Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e32a5b72-b716-3e2a-8765-908f6f1fa08b.roa
File:                     e32a5b72-b716-3e2a-8765-908f6f1fa08b.roa (raw, json)
Hash identifier:          KRxe+l458G+snadPPDXFvzJ5n4ue9iVsp+rcRT5G968=
Subject key identifier:   4C:C7:AD:6E:B1:F7:59:C4:06:55:45:8A:83:82:EC:08:12:3F:16:9C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583FEB325173C0DEFAA61946F657
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e32a5b72-b716-3e2a-8765-908f6f1fa08b.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 07 Nov 2028 05:00:00 +0000
asID:                     7029
IP address blocks:        98.18.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:eb:32:51:73:c0:de:fa:a6:19:46:f6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Nov  7 05:00:00 2028 GMT
        Subject: CN=432127c7-b7ec-4534-9e76-ad74f26b126d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5e:32:5e:b7:50:4c:60:be:c7:ef:19:3c:20:
                    11:97:5c:86:f4:cf:a3:2a:a9:3d:e2:eb:42:f3:89:
                    26:8c:be:b9:e9:33:b7:51:77:5f:95:9c:9c:7c:31:
                    de:d9:ba:dc:af:91:a1:47:38:d0:92:a1:86:ba:cc:
                    89:9e:31:b8:5a:db:b7:69:70:18:2b:c2:77:44:72:
                    1a:6f:bd:d2:c1:09:e5:a9:ac:76:ff:2c:55:85:60:
                    42:4e:69:f7:f5:9b:49:b7:65:ed:f5:52:e3:a6:a1:
                    16:5d:cf:24:c6:12:c5:5d:17:c1:33:09:4b:e0:09:
                    4c:4f:97:fe:12:43:d9:78:36:32:29:90:51:f1:cc:
                    e0:48:e2:40:89:05:d9:ab:0e:dc:4a:20:5b:51:e3:
                    8e:39:52:e1:20:b6:77:4c:be:e8:9e:a5:5b:fc:c7:
                    73:03:9c:f1:1e:b1:37:ca:21:c6:56:2a:a3:4e:61:
                    f8:db:02:20:6e:33:c3:21:cb:52:91:73:64:4f:6c:
                    c6:d4:00:79:60:40:fd:51:6f:a3:2a:3e:94:a1:4b:
                    16:ac:66:b2:7b:09:84:d9:26:ea:0c:f6:09:90:bf:
                    ee:6b:62:2e:77:5d:e6:ab:bf:91:5a:88:c6:22:94:
                    da:9e:a6:e4:bf:1d:df:6c:24:4f:ed:71:5f:6b:74:
                    b1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C7:AD:6E:B1:F7:59:C4:06:55:45:8A:83:82:EC:08:12:3F:16:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e32a5b72-b716-3e2a-8765-908f6f1fa08b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.18.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5d:88:8a:00:e0:8a:f2:cd:f6:12:ea:11:b8:63:80:03:c5:
         74:26:44:7c:d7:f5:8a:d1:89:2d:ae:57:b7:46:6a:5b:b9:c9:
         a2:8d:85:d4:3e:40:9a:70:6c:07:a7:92:56:6b:bb:2f:e5:3e:
         5f:fb:5e:8f:84:3f:25:03:68:6e:7c:ae:18:87:66:92:78:64:
         81:29:30:69:a5:68:a3:35:5d:10:10:b6:b6:61:09:23:99:8e:
         40:f3:53:d9:b7:b9:9b:30:4d:4f:38:46:80:35:c5:82:d7:1a:
         42:d1:42:44:8f:12:4a:a5:36:9f:79:6e:59:7c:0c:58:fe:f1:
         81:20:ea:3c:40:98:63:d4:62:bf:36:b4:2e:ca:d4:63:9e:97:
         09:b9:49:ce:00:cc:62:41:83:61:7b:88:74:ec:f8:49:70:3f:
         41:7a:c3:a1:4d:fc:3a:c5:ad:01:8c:d8:8e:2c:f2:e5:d3:bd:
         cf:99:98:89:c6:4e:7d:e2:73:72:7f:e9:a5:07:85:94:95:40:
         a2:35:84:f7:c8:02:a3:86:dd:9c:93:19:96:e9:0c:28:26:5d:
         48:64:a6:85:50:19:9a:49:6b:12:9c:9f:de:34:cb:e1:c6:0f:
         65:23:6f:e9:ca:0b:9f:12:90:0e:b2:be:17:79:99:93:67:89:
         24:d8:28:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:34 2025 by rpki-client