Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98aca797-6859-3a76-9226-850477087108.roa
File:                     98aca797-6859-3a76-9226-850477087108.roa (raw, json)
Hash identifier:          QTVOqqm7/ah1Jz6LkobgDTVrpTOV4oy6W63FTjJHZzs=
Subject key identifier:   18:51:85:92:36:76:77:5A:97:3E:5E:F8:35:C3:C9:CC:FB:83:2F:42
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848424AD4C16913A698B0E45180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98aca797-6859-3a76-9226-850477087108.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     212238
IP address blocks:        206.123.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d4:c1:69:13:a6:98:b0:e4:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=b8218a5d-8e94-4a3e-bf8d-4ba34826ef44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:0f:9e:ee:de:31:98:e5:ae:16:92:6c:9c:
                    2a:77:5c:09:5f:e0:c5:e1:13:2c:3c:4d:a3:bf:16:
                    3c:75:11:a5:d0:18:27:18:ca:43:c9:d0:de:68:df:
                    38:8d:28:43:23:b8:9a:d0:fe:0d:77:2e:e5:d4:03:
                    d6:c6:b0:c0:08:a5:56:6f:a5:bf:cd:7b:4c:26:03:
                    27:bb:ae:ea:1a:f3:11:4f:99:cc:c9:53:ee:ac:d1:
                    17:27:74:2f:e4:8f:79:46:41:34:4d:60:a2:38:9c:
                    d6:8b:29:23:79:b5:3d:30:79:c3:f8:6f:86:92:89:
                    0f:f5:cf:4f:69:65:c2:79:04:5d:96:82:38:0b:d0:
                    f2:3f:41:47:14:7d:c5:92:42:c0:2e:a3:c1:56:93:
                    fc:35:aa:2a:88:ee:fe:11:a5:4b:40:a7:84:51:98:
                    b0:89:bc:fb:42:01:50:5c:bb:74:39:73:b3:92:4f:
                    15:fd:d3:f4:fe:eb:4e:43:f5:56:af:1e:1f:7a:99:
                    55:88:a0:e1:5e:c9:b3:2a:1a:d8:9d:33:4b:9c:41:
                    80:03:44:33:5a:13:9a:ab:7d:8a:56:fa:e8:17:71:
                    8b:7b:e3:49:44:da:21:af:e6:74:de:d9:f3:50:d9:
                    c7:b7:2c:0d:5e:e9:61:4d:a7:66:dc:7d:ad:c4:1c:
                    ab:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:51:85:92:36:76:77:5A:97:3E:5E:F8:35:C3:C9:CC:FB:83:2F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98aca797-6859-3a76-9226-850477087108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f8:36:ea:a1:17:a4:0c:2f:6e:a2:46:1b:37:64:48:7c:04:
         19:f7:a2:d1:69:35:70:7b:5e:41:bd:90:8c:fb:eb:9f:a1:64:
         0f:bf:9b:72:77:86:99:b5:21:c1:44:c3:98:41:cd:d6:ca:2b:
         cd:21:a5:e1:f9:13:2f:1d:1d:e6:8e:8b:59:1e:cb:79:c5:e9:
         dc:95:98:60:1f:29:2d:f7:d3:c1:5f:59:15:09:94:76:e4:a9:
         bd:f1:51:e4:ab:d1:c5:b8:05:0a:8d:0c:4d:b4:de:89:58:2e:
         4a:fc:a9:02:7e:52:4e:5e:74:a3:bf:e0:aa:db:01:2d:c9:28:
         fa:6c:78:66:74:40:2e:fd:37:43:00:7a:1f:fd:4a:22:db:95:
         cb:da:3e:c7:2a:81:c7:4f:ef:4a:18:2c:50:62:d9:9d:95:d1:
         62:97:7e:0d:58:60:26:27:32:93:2c:64:9c:7b:fc:80:fc:98:
         fd:85:e6:75:b6:49:af:6b:c3:89:93:38:93:fc:70:2b:38:c1:
         66:b5:76:b9:32:ad:ae:6e:c2:84:ef:13:34:a3:71:38:37:4d:
         94:6e:af:e9:d3:1b:0c:0c:5e:32:23:cc:2d:18:98:6d:41:da:
         f0:bf:93:fc:5e:c2:db:d4:c3:cc:b0:eb:38:13:2e:95:65:ee:
         df:de:cd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:13 2025 by rpki-client