Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/b2b645d6-c809-3af8-b0d7-60aacb9a34e2.roa
File:                     b2b645d6-c809-3af8-b0d7-60aacb9a34e2.roa (raw, json)
Hash identifier:          NVzI7R3PqVD6CGQV9UM9GOYb0vbz0j6ESBWLd9d8xFQ=
Subject key identifier:   B9:4C:2B:72:BE:C0:92:DA:D7:38:88:62:24:74:16:B0:0F:6E:D9:00
Certificate issuer:       /CN=08e01c34-608c-4615-9e00-7b09e447bf4c
Certificate serial:       010D0C9F43285848E9CBEB8D9EE87D9DD2D97300
Authority key identifier: 4F:D7:EC:EF:A2:E3:3A:75:01:61:29:F9:45:D5:37:CF:54:EE:63:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/b2b645d6-c809-3af8-b0d7-60aacb9a34e2.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     15116
IP address blocks:        198.49.82.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:eb:8d:9e:e8:7d:9d:d2:d9:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e01c34-608c-4615-9e00-7b09e447bf4c
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=345a077f-7b9b-4a18-b1c6-092fc35bd89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:6e:46:64:4e:1f:f7:6e:6b:02:20:5c:0c:
                    af:37:10:4c:6d:e9:15:f8:96:ca:6d:a4:b3:9b:4c:
                    8a:80:b2:15:1e:ac:b6:47:ea:99:f3:a5:fe:59:62:
                    cb:30:96:20:13:d5:30:db:77:1d:b8:32:98:96:0c:
                    c6:cf:f5:12:6a:4d:8f:b2:9b:57:ef:e6:c2:dd:32:
                    d1:2d:87:7e:da:82:2b:3c:fe:7f:36:a0:e8:a3:ce:
                    1d:6c:46:c8:b0:20:05:62:55:0f:ca:07:f0:71:71:
                    04:d9:3d:75:11:a9:7b:13:a9:ad:38:14:1d:6d:0f:
                    72:bc:f9:7f:15:bd:00:03:52:04:f5:4f:7d:77:82:
                    b1:7f:ab:76:36:5a:61:1f:86:15:97:32:04:78:da:
                    27:65:c4:b4:3e:d6:98:fd:fc:9d:b0:1e:e3:b6:ba:
                    ee:55:0f:ac:d4:f3:64:2c:d1:26:a9:92:f4:87:79:
                    2b:d3:7f:08:27:a7:b2:04:39:14:3d:6c:18:2f:d8:
                    78:ae:f3:85:f7:e8:5c:a8:07:e9:bc:96:a8:20:59:
                    28:f9:7f:6f:fc:20:a4:e8:1f:93:de:33:fe:8c:b4:
                    2f:46:e5:e5:2d:f7:fd:e5:eb:99:11:ce:37:2c:5a:
                    3b:bc:30:f7:6b:8d:42:4f:95:2b:90:1d:13:3e:0d:
                    96:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4C:2B:72:BE:C0:92:DA:D7:38:88:62:24:74:16:B0:0F:6E:D9:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/b2b645d6-c809-3af8-b0d7-60aacb9a34e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.crl

            X509v3 Authority Key Identifier:
                keyid:4F:D7:EC:EF:A2:E3:3A:75:01:61:29:F9:45:D5:37:CF:54:EE:63:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:ca:35:45:23:49:0e:e3:79:70:96:f6:94:8a:44:c6:e8:41:
         f5:09:01:18:ef:4c:87:f3:57:0a:76:48:9b:78:c4:a6:d5:bb:
         49:95:03:48:fd:5f:81:59:0e:58:1e:81:b4:20:fc:b4:74:2a:
         3d:c7:1f:8d:cc:e6:a3:c0:0e:6a:25:8f:be:0a:bd:cc:c6:7f:
         ed:38:31:64:32:87:21:77:2f:ed:98:ba:3e:65:7c:c1:b0:1b:
         f4:40:24:f0:6a:50:52:a6:99:b2:1f:08:90:48:0e:81:07:9f:
         e4:08:7c:8a:5d:66:b4:0c:e4:ca:36:4b:e7:81:8e:f3:57:ef:
         77:88:21:3c:ec:47:98:4b:bd:eb:82:7b:25:78:55:18:bf:38:
         f9:77:1d:e5:65:92:33:00:6e:ed:01:b4:65:06:79:9b:7a:f1:
         bf:b3:d1:e6:0c:71:4c:39:28:3b:fe:75:6e:1d:e7:22:f9:46:
         94:68:64:fb:78:87:f1:c2:ec:2f:9c:b3:68:56:f2:72:90:1f:
         af:4d:43:07:16:11:87:6f:65:f4:f3:c1:de:ca:d3:3e:74:6b:
         45:d0:2a:f0:93:75:64:91:d1:83:fc:95:c8:36:a0:66:18:da:
         39:88:14:17:53:1b:e2:e4:98:71:26:62:1e:cd:29:b5:ca:29:
         11:a8:b2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:28:18 2025 by rpki-client