Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/50615970-ae04-394a-a9a8-55670e36eb10.roa
File:                     50615970-ae04-394a-a9a8-55670e36eb10.roa (raw, json)
Hash identifier:          UqMPfH3bsRjsNAMT82rZL7fK6rWsFYAC8I7Fb2slYus=
Subject key identifier:   5D:6D:5A:C0:00:81:37:CB:E2:E0:D6:9C:1E:1E:9E:F2:7A:EE:26:E5
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F43285848A830B5844A7BCD4B2E756E40
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/50615970-ae04-394a-a9a8-55670e36eb10.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     19551
IP address blocks:        198.37.52.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:b5:84:4a:7b:cd:4b:2e:75:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=68ad6ec0-d1a9-4303-8e5b-93b15af97874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:66:3f:5b:4a:e2:7b:5f:19:34:15:d9:39:
                    13:cb:59:52:6b:0f:f3:a6:65:f6:84:00:54:74:4e:
                    32:63:22:af:29:13:3e:a4:25:8c:ee:64:0f:3b:fc:
                    8b:49:cf:f5:85:a6:8f:1a:f8:6d:40:03:22:da:61:
                    6f:57:7d:73:6c:61:c8:8a:41:fa:4f:cb:cd:ae:cd:
                    44:a5:92:d4:67:42:dc:0d:30:52:02:ac:d9:5e:93:
                    4f:9d:dd:14:5c:f6:ab:a5:74:8a:7c:81:6d:79:98:
                    57:17:83:4e:ad:65:17:77:cf:28:05:72:74:4a:e7:
                    4d:10:50:d2:3f:4a:cb:e8:ce:1c:e5:8f:a7:c9:a4:
                    9e:8e:98:1a:6b:00:78:b8:71:6c:2e:21:66:90:15:
                    b4:26:3b:63:4f:a6:33:37:83:42:a8:fe:64:ab:f2:
                    50:e5:a3:3c:fd:04:6d:8b:83:b3:fd:2a:67:6e:31:
                    54:94:38:87:22:80:0e:9f:12:d6:ad:cf:ec:0b:3f:
                    01:fb:b9:1a:1a:ce:fd:53:4c:a5:bf:2d:2a:f7:0b:
                    82:62:80:80:3a:ea:17:48:57:89:3b:f1:4b:cb:cc:
                    70:68:a3:ff:17:7c:ac:47:42:7a:dc:18:c3:97:fd:
                    d6:55:d3:07:f8:4e:51:c6:87:d1:8e:d9:22:eb:10:
                    14:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6D:5A:C0:00:81:37:CB:E2:E0:D6:9C:1E:1E:9E:F2:7A:EE:26:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/50615970-ae04-394a-a9a8-55670e36eb10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:be:be:6d:09:d2:71:89:d4:5e:3e:93:14:47:ce:18:3b:71:
         0e:80:92:b0:3a:09:b3:49:4d:03:da:4a:f0:45:3a:2f:49:10:
         5f:66:41:6e:d4:c3:83:1c:a1:75:cd:e9:58:68:b4:66:24:75:
         d5:3f:aa:ff:96:5a:93:43:ff:f1:a5:f3:ef:e4:fd:50:ee:66:
         66:9f:86:06:fa:7c:bc:5d:c8:d9:d4:b4:4a:bb:88:04:d1:25:
         99:3d:d9:ec:d7:8f:54:be:c9:3a:4e:40:93:77:75:fc:3f:b3:
         05:86:8f:ac:08:67:90:46:9d:61:ad:bf:c8:32:e7:fd:7f:32:
         41:3e:ac:f5:a9:e3:b7:a2:05:91:ec:26:ef:76:1e:83:82:7d:
         8b:3a:ce:4b:83:87:d9:0d:43:db:f1:86:04:31:d5:61:f8:06:
         1c:03:13:a5:02:d0:84:7a:8c:57:b2:0d:94:c3:7b:1a:1c:15:
         a8:cc:83:45:9f:a8:16:ce:3a:2a:56:30:91:c4:8a:f7:43:b6:
         f1:60:c6:20:36:0f:3d:bb:b3:d3:25:08:78:d8:07:21:e8:72:
         fd:de:56:75:cb:ac:13:5e:96:ae:a2:be:c0:b4:10:03:8f:9c:
         33:a7:49:26:6a:ff:76:26:59:64:8e:08:c1:89:db:dd:a8:50:
         48:7f:82:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:15 2025 by rpki-client