Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49a747f2-42f5-3e97-8680-761bda3fe34d.roa
File:                     49a747f2-42f5-3e97-8680-761bda3fe34d.roa (raw, json)
Hash identifier:          ceWwnW1YxB86OeWkTIzcilqqTYipwoUqNJGuaH4km4c=
Subject key identifier:   95:F6:A3:E4:D4:B7:0B:DB:58:56:C6:1C:E7:FB:86:F1:2F:49:D0:E8
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B6261085F9C2E66031320C80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49a747f2-42f5-3e97-8680-761bda3fe34d.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     852
IP address blocks:        207.102.186.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:10:85:f9:c2:e6:60:31:32:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=c3bd74ff-be95-417a-990d-378d3ad900eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:80:89:4e:80:c2:8f:bc:c1:85:41:bb:ec:
                    28:59:ef:c1:a5:ad:36:69:e5:0d:03:64:f8:51:65:
                    cb:16:1b:d8:c6:6b:8a:9d:77:a6:51:68:5c:bc:ef:
                    f0:7e:9a:bc:47:a4:56:62:24:bf:1b:32:10:0a:ea:
                    6f:e9:04:6f:81:6d:b8:95:7f:61:46:36:65:b5:7a:
                    22:40:82:f2:97:52:ea:e5:c2:c0:fe:53:e3:a6:9e:
                    54:4c:20:f8:fa:90:cd:5c:66:07:3f:ee:d8:00:d7:
                    b7:d0:5e:33:36:f8:86:03:23:aa:35:92:95:2e:8e:
                    ac:a5:8e:e0:6f:ce:19:7a:11:68:d2:6e:77:1a:aa:
                    87:b6:1b:30:a9:35:4b:16:b3:76:b1:7e:99:c7:47:
                    1b:f2:5d:95:6b:e1:0a:47:c6:99:7d:d2:6a:2b:88:
                    13:2b:15:0f:5d:56:52:41:89:0d:e5:8c:64:f9:92:
                    a5:0c:0f:2d:36:cb:de:06:26:e5:82:c1:9d:bf:3f:
                    d2:3b:7d:15:cf:ad:f4:eb:d9:72:87:94:6b:3f:9d:
                    e1:46:4a:30:55:f6:37:73:a8:08:07:39:1e:17:23:
                    0b:7d:70:50:50:3d:e5:d8:78:ec:b6:b0:b7:19:bb:
                    41:cb:b9:fb:0d:10:bc:07:98:8e:dd:dd:22:ef:54:
                    ac:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F6:A3:E4:D4:B7:0B:DB:58:56:C6:1C:E7:FB:86:F1:2F:49:D0:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/49a747f2-42f5-3e97-8680-761bda3fe34d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f8:24:16:5b:cf:3a:a4:80:16:34:84:76:9e:44:25:79:c0:
         45:4b:41:3c:7e:30:a0:66:5a:9b:11:11:cf:f9:fc:0c:74:0f:
         c2:54:e5:a8:d6:83:86:a6:42:e3:75:2c:c5:53:2e:6f:ea:f2:
         b7:47:4c:4f:ce:0e:4f:22:d4:4c:61:53:79:40:22:99:9a:ad:
         11:96:a3:ac:e5:fc:23:1f:24:a2:57:6c:ca:da:53:c9:45:3a:
         d4:eb:eb:c7:09:8b:f5:d0:eb:ff:d1:c4:9a:78:15:9e:f9:45:
         98:83:0a:b1:59:1b:2c:ed:0a:85:d2:3e:01:2d:28:b9:39:db:
         c9:98:d6:ae:a3:01:14:e3:3d:fc:6e:a8:36:ea:68:5d:22:0f:
         16:a1:ca:9e:87:d1:3f:45:24:8b:5f:26:a7:0d:a4:34:37:e7:
         99:94:f7:75:9d:ef:8c:bf:87:4b:69:66:04:51:71:1d:e0:23:
         61:ad:78:ca:4c:e9:07:cc:4d:42:21:66:f4:b5:58:72:33:70:
         64:cd:96:74:ec:26:fa:55:76:37:b2:bf:3a:19:5e:a1:b2:41:
         2c:ea:ab:d4:cc:d1:9f:36:d8:de:ba:06:26:da:04:80:7f:3c:
         34:a2:25:8a:53:a1:ad:32:71:5e:bb:aa:4b:90:6b:d8:5d:61:
         ee:a0:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:05 2025 by rpki-client