Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/433b0601-bb90-3026-88b7-f6d5aa383782.roa
File:                     433b0601-bb90-3026-88b7-f6d5aa383782.roa (raw, json)
Hash identifier:          UbRhnf4DUmbjlElqruwlvzyUrT0jjn2Nyq0B5YhRXxc=
Subject key identifier:   08:63:A7:C2:BA:FD:23:74:85:AC:BD:6E:32:03:21:08:3C:CE:87:33
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285848A13629ACAAC96E277F737B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/433b0601-bb90-3026-88b7-f6d5aa383782.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     22773
IP address blocks:        24.249.122.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:29:ac:aa:c9:6e:27:7f:73:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=740be7f8-c548-4556-9c72-e0122b40ab7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:cb:da:f7:96:bd:5f:e3:ed:da:ce:f4:61:
                    8e:9d:2a:1f:89:5c:82:53:3d:5b:68:22:66:dd:71:
                    27:59:df:df:b3:a3:ca:d6:76:f4:10:34:04:46:93:
                    db:73:30:63:95:df:34:1f:c7:88:11:15:21:3e:e5:
                    c6:dd:70:36:0c:fe:de:7a:bc:56:d0:4c:e9:95:cc:
                    92:7f:51:7d:64:33:0d:08:58:fe:47:65:82:38:b5:
                    36:4d:63:2b:42:08:bc:fe:8b:d4:fc:52:a0:b0:89:
                    e2:cf:33:02:68:0d:13:44:52:03:25:6e:22:4b:60:
                    88:a9:c2:d1:e0:84:9a:41:16:63:5e:57:2a:59:60:
                    37:43:dd:93:dc:12:7a:ad:6e:f7:1e:48:df:3f:63:
                    7a:78:2d:41:5c:b1:7d:ce:bc:d1:eb:15:36:e4:f3:
                    c1:7e:8d:a0:41:b6:b3:91:8c:f4:07:94:13:ed:7c:
                    52:11:d9:53:85:56:af:9d:14:c9:a8:8b:38:7a:91:
                    96:71:64:83:a5:0b:04:9d:d1:ce:f4:be:64:df:ef:
                    77:77:0b:5e:a2:34:ae:78:01:f8:c5:18:19:e0:73:
                    08:c7:b2:cb:3d:6f:a6:e3:68:2e:60:b1:a1:1a:94:
                    ad:ce:f0:6d:f6:4f:7c:e4:82:99:21:8d:22:ea:09:
                    39:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:63:A7:C2:BA:FD:23:74:85:AC:BD:6E:32:03:21:08:3C:CE:87:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/433b0601-bb90-3026-88b7-f6d5aa383782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.249.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e3:65:45:2d:12:d6:c2:bb:30:94:ad:db:06:49:9f:b5:82:
         d8:de:3a:31:db:57:f5:89:52:11:0e:ce:fd:9d:52:63:77:41:
         89:ed:57:68:ac:81:a2:3f:8e:8a:49:d3:37:b8:b2:41:73:9b:
         f3:28:04:2e:f1:d8:40:e5:3f:9b:b3:6c:bb:5a:2f:b9:7e:fe:
         19:db:70:1b:17:c4:60:5e:d8:ee:63:90:5a:1a:fb:f8:ca:48:
         b8:d1:bc:1b:15:1b:81:2b:ae:36:cf:b8:b2:d6:df:15:6b:48:
         3a:35:6e:82:fc:3e:f5:b6:40:89:07:00:71:29:f8:de:33:73:
         35:37:f6:ea:16:b7:de:66:97:e4:ef:60:a8:2c:e8:7d:51:a5:
         9d:9d:e2:5a:98:b7:72:19:91:fa:e8:a4:ea:e9:d6:5c:0f:3b:
         b4:f1:60:dc:14:d6:4f:41:f9:40:a3:f6:d5:69:a2:80:50:12:
         31:0a:f9:63:8e:67:a6:f0:06:05:16:9d:4d:ea:fb:5b:e8:28:
         f5:2d:ba:6c:cf:51:60:79:0f:d5:ec:72:d2:da:13:46:0a:df:
         a3:fb:d4:33:5a:db:1f:e1:82:c0:8a:ff:10:a8:81:2b:51:10:
         e3:7f:29:c2:6c:31:3a:60:23:da:87:93:2d:c7:8d:34:79:80:
         71:9f:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:11 2025 by rpki-client