Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525/e9b9df54-da0b-3a58-930f-e5791a98bece.roa
File:                     e9b9df54-da0b-3a58-930f-e5791a98bece.roa (raw, json)
Hash identifier:          wvQTfpDHFNvYiS5xJ0q9SCS+qZRpJg2w84Mzt4168DM=
Subject key identifier:   72:3E:B4:CF:C8:22:93:6F:7E:4F:C6:76:A0:2B:8F:83:35:97:20:15
Certificate issuer:       /CN=139ae48a-9a2d-4f4b-beff-322b2a47a525
Certificate serial:       010D0C9F43285848A13619C71C7B5277A43F2838
Authority key identifier: BA:4C:47:89:BC:37:EF:1E:16:FF:1D:08:61:07:39:8D:B0:53:A2:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525/e9b9df54-da0b-3a58-930f-e5791a98bece.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     32782
IP address blocks:        199.248.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:19:c7:1c:7b:52:77:a4:3f:28:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139ae48a-9a2d-4f4b-beff-322b2a47a525
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=311c7ba7-8231-4511-9afa-64c16b013757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:93:4a:6f:0b:4a:d8:4a:b2:6e:50:ec:7d:6a:
                    63:d4:e1:c0:01:cc:54:91:26:54:3e:d5:07:eb:27:
                    16:85:99:d1:63:71:ed:36:27:b0:3c:e4:89:1d:62:
                    7f:5f:0e:f2:9a:81:4f:15:5c:44:6e:38:58:9d:2d:
                    3d:97:6b:64:cd:8b:19:79:76:e0:46:51:3d:17:c4:
                    c7:60:e9:10:f3:07:40:6b:9f:55:c0:b9:35:8c:74:
                    67:38:d2:e1:ab:22:f4:4c:37:f7:29:17:44:9c:15:
                    77:2b:2d:ee:04:3f:54:53:b3:19:e9:a6:b6:1f:5c:
                    d0:9a:79:1d:4e:69:31:0d:43:6d:d8:85:57:73:0f:
                    20:fc:92:a1:ce:6e:47:88:61:08:ec:2f:d9:28:76:
                    17:04:d8:39:45:37:f8:7e:17:78:c3:c8:46:97:70:
                    8a:c9:20:d7:13:59:57:27:be:65:63:a6:e6:20:69:
                    80:c8:4f:0e:17:e6:b3:51:23:b3:2d:be:c8:be:d7:
                    6c:a1:46:71:89:da:ec:53:0b:ae:f3:32:0f:a7:40:
                    82:c6:1c:f2:d1:cd:96:e4:d5:97:8b:81:41:89:fc:
                    a2:35:19:eb:e9:2c:c1:96:dc:c5:bc:eb:99:aa:a9:
                    8c:2d:41:2c:87:3f:96:a2:14:3f:2f:e2:8a:30:7a:
                    5d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3E:B4:CF:C8:22:93:6F:7E:4F:C6:76:A0:2B:8F:83:35:97:20:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525/e9b9df54-da0b-3a58-930f-e5791a98bece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525/139ae48a-9a2d-4f4b-beff-322b2a47a525.crl

            X509v3 Authority Key Identifier:
                keyid:BA:4C:47:89:BC:37:EF:1E:16:FF:1D:08:61:07:39:8D:B0:53:A2:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.248.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d8:1c:5b:8b:ae:29:9f:c1:ea:8b:e9:d5:8c:95:62:6d:84:
         e1:a1:2b:94:82:df:ee:32:75:48:6d:a7:08:58:d3:56:70:cb:
         8c:71:93:e2:e5:b1:1e:48:a4:d3:a7:f1:a2:bb:c5:b9:e1:d0:
         00:98:79:73:36:bd:93:c2:89:c5:0d:70:c4:c8:c0:05:dc:9f:
         1a:6e:75:1b:2c:db:68:dc:d9:79:2e:4c:85:99:8f:14:bf:e9:
         2c:b5:13:2f:5c:c9:88:f3:4b:11:05:8f:64:7b:0f:f2:5e:00:
         d0:c9:df:5f:21:7d:02:bf:a1:0a:a1:8f:c9:56:45:f9:bc:a3:
         82:07:b4:86:5d:e2:7e:a9:8d:cd:0e:78:70:a6:b2:ba:12:15:
         a9:58:df:ec:c1:39:56:bc:71:de:13:6d:bf:1a:eb:dd:6c:3c:
         23:4c:34:fc:30:00:b1:2b:e8:0d:07:a3:00:e7:c0:72:9b:46:
         7b:fb:9e:b2:32:8c:8b:fb:14:a0:14:75:32:47:3d:08:0f:4c:
         4c:0c:29:0b:5c:c6:0e:bf:7b:73:fc:9c:12:b6:d6:d2:79:b0:
         c3:ca:a6:6b:76:07:33:37:f0:6b:cc:25:44:f7:96:81:99:76:
         d0:aa:76:1c:b2:31:e3:75:0e:67:d4:3b:5e:b4:9f:e7:9d:aa:
         a5:eb:fc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:06 2025 by rpki-client