Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ce2e64b1-1e8a-3ce9-b051-05e944a896e0.roa
File:                     ce2e64b1-1e8a-3ce9-b051-05e944a896e0.roa (raw, json)
Hash identifier:          +1FGa9As7d1I/W4X+51o1aKNU06HTZ4xBOnn8bUprqI=
Subject key identifier:   29:31:09:02:CB:97:1E:33:E3:07:E6:08:08:EE:F8:5C:DF:6C:DC:FA
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858487847A3EA3B1ACBBC7C77D080
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ce2e64b1-1e8a-3ce9-b051-05e944a896e0.roa
Signing time:             Tue 07 Jan 2025 22:08:14 +0000
ROA not before:           Tue 07 Jan 2025 22:08:14 +0000
ROA not after:            Mon 07 Apr 2025 21:08:14 +0000
asID:                     47890
IP address blocks:        192.190.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:47:a3:ea:3b:1a:cb:bc:7c:77:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jan  7 22:08:14 2025 GMT
            Not After : Apr  7 21:08:14 2025 GMT
        Subject: CN=53044310-1e95-4ebb-bc05-3f329830af9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:52:76:e7:b9:79:47:2f:77:87:7c:e6:22:72:
                    f2:b1:0a:3c:ad:56:e2:c1:11:1e:58:2d:61:fa:b7:
                    f9:20:82:36:08:20:f1:93:47:63:96:fc:91:a6:7a:
                    65:5d:6b:48:3c:1d:31:b3:03:ac:8a:ec:91:1e:95:
                    c1:7e:93:9a:5d:d4:13:24:79:35:c5:de:6c:ef:40:
                    92:a0:fb:ec:22:7c:eb:37:43:b4:ad:0e:35:f8:ab:
                    ff:85:a3:27:87:23:bb:e9:0d:77:17:eb:d9:1d:2d:
                    f9:f4:43:af:d1:9c:b8:d1:70:0f:ac:12:72:fe:d1:
                    53:80:5e:ca:6d:46:84:8b:51:9f:1b:a8:85:d1:70:
                    58:bd:66:0f:d2:0b:74:78:cd:2f:5e:fd:b6:74:80:
                    a3:b4:55:6a:e9:d1:43:80:7f:46:f3:8e:e3:cb:47:
                    87:3b:23:a9:a6:5e:5c:96:8f:c7:24:78:2a:e0:69:
                    44:e9:f5:ba:c0:ac:6d:ca:a9:d8:fb:7c:fa:18:2a:
                    28:52:b4:30:b1:29:1c:32:75:43:c4:48:c6:07:b9:
                    c3:75:40:9e:53:48:b4:67:4a:1f:33:d5:ea:c5:b1:
                    4d:40:18:0d:c8:16:21:cc:ad:70:ad:d2:24:23:24:
                    e0:92:be:a1:4e:42:d6:74:a7:53:f1:83:f8:3a:12:
                    40:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:31:09:02:CB:97:1E:33:E3:07:E6:08:08:EE:F8:5C:DF:6C:DC:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ce2e64b1-1e8a-3ce9-b051-05e944a896e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:db:1c:38:4d:61:fd:a1:a5:ba:9d:dd:67:45:9b:46:7b:32:
         bd:cf:10:c3:26:4f:22:80:f9:ae:a7:57:52:cd:7f:70:ea:aa:
         20:48:fd:b1:95:55:1e:fb:57:e4:15:62:12:21:89:50:fe:a7:
         f0:19:00:d3:e2:34:f0:11:76:dc:00:ad:33:44:98:35:bb:00:
         c8:e7:f7:ab:5e:7b:b0:dc:f1:03:e7:9c:3c:73:ba:c0:4f:1f:
         d7:77:c2:b7:bf:28:85:e2:7f:a9:b8:98:5f:a0:e7:96:28:73:
         13:21:02:e4:3c:a2:01:7b:1f:fd:d1:5f:95:87:68:73:1c:7c:
         5f:35:7d:cc:6a:54:b8:35:f2:90:37:1b:1f:cf:9c:05:01:22:
         31:d1:4e:90:df:5c:d0:5d:92:6b:eb:38:c1:ff:4b:c2:df:bc:
         37:a9:84:65:de:47:57:9a:fb:23:f3:d4:da:86:08:cf:7c:e6:
         3c:77:10:20:57:02:22:6a:13:4f:f9:9c:84:5a:c9:47:1e:68:
         7f:7c:6c:4d:ab:f1:16:b5:84:0c:c2:bc:85:28:a8:22:c2:ba:
         23:7c:47:92:b3:91:46:37:70:4f:71:d3:6e:be:58:64:95:c6:
         52:44:d5:9d:b4:fd:ff:38:3e:d6:fb:8c:09:ef:a7:f7:69:82:
         86:0f:27:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:51 2025 by rpki-client