Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/83ddce50-be55-3d3a-bc5d-6548146ba65c.roa
File:                     83ddce50-be55-3d3a-bc5d-6548146ba65c.roa (raw, json)
Hash identifier:          AolqxsJCLE940ojvWfqnJE3FYyXQGkA0o+Y4tDWNcNM=
Subject key identifier:   A1:A9:AF:21:0C:50:52:43:09:7E:78:91:C2:4A:C0:B8:A3:E4:1B:A8
Certificate issuer:       /CN=a53fdc95-c8c9-48c3-9010-cc1f2d376ed5
Certificate serial:       010D0C9F432858489075EDE5FA7FB87614A61A80
Authority key identifier: D0:81:2A:DD:0B:1B:D3:29:DC:77:D8:1C:F1:B9:A2:22:84:36:CD:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/83ddce50-be55-3d3a-bc5d-6548146ba65c.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     32413
IP address blocks:        199.83.112.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:ed:e5:fa:7f:b8:76:14:a6:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53fdc95-c8c9-48c3-9010-cc1f2d376ed5
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=5f37bb16-e69a-4b8b-b7c5-5b7fd729c78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8b:1f:4f:0d:0d:14:6a:5c:9b:6a:17:7a:ed:
                    1e:3a:cb:db:a0:ab:22:bd:1b:98:87:7d:94:05:c5:
                    31:26:45:4c:d8:09:66:6c:18:a2:18:65:09:4e:6d:
                    f9:b6:58:dc:3d:af:e2:58:13:cb:b9:4a:44:0c:b2:
                    f0:a8:e7:df:1a:94:a8:86:64:c9:c3:b2:c0:41:27:
                    a3:f0:22:bc:ad:7b:cd:32:ea:6d:62:ba:9d:00:ee:
                    3a:1a:55:66:6f:41:53:b8:d6:d5:11:cc:aa:43:d5:
                    35:7e:7d:cf:e5:14:a7:10:dc:34:44:60:b0:58:45:
                    54:07:65:98:4d:6a:7c:7c:69:85:81:3e:b9:87:db:
                    f0:aa:4b:a5:ad:41:ff:54:e1:38:80:61:68:40:8b:
                    0d:2f:79:62:8f:b1:69:ca:52:09:90:c0:93:23:55:
                    8f:99:1e:b0:61:47:79:e8:52:ad:9a:c0:55:bb:4a:
                    64:1d:80:10:c2:fe:62:db:9a:fe:64:8a:f4:36:61:
                    a6:6c:48:88:bb:55:12:2b:3b:e5:de:ce:5d:92:c6:
                    96:a5:b2:35:df:73:26:74:a0:a8:2f:26:db:e9:1d:
                    f0:e6:b4:bd:78:26:b0:94:00:3b:18:bb:40:cb:c5:
                    38:b7:13:38:96:ac:9f:db:ac:92:39:c3:f8:69:f7:
                    bf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A9:AF:21:0C:50:52:43:09:7E:78:91:C2:4A:C0:B8:A3:E4:1B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/83ddce50-be55-3d3a-bc5d-6548146ba65c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.crl

            X509v3 Authority Key Identifier:
                keyid:D0:81:2A:DD:0B:1B:D3:29:DC:77:D8:1C:F1:B9:A2:22:84:36:CD:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a53fdc95-c8c9-48c3-9010-cc1f2d376ed5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:39:00:1e:71:7a:fd:c1:29:74:08:00:52:64:75:38:d6:f2:
         9a:3b:a2:f5:dc:9c:c1:db:aa:b9:bd:87:2c:4a:4e:91:c2:0f:
         03:1b:4c:67:62:45:e4:5f:ce:f7:bd:af:e4:0e:48:15:4c:94:
         8a:a0:e3:12:7a:af:15:bb:65:28:6c:71:30:d7:ae:8f:e8:d0:
         67:72:4d:02:f3:20:12:52:b6:79:ab:61:95:16:62:4f:b0:f2:
         c4:4e:a2:23:be:8b:73:7b:c5:44:e4:9b:a4:b9:ea:a9:f4:03:
         17:c2:b9:3e:84:62:b0:23:9e:91:b9:9f:70:d7:da:36:6e:69:
         85:9d:3f:c5:c6:31:62:5a:f6:f2:75:39:47:bc:f5:2e:c7:20:
         b5:e8:88:f8:e0:ed:59:d5:58:83:69:5b:81:c3:df:3c:eb:18:
         1a:22:3c:20:46:f8:59:56:11:cf:fb:94:93:92:00:98:01:4c:
         44:64:38:e5:96:62:39:b3:a3:8f:f1:5b:d4:fc:7e:39:36:67:
         e9:53:cf:60:6f:10:d3:23:01:ad:de:e0:99:c8:5e:34:e9:19:
         63:cc:5a:dd:a9:89:1c:76:1e:40:92:5d:64:f6:7c:85:95:43:
         ec:c7:a8:83:97:d1:5d:2b:f7:80:9d:c4:a9:33:e6:ca:6f:e5:
         1d:f6:72:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:07:55 2025 by rpki-client