Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1743138-395e-3725-8985-47cfa572922c.roa
File:                     e1743138-395e-3725-8985-47cfa572922c.roa (raw, json)
Hash identifier:          gsfiJRUs89bGJZpN35vfE683Tlfd0Pa/HcnS+1tmk5g=
Subject key identifier:   44:C4:6E:94:1A:33:22:5F:12:BB:B5:12:4B:9A:AB:83:94:49:82:27
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285846F75AC30162CDB45570B3C500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1743138-395e-3725-8985-47cfa572922c.roa
Signing time:             Fri 23 Aug 2024 01:00:31 +0000
ROA not before:           Fri 23 Aug 2024 01:00:31 +0000
ROA not after:            Thu 21 Nov 2024 02:00:31 +0000
asID:                     7029
IP address blocks:        98.18.240.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f7:5a:c3:01:62:cd:b4:55:70:b3:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug 23 01:00:31 2024 GMT
            Not After : Nov 21 02:00:31 2024 GMT
        Subject: CN=3f64017f-34e0-4b99-bee3-93364618c0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:08:68:01:be:66:44:c8:e7:93:a0:49:b6:ea:
                    29:70:e7:21:a8:e3:e3:65:a9:10:ac:1a:60:b3:8a:
                    3a:a0:cb:16:68:e6:82:74:57:11:2c:51:a9:4c:9b:
                    15:d0:4e:27:7b:30:fc:57:ce:18:00:82:5a:96:79:
                    0d:e7:12:00:ef:ed:8a:58:e0:b6:8b:41:39:17:f9:
                    59:b9:f3:d5:c7:3e:9c:1f:ee:95:0b:01:db:a4:c3:
                    cb:79:c0:4b:6c:8e:63:09:7a:f7:4f:44:08:d9:43:
                    b7:71:49:59:c4:ba:d1:91:c5:e2:92:dc:1b:c9:7f:
                    15:e3:53:0d:da:be:38:d9:b7:b6:ed:49:7c:0d:b5:
                    5d:ad:ec:8a:b0:92:8e:53:6a:f4:b2:29:56:60:15:
                    43:67:0b:c8:f9:74:2c:34:89:c6:3f:52:ec:14:2b:
                    48:a5:34:26:93:bc:cc:80:fc:ce:71:7a:ca:c3:69:
                    b5:c1:52:7d:ed:28:d2:ff:4b:e0:10:86:75:eb:48:
                    9f:64:5c:e1:bc:34:f9:a7:4d:cc:3a:75:eb:8d:6b:
                    0c:40:91:1f:3c:7c:b2:f2:a2:7b:24:cf:2f:57:d5:
                    0a:37:ad:d8:b1:4e:87:8c:a0:fd:b7:d2:d1:0d:5f:
                    12:81:13:05:70:ab:0d:d4:12:ec:1d:04:91:6b:ed:
                    29:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C4:6E:94:1A:33:22:5F:12:BB:B5:12:4B:9A:AB:83:94:49:82:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1743138-395e-3725-8985-47cfa572922c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.18.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c7:a3:43:66:7e:4b:b9:b6:35:5d:c4:ad:ce:2a:83:1d:b9:
         ef:50:0d:e3:f0:a4:2c:1a:5b:4e:4d:5f:e0:8b:8a:0b:b5:ea:
         1e:78:34:cb:61:c2:e6:fd:f8:dc:16:b3:d0:e3:63:86:02:0e:
         be:c7:27:2f:61:7e:c9:f2:7a:37:1a:a3:dd:d7:87:5b:d0:7a:
         5b:dc:3b:fa:7f:93:80:bc:89:b4:01:79:ca:db:5e:94:cd:43:
         f5:5f:73:7e:38:46:28:e7:0a:51:24:41:21:f1:4d:d2:f1:25:
         14:37:8e:f4:6b:0e:00:56:c9:2e:cb:db:15:a4:b7:34:1b:3a:
         fb:fd:d9:da:b1:8a:82:14:7e:ca:22:60:45:eb:c1:ad:61:3a:
         c1:b1:ab:8e:81:e5:b3:45:9d:b6:2e:a9:82:0c:76:58:a1:a3:
         ce:77:e7:6b:85:41:3c:f2:52:e7:2a:43:87:e3:77:79:44:09:
         d6:d4:15:d9:5d:5d:e5:a2:a2:33:c3:43:b6:42:77:28:3a:2e:
         4c:bd:ca:25:2a:11:16:c2:5b:0d:72:5f:68:6a:68:4d:b1:66:
         3a:a3:e1:79:63:6d:cf:5a:64:14:32:03:d8:ec:dd:66:1f:77:
         bf:b2:fd:5d:10:b3:66:f0:f2:86:04:a4:46:38:63:b8:9f:8d:
         51:e1:20:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb3WsMBYs20VXCzxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDgyMzAxMDAzMVoXDTI0MTEyMTAyMDAzMVowLzEtMCsGA1UEAxMk
M2Y2NDAxN2YtMzRlMC00Yjk5LWJlZTMtOTMzNjQ2MThjMGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAhoAb5mRMjnk6BJtuopcOchqOPjZakQrBpg
s4o6oMsWaOaCdFcRLFGpTJsV0E4nezD8V84YAIJalnkN5xIA7+2KWOC2i0E5F/lZ
ufPVxz6cH+6VCwHbpMPLecBLbI5jCXr3T0QI2UO3cUlZxLrRkcXiktwbyX8V41MN
2r442be27Ul8DbVdreyKsJKOU2r0silWYBVDZwvI+XQsNInGP1LsFCtIpTQmk7zM
gPzOcXrKw2m1wVJ97SjS/0vgEIZ160ifZFzhvDT5p03MOnXrjWsMQJEfPHyy8qJ7
JM8vV9UKN63YsU6HjKD9t9LRDV8SgRMFcKsN1BLsHQSRa+0pwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFETEbpQaMyJfEru1Ekuaq4OUSYInMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTE3NDMxMzgtMzk1ZS0z
NzI1LTg5ODUtNDdjZmE1NzI5MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhLwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJbHo0Nmfku5tjVdxK3OKoMdue9QDePwpCwaW05NX+CLigu16h54NMth
wub9+NwWs9DjY4YCDr7HJy9hfsnyejcao93Xh1vQelvcO/p/k4C8ibQBecrbXpTN
Q/Vfc344RijnClEkQSHxTdLxJRQ3jvRrDgBWyS7L2xWktzQbOvv92dqxioIUfsoi
YEXrwa1hOsGxq46B5bNFnbYuqYIMdliho85352uFQTzyUucqQ4fjd3lECdbUFdld
XeWiojPDQ7ZCdyg6Lky9yiUqERbCWw1yX2hqaE2xZjqj4Xljbc9aZBQyA9js3WYf
d7+y/V0Qs2bw8oYEpEY4Y7ifjVHhIHM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:23 2025 by rpki-client