Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea842e5b-0de7-38f4-8af9-b017a7059cbb.roa
File:                     ea842e5b-0de7-38f4-8af9-b017a7059cbb.roa (raw, json)
Hash identifier:          TnR9okHiyCe3cUmHMuwuxq0fiS30toRA7OUKNAtEqbQ=
Subject key identifier:   F8:14:BC:81:CD:BA:4B:5B:EE:28:9E:F6:CD:EE:08:49:AA:4A:70:D0
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858493AEF462C539FD7410BB665C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea842e5b-0de7-38f4-8af9-b017a7059cbb.roa
Signing time:             Tue 18 Mar 2025 15:32:49 +0000
ROA not before:           Tue 18 Mar 2025 15:32:49 +0000
ROA not after:            Mon 16 Jun 2025 15:32:49 +0000
asID:                     7029
IP address blocks:        98.19.156.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3a:ef:46:2c:53:9f:d7:41:0b:b6:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 18 15:32:49 2025 GMT
            Not After : Jun 16 15:32:49 2025 GMT
        Subject: CN=2f6e969c-07ce-40bd-a9fb-bf642ac5dbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7a:24:3d:0e:e8:31:cd:db:e7:f1:e0:4b:91:
                    20:9e:45:14:3f:67:5f:bd:c4:8c:a1:76:db:d2:79:
                    aa:64:63:1d:0e:52:db:2f:37:fe:8d:1d:79:48:e4:
                    b2:9a:14:21:70:db:d3:f2:d0:2a:d4:25:f0:cd:f0:
                    92:cf:e2:7b:93:18:be:36:40:53:5a:dc:5e:fb:32:
                    c5:37:f8:e7:c1:c5:67:ed:c1:46:c9:11:c8:d3:9b:
                    66:2f:6e:6f:31:4e:5f:83:12:e8:c3:b3:04:dd:3d:
                    3b:ca:3a:3e:45:9c:55:d2:81:fd:08:38:d2:1d:2f:
                    56:21:a7:87:a1:8b:a8:df:df:c9:71:c9:ab:e8:a9:
                    35:15:b5:5c:8a:91:97:4c:2f:7f:3e:82:cf:12:fc:
                    d2:c5:ce:2e:c1:27:f0:48:ae:4b:c7:ca:67:f7:ef:
                    aa:d0:34:9f:c2:e1:69:0f:fa:fe:f8:6e:28:5a:08:
                    06:df:22:38:a7:85:bb:60:6b:ba:b0:91:60:3c:ba:
                    d5:d7:43:d5:eb:78:af:23:3a:d4:19:f2:38:46:a5:
                    44:f4:7b:31:37:9c:50:f0:2b:f2:6a:a2:b8:e7:42:
                    1a:34:08:62:fe:bf:3a:51:9c:c4:f1:8c:e1:dc:24:
                    39:c4:4b:f9:79:8c:c2:f1:c5:68:a0:f5:f2:66:8f:
                    a2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:14:BC:81:CD:BA:4B:5B:EE:28:9E:F6:CD:EE:08:49:AA:4A:70:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea842e5b-0de7-38f4-8af9-b017a7059cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.19.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:2c:96:48:66:26:04:58:6d:fb:d6:5b:5a:49:f4:49:34:20:
         c5:96:ba:d6:7c:b2:36:42:b5:e9:07:b2:e9:49:cd:df:56:7c:
         89:4e:08:0c:15:f8:e2:a0:e9:b4:71:53:98:d1:58:94:c7:5f:
         28:94:11:b7:73:63:e2:a6:16:36:60:55:da:0d:05:52:be:f2:
         ab:e1:07:66:6c:01:c7:14:ca:06:2d:90:7d:6f:3d:d6:74:78:
         66:b5:69:ff:09:4a:dd:9c:b4:13:7a:e4:8d:3c:42:ef:c0:62:
         4a:e3:a1:8d:72:4f:04:1e:7d:29:12:ea:d9:3a:6d:74:a1:b2:
         12:7b:f9:f1:e9:2c:77:d5:8f:ac:f2:85:d5:2a:f8:4f:24:ac:
         ff:5a:b4:d2:68:8c:ee:75:69:f6:b6:b3:85:72:32:02:ed:f6:
         7f:6a:c2:14:1f:dd:c4:57:05:89:34:b0:ae:f6:6b:e7:45:6d:
         c4:e6:d0:c8:a0:c1:38:09:67:f1:05:e8:4f:fd:ab:18:85:a5:
         7b:4a:08:89:65:02:04:6d:78:24:b5:d5:8b:67:84:d9:22:fb:
         2c:1e:e8:58:d4:f6:80:a5:9f:14:6e:8e:d9:19:11:18:7d:69:
         2b:54:af:01:63:e3:77:07:ab:b5:3b:8c:2e:87:aa:b8:0b:f1:
         7a:e7:0b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:16 2025 by rpki-client