Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ee3701d1-a2b2-3927-841d-3e5217345060.roa
File:                     ee3701d1-a2b2-3927-841d-3e5217345060.roa (raw, json)
Hash identifier:          gm/E5BjP0dn3J+ZaAp1QYdDzEs1w1GNieHLcGJQcScA=
Subject key identifier:   9B:4E:2D:47:4A:37:59:E0:5F:6F:E8:CB:E6:08:C3:33:7B:0C:E9:1D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D3F582413FF15139CDDCDD780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ee3701d1-a2b2-3927-841d-3e5217345060.roa
Signing time:             Tue 15 Mar 2022 04:00:00 +0000
ROA not before:           Tue 15 Mar 2022 04:00:00 +0000
ROA not after:            Tue 07 Mar 2028 05:00:00 +0000
asID:                     7029
IP address blocks:        199.35.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3f:58:24:13:ff:15:13:9c:dd:cd:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 15 04:00:00 2022 GMT
            Not After : Mar  7 05:00:00 2028 GMT
        Subject: CN=d50f0b04-4a8b-475d-a707-e3e203c9a9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d1:a4:0d:07:07:43:a1:4f:3d:9a:54:46:1d:
                    8f:81:3c:73:b1:e5:36:26:ee:0f:26:68:7d:06:e4:
                    5a:3a:fd:1f:11:60:90:e0:b2:00:c7:2b:44:0b:7d:
                    6a:33:cc:e9:61:8c:f2:ae:4c:5c:28:4c:72:a8:ee:
                    7f:85:c4:5b:d5:b1:0e:18:8d:ad:71:ec:b3:70:f0:
                    99:01:de:3c:d5:45:fd:07:d4:4f:19:c0:6d:d3:7e:
                    39:b3:9b:7e:00:40:55:1d:f9:99:59:82:2f:30:86:
                    b5:42:8b:85:8c:07:61:4b:98:84:af:0a:9b:e7:a8:
                    5b:2e:3b:45:08:f2:65:9f:7c:9c:ec:44:62:03:1a:
                    c2:ff:ab:9f:bc:d7:6a:a3:89:1f:61:ca:de:8d:dd:
                    13:31:a4:9b:53:3b:c1:27:06:83:6b:85:95:3f:e6:
                    8c:e0:c6:ce:42:b3:4a:82:14:6d:cd:87:2c:a1:2a:
                    da:b6:6a:3f:3c:5e:59:d7:4b:5f:c2:84:16:83:0a:
                    53:a8:b6:d9:4b:a0:af:5a:89:c1:1f:5c:e9:0f:01:
                    77:af:00:fb:33:b6:03:c4:b1:a3:42:28:95:b4:10:
                    30:c5:84:b5:7f:67:f8:23:96:eb:80:e9:0b:40:0a:
                    64:b1:f6:ee:fa:35:32:48:7a:4e:b3:ca:53:af:81:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4E:2D:47:4A:37:59:E0:5F:6F:E8:CB:E6:08:C3:33:7B:0C:E9:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ee3701d1-a2b2-3927-841d-3e5217345060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.35.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:84:47:b8:1f:f6:5e:75:f6:4e:0f:5e:71:f1:64:ef:82:c6:
         e6:ec:11:ce:ee:e3:41:dd:d2:cc:a6:d3:ef:8c:24:28:fe:ab:
         c3:c0:04:61:d2:1b:ce:f9:e9:91:87:f7:fb:b0:39:09:3d:54:
         38:81:d2:ed:c8:82:0e:b0:2f:bd:d4:46:81:1a:ac:e1:64:e9:
         18:e4:34:fa:3d:cf:a1:65:5d:52:8a:d9:8c:03:a4:24:83:79:
         ce:19:af:0e:65:c7:ac:d0:ee:db:67:47:03:ba:5c:d1:56:c3:
         99:3a:c9:05:a0:e1:74:56:e3:b9:b7:0a:b6:69:35:3a:03:0d:
         7b:e4:35:34:02:23:17:0f:a4:39:63:be:88:16:05:6d:5f:9d:
         6d:47:95:c4:5e:5f:e4:3b:b6:4a:29:d3:5f:67:7a:13:88:62:
         43:95:d2:dc:ac:30:55:e5:37:68:69:5b:96:f9:1a:89:84:28:
         cf:a9:06:3b:47:57:e8:9e:11:8e:fe:fc:ef:6a:f1:74:1a:66:
         4f:55:1f:ef:68:ff:c1:47:c4:63:07:8e:19:42:d1:d0:f7:98:
         3e:4e:91:00:46:94:b6:af:31:fb:65:ea:92:c9:57:45:cd:14:
         b0:8a:28:1c:de:85:6c:d7:cd:c1:c6:bc:07:7b:93:03:f0:09:
         59:f8:c0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:15 2025 by rpki-client