Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea353e60-f987-3dac-ab96-26c4bcf28808.roa
File:                     ea353e60-f987-3dac-ab96-26c4bcf28808.roa (raw, json)
Hash identifier:          m4YbbxasJYEXsMVp/BwPIKhBTmdC0hQj4l+0uoe/E7o=
Subject key identifier:   3B:13:B7:D5:70:56:0D:7A:A5:A7:D1:95:28:CC:8C:5F:15:0A:75:9F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858491D7163A87593C6FFB7699E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea353e60-f987-3dac-ab96-26c4bcf28808.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        98.16.53.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:63:a8:75:93:c6:ff:b7:69:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=8727f970-8781-4156-b457-02023580d14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0f:95:0a:e7:61:1f:70:d2:7e:63:2a:97:7c:
                    5c:23:db:bf:80:17:dc:64:69:44:86:ee:7e:82:da:
                    ae:e3:34:0e:cc:85:1c:08:de:86:58:36:5e:09:b2:
                    c3:b6:77:95:77:41:51:9e:17:90:2f:01:ee:17:58:
                    c4:1b:48:76:0d:99:12:9f:1f:48:02:da:07:6a:60:
                    8f:0f:3f:75:e7:b4:08:50:91:04:c5:c1:74:20:d7:
                    05:03:21:b0:42:9e:ef:4e:5f:af:87:c2:1e:ff:80:
                    cf:10:32:66:92:04:b4:3c:3d:9b:60:ca:fa:c9:53:
                    3b:1a:c6:46:1e:d4:64:8b:a6:44:57:ab:0a:ec:bc:
                    f6:f3:ef:3e:d9:85:de:f5:47:65:5d:ee:3d:2d:be:
                    88:f0:e0:65:4d:f8:55:38:7f:15:43:c7:a5:ce:82:
                    83:c0:9e:bb:9a:0d:43:b8:a2:05:30:af:83:93:2c:
                    27:20:f3:46:42:09:d9:36:ce:82:3e:d5:58:7d:d8:
                    49:93:1e:2c:99:3e:98:6a:43:fb:91:f2:3b:7a:63:
                    02:5a:2b:79:c1:4c:17:c1:32:f2:d3:f5:df:d6:1f:
                    db:92:bd:fc:81:31:9d:81:ad:69:1e:23:ad:6e:48:
                    3c:66:fe:b8:f3:b1:a0:5a:df:c9:c1:3b:77:9e:ff:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:13:B7:D5:70:56:0D:7A:A5:A7:D1:95:28:CC:8C:5F:15:0A:75:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea353e60-f987-3dac-ab96-26c4bcf28808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.16.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e1:9a:4a:a1:d3:87:0d:89:cf:31:d2:ff:db:2a:7b:64:7c:
         33:57:76:ab:58:e5:23:1a:fd:d0:53:49:8c:ba:a5:b7:b7:34:
         4d:29:fa:ce:25:de:75:42:6b:86:dd:62:fb:db:50:15:3d:5e:
         04:b7:f0:c8:3a:9c:c2:07:04:a2:ab:53:d5:33:f7:69:2a:cd:
         be:8c:1b:0c:5f:ef:87:11:b4:5e:61:05:0d:8f:00:14:12:0d:
         85:19:e2:4e:40:80:72:9e:d2:2d:57:f8:0a:bb:4c:89:be:bb:
         4d:ef:c1:be:0d:2e:5a:9d:ef:d9:c9:8d:ff:4c:d5:cf:48:d6:
         19:1d:0a:47:b3:c9:76:29:d2:0c:7e:10:08:70:20:f6:ac:fa:
         5a:aa:21:8a:67:b1:31:1f:7f:15:0c:8b:a7:db:98:7b:7c:b3:
         34:3e:6d:3e:7f:2b:7b:57:ae:f5:be:ab:a7:2c:d1:55:22:5a:
         75:3f:e3:99:80:a6:2f:14:99:5b:fa:aa:58:55:92:d6:17:59:
         67:af:6b:85:05:82:d2:e9:ed:44:ed:0d:4d:1d:12:dd:a4:b7:
         aa:a2:eb:f9:f5:05:15:b4:7d:a9:39:02:b4:2d:f9:e5:41:d7:
         f0:bf:e8:fa:19:8f:45:2a:46:d0:83:9f:37:cb:0b:c6:70:de:
         f1:73:5d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:06:12 2025 by rpki-client