Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/8631463d-fa88-3c11-b8a3-266ffd71912d.roa
File:                     8631463d-fa88-3c11-b8a3-266ffd71912d.roa (raw, json)
Hash identifier:          c0ROmuSyF32x89Gt8ImNqXUzkR8zU4GZHstbifzgwX8=
Subject key identifier:   A7:03:15:49:51:31:09:38:F1:F7:DF:9D:41:80:8D:D2:0F:37:0E:6B
Certificate issuer:       /CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Certificate serial:       010D0C9F43285848E9CBF3B76660EC1F6EB137C0
Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/8631463d-fa88-3c11-b8a3-266ffd71912d.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     4226
IP address blocks:        198.91.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:f3:b7:66:60:ec:1f:6e:b1:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=f17ef421-75c1-4f82-8951-4a8932ae290a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6d:a4:9d:e8:d1:93:67:3c:10:26:87:5d:3a:
                    e4:e6:6d:03:19:ab:b9:f6:13:89:e9:12:d7:75:ff:
                    aa:e5:1c:b1:b9:95:28:58:2f:69:05:94:7f:b2:c5:
                    47:b5:c4:28:05:fd:66:b3:1f:ef:0c:64:f8:d8:0e:
                    8e:88:ea:fe:7c:52:d1:a5:ab:8b:c4:4e:73:4f:e1:
                    55:03:5a:b2:c3:e3:24:a2:d9:65:14:a6:c6:31:14:
                    52:2c:dd:f7:6f:d7:d2:c4:ab:58:0f:37:ce:ab:79:
                    07:6b:4b:39:01:59:b5:de:23:33:95:5b:ad:14:da:
                    26:e2:b0:8a:7a:c9:fa:1e:5a:62:85:8d:14:70:bc:
                    0f:18:23:d9:e9:53:9e:82:cf:9c:ad:f3:1c:0b:0e:
                    38:da:e9:bf:f3:c2:42:c4:e7:7c:56:15:6a:36:85:
                    5c:8c:65:87:0a:09:d1:89:62:7d:77:74:54:81:31:
                    c9:64:23:39:7a:00:7e:30:08:1b:a4:ae:aa:60:68:
                    25:1d:94:f0:9f:30:47:6a:63:ba:a3:25:23:a6:f6:
                    63:be:85:73:ff:e7:b2:65:b3:86:ac:cf:1a:4a:9e:
                    16:e7:03:15:f0:f5:44:cd:32:59:bd:4b:c1:74:5e:
                    58:84:07:6b:34:fc:19:f4:cc:f6:88:a5:d8:b4:3f:
                    1a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:03:15:49:51:31:09:38:F1:F7:DF:9D:41:80:8D:D2:0F:37:0E:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/8631463d-fa88-3c11-b8a3-266ffd71912d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl

            X509v3 Authority Key Identifier:
                keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.91.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c0:e8:a4:2f:99:3b:33:e0:c9:1d:1c:69:7e:c8:c7:14:76:
         17:19:eb:67:3f:76:b1:66:42:88:6c:a8:e3:88:ec:a3:6d:18:
         18:f6:1e:f2:0e:98:65:37:de:7d:e8:96:90:6b:a5:f9:2e:00:
         de:45:08:2e:e1:f2:d4:9d:74:53:3f:12:c0:b6:f0:a4:1e:d9:
         2a:bb:f9:94:13:47:09:93:ec:5a:51:a2:6f:a5:85:69:3a:07:
         0f:66:bb:44:34:7d:c0:87:26:91:00:be:c1:3a:b8:ef:8d:bd:
         3f:eb:3a:e9:18:8d:6c:1b:2b:ea:f3:0e:8c:dc:b0:2b:64:90:
         37:f9:fc:25:5f:b9:b4:e2:be:f0:f2:e6:18:a4:f1:04:e3:3a:
         99:d7:e4:ea:47:97:53:f8:4c:ee:d1:7a:b8:bf:28:10:a9:e5:
         b6:bc:b6:45:8c:b9:49:5c:f0:99:1e:de:23:fc:56:aa:95:cd:
         f0:36:34:58:bf:ac:5c:87:8f:a4:b1:b0:41:4d:eb:73:cf:0f:
         c8:85:16:f2:03:6d:23:59:db:ff:b0:bb:e8:84:c4:5c:2a:ed:
         1c:87:f1:e3:ca:b1:ac:38:31:7d:00:75:a7:68:84:10:dc:8b:
         5f:9d:58:3c:e1:6b:7c:e0:a8:b4:6d:14:e8:aa:ab:73:aa:67:
         03:cf:57:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:28 2025 by rpki-client