Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2f200fa1-3761-35ab-8b55-ffa8c0606314.roa
File:                     2f200fa1-3761-35ab-8b55-ffa8c0606314.roa (raw, json)
Hash identifier:          J8aab3U6JtZ02loWLwPpaSeye7Nv5aCjQ13Kaa/oSTc=
Subject key identifier:   E8:20:A4:3C:2B:D0:46:F4:A0:87:D1:CF:EA:0C:5A:96:0F:90:DA:9B
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858487CEB2D615AD24FCBDFAE0DE0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2f200fa1-3761-35ab-8b55-ffa8c0606314.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     21859
IP address blocks:        98.96.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:2d:61:5a:d2:4f:cb:df:ae:0d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=c49ffe0c-08e4-4833-911b-539895296061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:66:b9:50:c1:68:d9:c3:d4:b3:c9:90:b1:
                    77:7b:76:16:89:fb:7d:c1:d4:c9:81:cd:5d:7d:ac:
                    e0:0a:50:84:b3:b5:33:3f:eb:27:96:7e:82:b5:b8:
                    82:3f:1a:9e:a0:5a:f4:36:4d:cd:f5:00:f7:39:ab:
                    be:aa:05:38:e0:1b:1c:a9:24:ee:17:1e:0d:58:43:
                    39:92:d8:7c:24:11:a8:f9:43:0a:a5:3e:b5:a3:d1:
                    5c:85:43:73:40:84:bf:06:73:29:a1:00:68:4b:84:
                    61:93:5f:6b:d7:03:31:c6:bd:20:08:5f:fa:0a:10:
                    1f:7d:a5:07:ba:cc:0a:f2:54:d4:92:5b:15:7b:74:
                    8f:5e:55:a0:ee:d9:55:ce:6e:d9:6f:30:9b:79:9a:
                    8a:e2:79:32:cb:21:53:a8:b2:92:aa:a5:6d:55:46:
                    da:a1:ea:db:9f:2f:75:a9:7c:53:e0:9b:3f:04:f8:
                    0a:67:ee:17:3a:90:38:14:2c:61:4a:c6:01:3f:97:
                    fe:27:71:b5:ff:6d:d1:5c:a2:e3:9f:56:1a:6c:02:
                    78:dc:3c:59:f8:31:d3:9d:e3:3b:3b:11:3a:68:ba:
                    eb:b5:ba:13:71:fc:e6:04:99:80:e6:24:c6:61:5a:
                    bf:f2:fc:b9:da:2b:ad:43:57:0a:21:76:a1:06:04:
                    ea:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:20:A4:3C:2B:D0:46:F4:A0:87:D1:CF:EA:0C:5A:96:0F:90:DA:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2f200fa1-3761-35ab-8b55-ffa8c0606314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.96.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:75:b1:dd:9e:2a:16:15:e5:21:62:07:6a:f6:94:ee:84:ab:
         04:1d:ea:5d:b1:62:c4:bb:6a:f5:bf:ff:c3:cf:21:c6:ac:cd:
         38:71:d6:75:1a:bd:fe:82:02:5d:d9:cf:87:50:0a:c0:e4:27:
         47:62:7f:96:23:b1:a6:a3:a8:09:f6:e0:27:9e:86:1a:1d:f5:
         a4:5c:41:5d:cc:1c:57:98:75:ed:4d:ff:f6:d3:ff:bf:ed:db:
         31:c1:ee:ea:43:bd:1a:89:9a:2e:16:a0:f3:6b:60:75:9d:48:
         48:47:dd:99:52:4a:32:75:99:97:32:a5:1e:41:6f:79:7e:b7:
         e7:e0:9d:aa:77:c8:e8:6d:1d:43:e6:c1:fb:7c:e0:4a:b3:7a:
         8f:26:04:a6:5b:93:ae:bd:61:ff:99:12:50:f4:b6:cd:ae:1c:
         98:5a:fe:d8:4c:67:0a:3e:38:85:a7:24:72:92:35:21:4c:4b:
         3c:f1:db:45:0e:a7:43:5c:bf:75:19:97:7d:a1:da:52:0d:e3:
         11:a5:1c:df:ce:b8:9b:31:9f:fe:9a:f8:40:b0:ad:62:ad:2c:
         37:4a:c5:59:29:ac:fb:19:c8:2c:b2:c2:d0:e9:80:ae:ce:0d:
         82:55:d7:fa:15:0e:cc:17:93:70:eb:89:a4:65:a4:81:e8:5a:
         62:4b:89:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:27 2025 by rpki-client