Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/76a56abb-5176-43f9-be40-cbfb456a1767/649e92de-96e1-3fec-ae03-07e41bf16b02.roa
File:                     649e92de-96e1-3fec-ae03-07e41bf16b02.roa (raw, json)
Hash identifier:          BXI6HbiIfVKW7rkUFz0NH7BWKOweBhjHRb/2eR5v1U8=
Subject key identifier:   1B:17:82:D4:93:B1:89:9A:B5:CD:69:EA:3C:03:0C:CE:EA:FE:8F:21
Certificate issuer:       /CN=76a56abb-5176-43f9-be40-cbfb456a1767
Certificate serial:       010D0C9F432858485C06194E1B89D5ACF5080080
Authority key identifier: 85:90:EE:99:BB:D6:87:04:C0:65:07:1F:FC:AA:8E:5F:63:44:4B:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/76a56abb-5176-43f9-be40-cbfb456a1767.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/76a56abb-5176-43f9-be40-cbfb456a1767/649e92de-96e1-3fec-ae03-07e41bf16b02.roa
Signing time:             Sat 28 Dec 2024 19:13:33 +0000
ROA not before:           Sat 28 Dec 2024 19:13:33 +0000
ROA not after:            Fri 28 Mar 2025 18:13:33 +0000
asID:                     44071
IP address blocks:        192.43.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:06:19:4e:1b:89:d5:ac:f5:08:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a56abb-5176-43f9-be40-cbfb456a1767
        Validity
            Not Before: Dec 28 19:13:33 2024 GMT
            Not After : Mar 28 18:13:33 2025 GMT
        Subject: CN=8ca7d732-affd-4289-8814-15a2c6f0afa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:49:09:a9:80:3c:35:c3:7e:42:00:47:23:21:
                    a0:60:bd:bf:ac:ab:14:5f:10:5e:17:bd:5e:b3:6f:
                    8d:48:bf:77:b4:d4:34:fa:ce:55:02:d5:e6:33:e3:
                    ff:6a:e3:6a:13:2f:82:62:2c:9e:18:38:bd:db:cf:
                    cc:35:cf:32:37:f8:e8:90:06:47:61:a1:2a:3a:b4:
                    9a:4b:f7:06:04:d1:72:24:25:6a:50:4e:4c:2d:3b:
                    10:13:d4:07:06:f9:e4:f3:58:ab:8f:bc:6d:a2:96:
                    e0:3e:70:68:cc:e1:4c:f6:fd:78:c9:e5:ac:73:ad:
                    cf:26:8a:85:b0:b6:6a:62:32:8d:d1:f1:72:28:6b:
                    34:c6:39:fc:22:8e:77:26:83:4d:f4:b2:6b:c6:87:
                    d4:43:64:3b:0e:42:f5:e4:b8:3d:7f:51:d8:0e:a0:
                    a2:2d:dc:fe:bf:73:d7:f0:f7:5c:6d:7d:69:fd:a2:
                    af:3c:08:32:39:c3:f2:bb:87:51:16:45:4c:31:bd:
                    2d:70:1c:ed:3e:af:31:ec:d2:77:dc:9f:f5:21:b1:
                    70:6c:3d:a5:6b:0c:04:96:79:f8:f7:ca:a2:c0:01:
                    d5:d0:85:84:24:f3:85:18:4a:c0:b0:fd:ef:0a:d1:
                    5e:2b:2d:dc:07:9b:e2:4d:44:01:60:28:65:6d:8c:
                    f4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:17:82:D4:93:B1:89:9A:B5:CD:69:EA:3C:03:0C:CE:EA:FE:8F:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/76a56abb-5176-43f9-be40-cbfb456a1767/649e92de-96e1-3fec-ae03-07e41bf16b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/76a56abb-5176-43f9-be40-cbfb456a1767/76a56abb-5176-43f9-be40-cbfb456a1767.crl

            X509v3 Authority Key Identifier:
                keyid:85:90:EE:99:BB:D6:87:04:C0:65:07:1F:FC:AA:8E:5F:63:44:4B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/76a56abb-5176-43f9-be40-cbfb456a1767.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:bd:6a:c4:62:e3:3c:c0:22:fb:bb:29:41:ca:20:61:de:54:
         a8:d4:52:65:fc:3e:e5:0d:57:3c:1f:17:f1:a9:b7:2e:ef:af:
         33:db:78:e9:16:53:d4:d7:16:a8:ac:1c:89:a0:62:ca:0e:3c:
         e4:9f:14:86:56:3c:6c:3a:d0:79:3c:94:61:80:e9:9a:55:2c:
         82:3d:7b:7b:0b:38:e4:1a:dd:fc:70:94:4f:3c:2c:41:22:f1:
         b5:d5:7b:2f:1e:27:1f:e0:e1:dc:57:9e:e8:b2:e9:ff:c9:64:
         cb:1b:a1:f5:74:3c:a1:09:43:0a:e6:be:4b:f4:3c:d8:10:dc:
         ac:ea:dc:7d:23:a6:f4:3b:7d:cb:48:f5:64:ce:d6:5f:3f:f3:
         dc:0d:93:bc:89:3c:06:46:88:29:f3:63:87:60:ec:d6:e4:e5:
         04:cb:82:3c:41:b3:94:07:2c:0b:09:81:89:bf:c0:e6:06:e9:
         d0:f3:01:43:29:f8:26:ed:61:5b:79:53:67:ec:d4:d1:d2:e2:
         55:3f:a8:a7:cd:76:4e:b5:e1:ee:5a:ef:c0:a8:67:7d:e1:cd:
         ba:3c:dd:85:0a:41:73:e0:fe:37:24:5f:38:f7:26:4f:64:05:
         0d:c1:57:e3:00:17:a2:4e:c2:92:74:29:69:34:62:e6:fb:b0:
         6d:37:b5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:40 2025 by rpki-client