Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/ed91cb22-1490-3426-9685-bf740558dd1f.roa
File:                     ed91cb22-1490-3426-9685-bf740558dd1f.roa (raw, json)
Hash identifier:          /9yd473LKgDRpojzzZSmDXJT55WwYNlvg0svSyMjBhM=
Subject key identifier:   E4:06:16:13:E2:40:36:27:45:79:8E:7B:1F:19:69:F9:8A:DB:EA:8E
Certificate issuer:       /CN=62ec8079-292d-409a-a736-bddf9af8d979
Certificate serial:       010D0C9F43285849287E68B0CE3BF9B5C0E28380
Authority key identifier: 4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/ed91cb22-1490-3426-9685-bf740558dd1f.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     46353
IP address blocks:        199.167.96.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:68:b0:ce:3b:f9:b5:c0:e2:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ec8079-292d-409a-a736-bddf9af8d979
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=f1c20390-32ba-4165-9931-30b83f08d1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f0:90:28:e8:89:21:b6:38:78:08:10:42:a3:
                    1f:dc:51:8f:a3:9d:b7:ee:5d:f2:70:09:8e:32:83:
                    41:b8:28:64:83:91:3d:30:80:e9:9d:bd:1b:33:dd:
                    66:6b:17:13:78:4e:4a:1c:27:5d:70:fd:20:0d:8b:
                    cb:bb:c9:c3:0a:41:ad:42:56:7e:29:33:c8:6e:72:
                    d2:af:66:df:8d:10:94:9d:a1:e4:b6:be:15:9f:dd:
                    be:db:44:3e:d8:a3:df:c3:92:fd:cb:76:00:92:ff:
                    03:e4:8b:73:68:9f:d1:34:e1:ac:6e:79:b4:ce:86:
                    17:7b:8c:20:ba:cd:1f:f9:67:ad:5b:e9:e4:46:82:
                    e3:39:0e:24:dc:ee:de:70:38:26:e3:36:d3:49:16:
                    82:31:d4:41:6c:a3:27:75:17:57:3e:05:55:92:35:
                    24:09:c9:d2:9d:57:d1:d3:23:52:d5:6b:e6:59:00:
                    b5:b6:f3:c4:e7:bc:60:0c:58:33:5b:e2:47:d4:cd:
                    19:80:f4:ef:e5:42:34:39:d2:b6:30:bb:87:e7:ea:
                    5f:e8:b0:86:99:4d:62:19:f8:ee:d0:e3:2a:7b:44:
                    50:43:6e:fb:3c:bf:96:66:b8:8d:75:f0:7e:6f:75:
                    fb:14:a8:e1:7a:66:b6:83:a2:7f:09:57:df:57:68:
                    5f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:06:16:13:E2:40:36:27:45:79:8E:7B:1F:19:69:F9:8A:DB:EA:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/ed91cb22-1490-3426-9685-bf740558dd1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl

            X509v3 Authority Key Identifier:
                keyid:4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f7:e7:41:35:1f:10:d0:93:af:11:dc:80:b8:59:84:da:84:
         ee:93:29:f6:72:fd:5f:67:57:54:01:5f:a6:d4:19:db:b0:2c:
         dc:1f:72:ec:b5:2a:17:a8:c4:2a:86:cb:6b:4e:bb:31:9e:72:
         ed:1c:dc:9a:5b:67:70:e8:6a:d2:62:63:a1:35:cb:97:2a:b9:
         a0:06:39:0b:21:f3:ad:b3:2a:7f:39:70:df:29:68:a5:0a:cf:
         66:e4:e4:4f:4f:26:da:70:ff:90:b2:09:b6:c8:d2:0c:2d:61:
         eb:3e:1e:69:22:9a:9e:d5:03:81:be:90:a8:aa:26:8e:e2:05:
         07:dd:f1:f6:d7:eb:36:12:b2:e5:5c:e7:0b:07:22:de:34:c7:
         4f:84:80:3a:22:0c:e8:a4:e8:c9:3d:ef:53:ad:44:2a:c3:73:
         62:21:33:84:fe:34:49:4b:52:74:ec:e1:aa:16:85:e3:a3:a1:
         13:e4:27:57:6f:53:96:40:fa:43:cf:1c:d1:10:77:30:31:c5:
         03:35:a0:2e:9a:da:ff:42:7d:45:60:f6:94:28:7a:0c:db:16:
         92:c1:2e:93:8c:1e:0f:45:16:82:9d:d1:8b:6f:07:eb:21:94:
         3d:0a:eb:d3:61:b8:ca:73:57:c3:b0:a3:01:3b:a4:9b:b9:2b:
         81:e4:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:51 2025 by rpki-client