Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/e623ee2c-f18b-3bb4-a50c-d9feffc64443.roa
File:                     e623ee2c-f18b-3bb4-a50c-d9feffc64443.roa (raw, json)
Hash identifier:          OXCJ005pzSdnlYlOwWNG28+wCPKcsoF66xgWOPO7aQI=
Subject key identifier:   66:18:CC:DF:CA:F6:11:3E:F3:F0:E0:43:3C:69:D6:B6:3D:AD:E3:DD
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584950F95CD9FAD79EA3FD3969C0
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/e623ee2c-f18b-3bb4-a50c-d9feffc64443.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     19691
IP address blocks:        198.37.57.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:5c:d9:fa:d7:9e:a3:fd:39:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=a776fadf-9e5d-49ee-bfd7-0ad23ce0ff22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:e1:ac:9a:95:db:c2:0a:26:53:45:ed:6e:
                    c2:2a:71:12:37:da:ef:d8:8e:fc:18:4f:37:7f:6c:
                    53:c6:09:b1:1d:35:24:ec:19:7b:e9:3e:15:3d:5c:
                    04:60:14:7b:f9:d9:5c:70:0e:99:19:6c:9b:00:7c:
                    31:1a:c7:38:e4:db:56:e4:84:8b:c4:8c:2d:ad:e3:
                    0e:85:89:1a:34:a6:e0:5d:83:64:8c:20:37:5a:a7:
                    35:a0:06:6c:06:fe:d3:35:d1:4f:cf:49:c4:3e:f6:
                    fc:de:a1:71:d4:1b:75:4b:61:68:8f:44:fd:05:f1:
                    b9:cb:19:f5:27:e3:1b:44:11:23:9b:48:e9:e4:6f:
                    0f:d5:56:76:58:d0:9a:e2:17:9e:9c:73:c8:c1:72:
                    36:60:d3:fa:13:eb:5a:f3:fa:13:cc:b6:30:4c:b3:
                    9c:74:b2:a8:3e:c2:a3:3d:1d:5f:b3:e9:38:46:ba:
                    ed:95:85:f5:28:4a:b7:8d:b3:9c:24:77:45:e8:35:
                    44:0f:91:8b:d4:bc:f2:94:ad:a7:2f:42:4b:97:92:
                    83:e7:34:eb:38:00:cb:6d:0a:c0:de:73:bf:bd:5b:
                    e6:8f:77:d8:15:b9:44:94:8c:c1:e3:78:7d:ec:1d:
                    bd:74:32:dc:d1:aa:ab:20:e6:77:05:1a:24:e7:7e:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:18:CC:DF:CA:F6:11:3E:F3:F0:E0:43:3C:69:D6:B6:3D:AD:E3:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/e623ee2c-f18b-3bb4-a50c-d9feffc64443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:27:69:dd:45:a9:72:1e:cb:9d:1d:ec:0f:63:58:fb:9a:be:
         0e:78:22:76:f4:71:28:bd:c6:42:8b:2a:c3:31:5f:d0:cf:1a:
         60:03:56:e4:e2:3f:12:00:10:23:da:a0:5b:8a:1d:67:c7:a4:
         5c:25:ac:db:99:83:88:25:2a:27:5a:93:ae:6f:61:b8:7f:7c:
         08:9e:70:9b:38:2f:e3:d8:6f:3e:ec:52:81:1d:f1:5f:ea:c6:
         b2:60:50:33:0a:ab:cb:89:59:07:ef:2f:5c:43:dd:61:e0:11:
         8f:ed:6c:e6:9e:53:28:75:b6:db:21:4a:8d:65:5f:29:88:5d:
         c8:fd:d2:33:a7:0e:20:f5:fa:1b:3b:bf:b6:ac:a4:8b:94:ff:
         8e:6b:8a:08:ea:75:93:52:0b:b3:82:42:3c:d2:da:78:d1:97:
         47:30:9b:5b:c7:b5:4c:42:23:73:20:c2:3a:4c:bf:64:db:4e:
         f2:49:91:45:93:e6:91:f0:22:e7:87:2d:96:ab:d9:f7:c2:ca:
         44:8b:cf:57:ee:a3:13:a9:bb:ec:64:7f:f8:29:6c:c0:51:c4:
         45:9c:70:30:9c:22:6a:16:fc:4c:84:1b:68:a5:88:5e:c7:5a:
         58:16:5a:2b:45:70:3a:3b:03:96:df:32:30:d8:3d:d8:21:9a:
         cf:12:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:10 2025 by rpki-client