Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe2d8f4b-4b5e-3c95-b346-834f45af03fa.roa
File:                     fe2d8f4b-4b5e-3c95-b346-834f45af03fa.roa (raw, json)
Hash identifier:          QCsXTkDa0qwvQ/LrOgLOMGXCkulOssxfyXJVEhlL/AY=
Subject key identifier:   10:44:E2:99:14:6B:6B:BD:B6:40:18:EE:AA:EE:C8:13:2A:C8:AD:1B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D9584A007539BF1C3A6435700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe2d8f4b-4b5e-3c95-b346-834f45af03fa.roa
Signing time:             Fri 15 Apr 2022 04:00:00 +0000
ROA not before:           Fri 15 Apr 2022 04:00:00 +0000
ROA not after:            Fri 07 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        40.130.200.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:95:84:a0:07:53:9b:f1:c3:a6:43:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 15 04:00:00 2022 GMT
            Not After : Apr  7 04:00:00 2028 GMT
        Subject: CN=8da18820-ca1d-4518-823d-460ff3409abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:16:23:85:f2:c3:f0:62:f2:e3:6b:0b:f6:ed:
                    44:f5:4d:65:97:1f:87:f4:e7:2c:91:35:d6:b8:a3:
                    80:d8:d2:1b:53:a0:9e:01:b6:ed:2a:86:9c:e8:7e:
                    c1:73:91:53:4a:07:06:78:9c:e2:38:13:49:1a:60:
                    ea:aa:92:6b:2e:89:cc:68:49:bc:82:ef:2d:90:7e:
                    c3:22:3e:0e:c7:75:ad:cf:e2:d4:14:7b:ae:91:8d:
                    f7:03:57:8a:ff:a5:ca:4d:0b:d6:d7:df:df:40:52:
                    75:e1:3a:28:11:cd:61:56:a0:3c:44:f4:5f:4e:1e:
                    35:41:a6:8a:ff:04:f7:b7:d2:87:19:ae:91:bf:5f:
                    0a:2e:01:bc:fd:07:b3:cf:0c:5f:f6:e5:80:ca:da:
                    d1:ae:0c:11:da:e4:6d:80:14:04:46:01:40:ba:a2:
                    7b:f6:f6:c3:bc:64:cb:3a:74:da:d7:5d:e4:43:37:
                    86:f4:a5:c8:18:d0:bc:39:59:d6:29:ad:89:ec:dd:
                    4d:44:fb:fa:34:5d:c9:49:64:83:ff:c3:b8:7b:5d:
                    45:e7:3c:a4:31:80:ae:f8:00:41:91:96:55:af:69:
                    b7:0f:e7:19:7d:98:7e:e1:81:4b:6d:1f:0a:ac:c1:
                    1f:8e:49:c5:3e:69:9f:85:ce:b3:88:5d:15:8e:d2:
                    55:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:44:E2:99:14:6B:6B:BD:B6:40:18:EE:AA:EE:C8:13:2A:C8:AD:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe2d8f4b-4b5e-3c95-b346-834f45af03fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.130.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:5a:ae:1d:fe:12:2e:06:b8:cf:bd:ff:54:14:d9:73:db:64:
         67:b0:ec:3f:59:ce:ea:30:a8:82:3d:20:d8:ae:40:f7:7b:9b:
         9d:93:0c:ca:8a:af:4a:50:e4:c1:2e:27:fc:e7:4a:19:0e:21:
         b0:32:a6:7e:63:18:70:3e:8a:81:2a:50:54:b1:c2:1c:b6:18:
         52:1b:00:bf:22:77:e2:23:fb:80:66:54:36:2d:28:3e:66:f0:
         17:51:ce:09:ff:94:d9:3a:39:a1:3d:af:36:b3:da:1f:a7:eb:
         f0:95:2d:80:42:a1:2e:12:70:2b:73:2b:9b:45:1f:61:2b:f6:
         80:9f:c8:6f:3a:71:44:de:f7:43:a5:64:53:e1:76:14:85:44:
         0a:5e:97:e6:d2:32:6b:2c:b7:ca:10:34:2b:c1:b3:8b:24:88:
         80:a9:06:16:3d:10:5b:18:e3:f8:88:7f:00:1d:fe:02:1e:51:
         61:c1:d5:a1:42:b9:71:db:a6:c3:08:c9:47:7b:e4:e2:9b:39:
         9d:ab:0c:e2:f5:ee:8a:b6:12:38:f0:bb:a9:99:a4:a2:7b:9d:
         43:e7:1e:77:e6:91:30:28:35:be:6d:03:50:d6:eb:93:4a:04:
         b3:77:5a:e6:c2:5b:41:7c:97:4c:23:7b:ef:82:ad:75:9b:ba:
         b7:8b:6c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:04 2025 by rpki-client