Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/55f7f461-f4c5-3792-bb36-685977464485.roa
File:                     55f7f461-f4c5-3792-bb36-685977464485.roa (raw, json)
Hash identifier:          QIsLRbxHOAbYbbGXmqR1f7jXWn1qQxpDwxBcSfCtgF8=
Subject key identifier:   2E:FB:5C:42:87:C0:6A:29:0E:25:5D:73:79:17:86:3C:75:FF:A5:63
Certificate issuer:       /CN=6c19ecdd-eda4-4041-9b92-0ac7a99fc631
Certificate serial:       010D0C9F43285848BBBB6B632D9046313FF418FF
Authority key identifier: E2:16:05:3D:59:79:3C:06:9F:1F:5D:37:57:BF:DF:69:62:35:DD:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/55f7f461-f4c5-3792-bb36-685977464485.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     397335
IP address blocks:        198.169.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:6b:63:2d:90:46:31:3f:f4:18:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c19ecdd-eda4-4041-9b92-0ac7a99fc631
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=2d65d2f4-d8f8-461b-9efb-59d57e1115b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e8:03:fe:29:13:fc:17:02:40:fb:cc:e8:22:
                    95:a7:f2:98:e5:bc:b0:d7:fd:35:f0:01:0c:1a:e6:
                    ba:d2:a5:92:6d:2d:f6:04:cf:de:56:4b:1e:b0:5b:
                    2e:25:23:69:00:a8:92:09:ca:d8:03:de:f2:0e:b8:
                    32:42:fe:a1:98:ea:cd:35:0c:a8:05:a2:11:9d:e9:
                    4c:6b:b2:9b:1c:c1:37:65:f2:08:46:b6:5f:16:65:
                    e8:9c:f7:73:fa:58:a7:78:ac:27:94:b0:fc:ab:d1:
                    22:d3:fd:ad:6d:b0:d8:76:c3:98:74:5e:16:c0:7b:
                    ec:05:da:1e:25:88:7c:ac:5c:15:2d:6e:87:73:1c:
                    de:82:74:63:0b:0f:80:dd:74:08:ea:78:d0:5c:e7:
                    ba:31:14:6f:50:6a:a5:3c:ce:b0:28:bd:49:a4:ef:
                    d8:c3:26:75:6a:0b:25:80:1b:89:bd:13:8a:97:61:
                    10:14:9c:5d:9f:ec:f4:54:af:7b:8f:d7:03:71:ce:
                    c4:28:ce:98:d5:80:88:7d:f2:10:0b:e8:66:d2:bb:
                    96:42:cd:4a:8f:aa:19:47:92:54:31:f1:19:06:95:
                    c8:2e:db:df:5e:10:d4:91:ea:25:24:65:02:ac:77:
                    01:d8:6f:e5:d8:85:d3:29:ef:88:93:43:b0:28:ca:
                    3b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FB:5C:42:87:C0:6A:29:0E:25:5D:73:79:17:86:3C:75:FF:A5:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/55f7f461-f4c5-3792-bb36-685977464485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.crl

            X509v3 Authority Key Identifier:
                keyid:E2:16:05:3D:59:79:3C:06:9F:1F:5D:37:57:BF:DF:69:62:35:DD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:b5:09:04:a5:ef:27:96:ce:0e:d7:3b:25:09:e9:51:fa:a2:
         dc:a1:19:e7:49:36:6d:75:2f:66:42:4a:f5:d5:dc:06:ba:59:
         16:1e:a5:e9:a8:26:a6:26:da:75:47:2e:e5:34:38:8c:e6:1e:
         f1:71:1d:d7:d8:8d:c1:ef:8e:4a:a3:82:be:2e:a3:02:7e:5c:
         dc:69:66:9f:15:0f:e0:b8:ac:35:3b:47:02:40:b6:91:f3:75:
         73:2b:7f:bb:b1:28:7f:9c:fb:c9:be:1c:06:f1:c3:27:70:86:
         56:ba:f8:9e:65:00:a7:4d:9c:6b:ca:7b:1f:3b:48:b3:2f:23:
         da:e0:bf:f7:6b:5c:77:bd:6b:78:5f:69:fe:92:fd:11:02:d5:
         38:ec:3c:a1:35:61:3c:a6:90:74:09:37:f6:12:52:89:c5:cc:
         c8:49:ce:fa:cc:6c:ec:cd:f1:4a:42:de:cf:b4:1b:0b:25:0c:
         5e:d7:00:41:5a:d6:4e:2b:ca:01:71:b1:6f:47:12:e3:75:28:
         b5:d5:94:ed:8b:98:64:82:26:bb:bc:08:b9:0a:de:9d:21:af:
         4d:b1:50:6e:d6:41:1b:b8:07:ff:c2:31:73:aa:c6:51:5b:0a:
         51:0c:0d:88:71:e6:e0:d7:0f:80:14:4e:2d:d3:23:1f:53:b0:
         4b:6a:e5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:19 2025 by rpki-client