Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1/10c08187-58ba-3d39-a5bc-b6a8bc27b491.roa
File:                     10c08187-58ba-3d39-a5bc-b6a8bc27b491.roa (raw, json)
Hash identifier:          Racj70DgV815gPbqXMFACuJMovIQPilB0bkMO6ABCsI=
Subject key identifier:   CA:33:26:F5:BB:82:4B:51:CC:0E:A7:2A:45:C8:41:4B:40:09:46:2C
Certificate issuer:       /CN=05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1
Certificate serial:       010D0C9F43285848CDE11803B6D932B67A4CE8C0
Authority key identifier: 48:BC:0B:D5:56:37:94:C6:10:57:FD:81:87:A9:BA:22:15:18:D4:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1/10c08187-58ba-3d39-a5bc-b6a8bc27b491.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        199.116.186.0/24 maxlen: 24
                          199.116.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:18:03:b6:d9:32:b6:7a:4c:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=fc2a95f2-039d-4923-a2b7-f7abc5ec4645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:41:2d:0e:d5:2f:9c:97:f6:c5:63:04:2a:5e:
                    1d:85:8b:dc:a6:96:f4:a8:5a:f0:79:4b:a8:34:78:
                    ce:78:ee:9e:c9:b7:67:c9:cf:fa:7f:f5:35:1e:7a:
                    f6:53:d3:c6:2e:8b:39:0e:fe:f8:30:71:87:4e:93:
                    de:c9:9d:fd:0d:36:21:04:0a:7c:71:3b:48:fc:a0:
                    98:ac:c8:f4:8d:cc:6f:0e:4e:5f:fc:36:25:9a:7c:
                    79:a5:74:e0:60:0a:06:e8:97:ef:0e:6a:50:e6:51:
                    48:91:86:87:e1:5f:82:3f:84:40:3e:36:54:31:3c:
                    37:8f:91:7a:2b:ac:75:b7:7f:d3:c7:99:18:b4:11:
                    22:ab:08:2a:ab:11:4a:79:c8:35:04:68:60:d1:4f:
                    d5:1c:2e:59:91:41:fb:75:ea:ef:d2:b1:1b:09:20:
                    5c:ec:fe:17:ca:dd:aa:5b:a4:fd:75:2b:32:7d:f5:
                    63:3f:c8:d4:d6:e5:77:78:1e:64:8b:50:ef:79:c8:
                    3d:a4:38:2e:f0:3e:b7:14:e0:ff:ba:88:b8:33:08:
                    50:8f:38:2c:65:f0:8e:54:98:bb:8a:10:c0:9e:07:
                    40:31:38:ea:85:15:12:ee:6e:82:64:d6:6f:5e:c9:
                    03:9e:10:ee:c5:7e:e7:3e:b9:8a:30:5f:a5:2d:69:
                    16:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:33:26:F5:BB:82:4B:51:CC:0E:A7:2A:45:C8:41:4B:40:09:46:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1/10c08187-58ba-3d39-a5bc-b6a8bc27b491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1.crl

            X509v3 Authority Key Identifier:
                keyid:48:BC:0B:D5:56:37:94:C6:10:57:FD:81:87:A9:BA:22:15:18:D4:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/05ac0c03-6d66-4bc0-b9a2-c0fd7eac00b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.116.186.0/24
                  199.116.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:d0:81:b9:31:16:74:2d:8f:e3:aa:cb:cf:da:5a:bc:c0:19:
         e9:5d:a6:8d:53:cc:b3:4e:b5:ea:1d:36:50:79:0a:33:47:f7:
         97:39:a7:c2:a3:8d:85:8b:75:25:ce:4c:40:0a:29:f6:44:13:
         e3:d0:00:ee:dc:0b:3b:de:19:ee:73:18:32:22:9c:39:94:3a:
         9c:bc:26:6d:23:5a:ae:cb:65:77:71:2d:74:f5:53:16:28:a1:
         a2:4d:fb:e7:95:c3:d0:19:06:2f:b9:c9:21:ce:85:7b:2f:4e:
         7e:7a:12:f1:22:e0:a3:24:98:e5:dd:74:0c:2c:67:56:b3:b7:
         23:c9:3f:43:26:c2:81:60:15:e6:37:75:c5:a8:3c:dc:57:8a:
         81:41:40:ed:ae:19:a8:82:0b:af:08:6d:42:e2:cd:12:9c:da:
         6d:97:f5:7a:c2:fd:0b:7c:4a:13:1b:5f:b0:7b:2d:a9:da:e6:
         71:02:5b:94:14:9e:70:d8:c5:eb:ab:1d:2e:ff:3a:28:4f:0f:
         7c:e1:20:41:86:85:7f:42:db:21:27:0a:5b:8d:d2:aa:69:0a:
         b4:19:b9:d7:4e:bd:af:fe:2b:2e:cf:39:fa:3c:78:54:d5:ab:
         f6:4c:5d:90:1d:5a:3a:85:cf:a0:9a:b4:6a:33:c0:50:f2:43:
         31:a6:45:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:39 2025 by rpki-client