Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/1f72750f-4dc6-3366-865f-2a732e2f189d.roa
File:                     1f72750f-4dc6-3366-865f-2a732e2f189d.roa (raw, json)
Hash identifier:          bXNJHadye7e/0E7HUKdxV3OTw0tAC6vasjPO2SyMGf8=
Subject key identifier:   7A:EF:84:15:60:38:E3:14:53:65:6C:2E:A6:F9:60:3A:7C:87:0A:20
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F43285848A830A7532508418B8BE1CD00
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/1f72750f-4dc6-3366-865f-2a732e2f189d.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     19691
IP address blocks:        198.37.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:a7:53:25:08:41:8b:8b:e1:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=9263f2b7-8740-46f7-8296-95222b6a8733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:8c:86:d6:fc:b0:e2:bc:76:7d:fd:50:10:
                    87:36:5f:8a:db:87:64:30:59:6f:75:88:0d:ca:92:
                    92:81:7c:da:30:ea:f0:60:c6:71:87:e5:ad:60:e0:
                    f3:d3:ba:13:47:e5:c6:de:16:bb:68:c1:c8:a7:12:
                    53:29:d1:ce:dd:28:7d:15:40:03:13:a3:6f:f8:ea:
                    cc:6a:32:ad:2a:fc:5f:aa:8a:03:e1:8e:84:6e:d5:
                    e5:83:91:0b:41:a4:d1:99:76:23:e8:c9:3b:11:04:
                    79:8c:6c:ad:ea:fb:a7:eb:82:84:d6:98:42:85:c9:
                    0b:46:5c:a4:ca:5f:9b:e4:e5:3f:05:af:79:c2:87:
                    60:e9:5a:74:d2:13:35:a4:59:e7:22:1a:d2:53:bf:
                    98:bb:ef:e9:16:c6:12:63:d6:35:8f:d9:ce:bc:b2:
                    7a:8c:28:62:a8:9a:17:30:01:68:57:fe:0e:a8:3d:
                    3c:b6:a3:31:f2:5e:7a:bf:aa:bf:a8:a6:4e:12:02:
                    d2:d4:9f:74:f5:78:8a:43:15:6a:f4:d2:c6:69:0d:
                    3c:1c:08:1b:7e:dd:e1:f8:ee:08:42:e3:55:bb:e7:
                    fa:21:8a:4f:91:f5:f3:a2:79:e9:a1:9a:29:f1:bf:
                    a9:95:45:49:c6:f6:4b:68:df:8d:05:1b:77:1e:5d:
                    30:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EF:84:15:60:38:E3:14:53:65:6C:2E:A6:F9:60:3A:7C:87:0A:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/1f72750f-4dc6-3366-865f-2a732e2f189d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e5:92:66:ba:fd:8f:02:19:3b:85:0c:4b:7a:69:23:3a:e8:
         46:81:2b:5c:a9:9a:b4:b7:f4:0f:6a:11:9d:3e:9a:93:bb:1e:
         fd:74:67:4d:cf:45:ba:90:f7:72:38:10:05:dc:a8:c5:e9:66:
         4b:2a:31:e0:5e:c6:36:7d:ea:10:60:aa:ea:b5:0e:d7:82:89:
         b4:8a:00:ad:65:6d:5d:62:60:7c:3c:5a:37:a8:0b:c6:ed:65:
         8b:46:48:94:63:7c:3a:ce:9f:af:2d:8a:41:c1:c3:82:93:45:
         fa:aa:37:aa:f7:64:c6:81:1a:19:a6:54:b3:33:c7:da:63:9a:
         0c:c5:b4:97:24:71:eb:75:d9:f5:52:f2:98:08:26:1a:40:ff:
         2d:7f:38:c3:fb:97:c3:f4:12:09:06:bc:b5:85:f8:42:35:1b:
         af:b4:52:63:4c:15:40:f2:23:0c:67:e6:40:0c:41:87:ad:2e:
         29:7a:cc:ae:05:24:60:c6:15:15:c8:c9:a0:a5:27:9a:e9:3c:
         2a:83:b4:b9:5f:8e:b8:fd:2f:1f:42:8f:04:b2:9b:6b:a7:6b:
         67:cc:22:94:cb:0f:d6:91:1a:8e:0c:d5:36:38:59:c3:97:f6:
         7b:39:7e:2d:52:8a:3a:7d:bb:3b:a3:1d:25:28:29:57:d2:3c:
         2f:c5:0e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:38 2025 by rpki-client