Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdcc1577-82bd-3948-ab5e-045024d4a47c.roa
File:                     fdcc1577-82bd-3948-ab5e-045024d4a47c.roa (raw, json)
Hash identifier:          E5iA4FXJaGXgDUwFMbLDlOZECZeweOBP02yTt/Lsw5w=
Subject key identifier:   17:71:4B:DC:B7:EF:54:F2:CA:44:67:ED:35:18:67:61:CC:A1:71:7E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858490F7BF38F69F1060C37A65D00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdcc1577-82bd-3948-ab5e-045024d4a47c.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        98.20.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7b:f3:8f:69:f1:06:0c:37:a6:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=82358834-9102-4b3c-8181-1e3ee108f1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:19:a9:8b:c5:ea:23:b5:be:fe:99:57:05:
                    fc:8a:af:12:c4:be:b8:95:2b:a7:88:86:61:7e:30:
                    39:fd:b2:24:ea:47:8c:e7:35:e3:05:94:12:2b:e5:
                    83:c7:e5:dc:4f:10:6c:19:3a:03:68:45:28:2f:22:
                    3d:d0:df:9e:43:10:73:d9:c5:53:8f:f7:b2:09:4c:
                    f7:51:1c:33:44:c9:7c:52:5e:4f:ec:ca:f3:f5:bb:
                    f9:e6:46:e4:d9:55:86:df:4f:77:58:6b:49:ed:93:
                    46:65:06:4a:8c:17:c3:b5:a5:3c:a4:76:c6:70:47:
                    c4:aa:c7:30:56:dd:ee:a9:d7:dc:69:31:a2:60:73:
                    67:ce:9c:05:00:9a:e4:b6:6d:31:59:63:4a:b3:09:
                    22:c7:1f:d6:5b:42:80:b0:32:e8:30:88:74:37:58:
                    30:46:d9:bb:6a:f5:5a:97:8b:6b:40:52:02:85:da:
                    2b:31:ab:37:48:8c:bb:1d:65:37:f2:c6:1b:ca:b2:
                    13:e0:6f:ed:a1:9b:47:5c:96:6a:da:32:1e:74:c7:
                    3d:82:f8:c0:7c:8f:72:38:3e:a7:15:a8:f9:06:6a:
                    de:e0:ea:3c:57:22:ea:85:1a:58:d9:63:55:23:b3:
                    41:af:91:d5:69:0c:8c:46:93:aa:de:0a:dd:ea:c8:
                    73:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:71:4B:DC:B7:EF:54:F2:CA:44:67:ED:35:18:67:61:CC:A1:71:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdcc1577-82bd-3948-ab5e-045024d4a47c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.20.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6f:36:6e:44:bf:ba:17:22:fb:c2:dc:ff:8f:8a:26:cb:42:
         8b:41:99:4e:63:5a:26:d8:01:4d:e7:66:45:19:12:ac:23:24:
         17:25:a9:0a:8e:7c:c8:48:89:d3:86:fb:1c:58:49:db:86:93:
         a7:fc:d9:05:91:c4:2c:81:3f:a7:ce:ef:50:ed:25:cc:05:40:
         63:05:47:49:94:15:33:46:3b:3b:b1:e0:f1:ff:c9:0f:ff:5e:
         03:1f:d9:54:9c:84:1e:f3:54:a0:ee:e2:47:94:51:c0:30:b4:
         eb:c1:5c:9c:08:c4:e5:0b:09:98:98:5c:e4:6e:ca:ba:41:18:
         4c:18:65:26:3d:91:c5:0e:6c:f7:05:a1:6d:ca:47:68:6e:ec:
         50:3e:7a:85:7d:40:fe:67:aa:73:c0:54:5a:84:f7:a7:f0:50:
         89:d7:a8:f9:b7:2a:a5:46:0e:43:01:65:8b:64:73:47:b4:3d:
         42:51:a9:bd:f1:aa:e7:a3:a8:01:2c:a7:35:21:28:7c:14:0e:
         d0:6c:30:9b:62:93:3c:63:fe:8b:fa:ab:30:d9:da:eb:61:18:
         f4:85:24:06:82:02:d4:f7:a5:b9:48:a2:08:8c:e0:5a:29:ca:
         35:69:a2:10:72:ba:12:48:cf:a0:47:5b:4d:b7:a9:57:9c:22:
         c6:54:01:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:02 2025 by rpki-client