Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bc96c6ca-8690-3363-938c-5b04183f6c29.roa
File:                     bc96c6ca-8690-3363-938c-5b04183f6c29.roa (raw, json)
Hash identifier:          F0U41fo5vq8YCRnxuEy0kHgwzt4lWdbGcnhK8PY9Nuw=
Subject key identifier:   92:1F:58:1C:07:2F:B0:A5:6D:A2:19:BD:58:B1:F9:7C:DC:5B:C2:EF
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848BFEBC8B6C56CDBCE9938E580
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bc96c6ca-8690-3363-938c-5b04183f6c29.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36492
IP address blocks:        136.22.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:c8:b6:c5:6c:db:ce:99:38:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=42461307-5b98-4d3e-bcd1-e5fe286fed35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b3:39:73:54:d5:bd:05:17:9a:87:a3:0c:af:
                    29:f0:80:4f:08:f8:d3:bb:90:15:be:ba:a8:00:5a:
                    7f:b0:8f:00:6d:61:e3:b3:22:f9:2d:7f:d9:7e:a6:
                    da:9b:16:32:e6:23:8f:f5:f1:46:16:8f:a7:b5:89:
                    0f:4b:b8:4a:d3:ce:03:43:85:5c:13:d0:8d:db:ff:
                    8c:25:35:38:11:2c:ce:b6:e5:fc:99:19:eb:67:3e:
                    bb:a3:4c:cb:f6:5c:61:5a:72:0d:99:2c:bd:87:39:
                    cb:e3:7a:7b:7a:b5:6b:75:38:0f:76:43:28:97:3c:
                    d8:7e:16:59:4c:cd:f3:24:1c:b7:90:cf:61:0f:dd:
                    e0:eb:5f:41:84:57:d7:4a:e3:0d:c9:14:6a:83:d2:
                    09:94:c5:2a:3e:e0:50:5c:d0:dc:0b:06:36:3e:a8:
                    42:bc:70:0e:fe:4a:48:71:a8:27:96:7b:8a:79:a2:
                    e9:85:71:a8:3a:02:6e:fc:c4:57:29:bf:b6:25:b9:
                    64:1d:5c:39:02:22:0c:a0:ac:a1:38:20:c6:9e:33:
                    9f:16:41:57:9e:e0:2e:ff:8e:29:07:54:c2:52:91:
                    b2:8d:10:92:15:bf:9b:31:58:18:7a:8a:60:f7:68:
                    71:4f:24:3e:f7:af:dc:05:5f:7f:be:a4:10:31:34:
                    9c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1F:58:1C:07:2F:B0:A5:6D:A2:19:BD:58:B1:F9:7C:DC:5B:C2:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bc96c6ca-8690-3363-938c-5b04183f6c29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d8:a6:22:28:b7:7e:d8:5a:2e:bb:4c:b5:d0:4f:51:05:48:
         3e:f7:55:01:1d:f4:81:62:a0:d7:4f:70:15:3f:69:ba:04:0e:
         05:dd:15:89:07:08:5b:8c:0b:fa:9e:30:c7:aa:43:c8:87:be:
         af:5a:64:d5:f2:d6:2a:1b:3e:82:7c:a3:aa:81:b9:b0:3b:23:
         30:d5:d5:cf:ab:ad:24:43:33:62:ea:3f:1e:c1:d7:e6:75:53:
         57:40:9b:60:30:30:ad:d6:41:17:40:40:f0:66:09:59:a3:78:
         5e:99:94:c0:aa:d1:58:cf:ce:d2:c6:25:72:6f:59:7b:38:ac:
         fb:e0:c3:39:64:b9:33:74:ac:36:1e:36:49:e1:9a:79:e3:e1:
         89:bc:3b:a2:1c:96:0e:a3:23:4f:d8:21:3b:bd:3a:39:77:b4:
         d1:e1:88:10:5c:94:31:0e:6c:38:f7:94:31:5a:09:66:fb:a1:
         07:47:57:c7:07:7b:e9:c8:af:f8:0f:68:cb:73:b5:44:07:76:
         85:9f:d6:4d:e4:e7:c5:0c:1f:74:26:ff:b2:3e:51:e2:b8:84:
         b3:68:27:ab:94:5d:a0:02:35:e5:2a:a3:f3:ef:ca:6a:85:c4:
         90:fa:6d:24:d2:42:7d:e6:a9:16:f8:8e:82:a3:51:b2:54:0b:
         cb:c7:07:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:29:53 2025 by rpki-client