Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e193e347-2915-39bd-b0d9-d66b71f020a9.roa
File:                     e193e347-2915-39bd-b0d9-d66b71f020a9.roa (raw, json)
Hash identifier:          qI3f/xfGIKHdFAhWqE3GnDfQfsqRIPl8LZd4wehTwLA=
Subject key identifier:   42:7C:CF:25:6C:98:CF:58:01:FB:12:F7:7A:96:AF:CD:4E:E4:B6:77
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB5AA367E2C50F2D52F208
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e193e347-2915-39bd-b0d9-d66b71f020a9.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     202
IP address blocks:        192.85.249.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:5a:a3:67:e2:c5:0f:2d:52:f2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=90f13267-ba52-41d7-8437-fbe2497ab5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:34:1a:ed:52:be:b3:2a:05:3f:2f:43:89:cb:
                    1e:6c:40:f1:3a:d0:ac:8e:3a:7a:f1:27:ec:6f:89:
                    cd:65:c3:88:7c:d7:3b:8b:4f:ea:90:79:fe:36:c7:
                    33:b6:e4:4c:5d:8d:53:eb:d4:dd:e7:13:e3:75:2b:
                    32:65:fe:73:b0:b6:3e:a0:15:f7:08:12:a5:65:b0:
                    63:ff:bb:4b:47:8c:34:57:72:92:32:c8:ad:b7:89:
                    b6:da:a6:92:82:61:1c:88:d2:5a:43:d0:17:3d:d4:
                    6f:d8:d2:25:3c:10:a0:ad:79:d6:ba:1b:66:a4:93:
                    d4:bb:13:f8:6d:f2:c2:29:c6:d8:c0:d2:6b:30:7a:
                    16:0c:ef:81:8c:a4:ce:e6:b7:20:c7:17:9a:25:0b:
                    f9:ea:dc:87:96:96:48:b6:28:d9:7e:32:ab:38:00:
                    83:e1:a9:9b:1c:e9:7b:c8:cc:8a:87:2e:9f:bd:ea:
                    34:d9:7e:91:ab:c5:00:b5:e6:09:88:ba:eb:36:1a:
                    ea:81:68:c7:5b:3e:cf:17:3d:8a:7d:ec:a8:80:d7:
                    51:ac:ab:7d:1a:44:b3:3c:82:42:c9:93:d3:ce:79:
                    ff:f5:77:95:e7:5c:62:9c:1f:d3:d5:ae:8f:24:16:
                    49:0e:b0:d3:10:2c:94:20:05:22:4b:8e:40:5e:29:
                    e5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7C:CF:25:6C:98:CF:58:01:FB:12:F7:7A:96:AF:CD:4E:E4:B6:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e193e347-2915-39bd-b0d9-d66b71f020a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:9e:da:8b:74:10:5d:ad:7a:a1:03:3a:20:50:0c:dd:b7:54:
         09:3d:5e:3f:24:0a:3c:a8:f5:4b:cc:3f:68:c3:7e:dc:74:04:
         e4:7c:17:5a:cf:43:7a:1c:1d:5f:20:3a:d7:31:14:8a:3c:b8:
         63:bc:d9:b9:7b:1e:ba:92:57:c5:a4:9f:2e:2d:57:f7:81:f3:
         da:1e:ac:3e:ba:fe:9d:ac:10:29:73:f2:3f:d5:1c:a2:11:4d:
         53:ff:a6:53:0e:8b:f9:b7:b8:b7:9d:a5:ec:a7:27:0a:69:9c:
         99:6f:1d:31:d0:d9:67:86:ac:27:e2:aa:bc:48:e8:37:97:8f:
         ab:e6:73:c2:7f:79:df:6d:c5:49:fb:8f:ab:30:71:21:16:33:
         b5:67:d0:4e:22:91:28:de:53:39:31:56:03:cd:b3:ab:7a:06:
         bb:53:af:59:49:d2:f6:a9:24:d7:a1:f3:23:19:c3:9b:ce:a8:
         26:53:c1:f0:8c:0b:07:50:5b:82:e8:cc:46:d5:dc:98:97:40:
         91:21:7c:10:46:cb:90:45:9d:85:0b:58:4e:14:53:23:d0:c7:
         4d:d6:97:ab:5d:4b:43:26:8d:eb:54:25:23:6f:44:ae:69:f9:
         f3:2b:48:d5:34:8c:ff:6c:9b:97:a3:51:cb:a4:51:d2:ec:a0:
         d6:91:44:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:18:30 2025 by rpki-client