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:47 2025 by rpki-client