Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/62c1ea0d-7118-3861-8934-424675cb644d.roa
File:                     62c1ea0d-7118-3861-8934-424675cb644d.roa (raw, json)
Hash identifier:          f+rZvj+fZMtX0LiN48KUMpHDnoUjF/I2RHQFcWMNowY=
Subject key identifier:   90:F4:41:80:25:0E:28:AF:B2:6F:41:C7:B1:4B:F8:4F:E0:80:A9:37
Certificate issuer:       /CN=0c82e125-4df5-4912-a714-101a1caa5b99
Certificate serial:       010D0C9F43285848D6410A20BD9D7F7875417A50
Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/62c1ea0d-7118-3861-8934-424675cb644d.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     396981
IP address blocks:        192.48.223.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:0a:20:bd:9d:7f:78:75:41:7a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=1b034848-b96f-41dd-8339-f080600dda45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:76:a9:7c:83:bc:0f:98:38:03:51:c5:df:
                    5d:d7:b2:08:20:b1:65:46:73:ff:1c:6f:73:6b:77:
                    8d:95:54:59:5f:f8:eb:ff:eb:51:70:5e:6d:a4:ff:
                    76:30:ec:6c:27:ae:cf:55:03:8b:76:0c:eb:78:28:
                    91:61:02:db:60:f0:07:6d:d9:c8:80:37:4f:9e:30:
                    9d:2e:1e:51:07:ec:17:f0:53:99:c4:b2:dc:8a:e8:
                    80:ff:b3:b7:bd:5e:f6:b3:99:ff:c5:7c:3f:03:8b:
                    16:cd:53:6b:7e:62:7b:97:70:d4:83:db:14:bd:c2:
                    61:39:c1:9d:99:95:14:c7:65:28:58:7a:30:e9:2d:
                    51:73:3d:87:6b:86:84:03:b6:ea:5d:30:a2:a3:d8:
                    50:c7:00:c4:11:26:e8:91:86:9d:ff:e7:4d:85:c3:
                    0b:87:78:a7:b3:15:a4:13:06:c9:dd:c8:40:83:eb:
                    69:42:d2:54:be:ff:9d:02:20:bf:14:ce:82:a5:2c:
                    52:3f:d2:d8:0e:1d:9e:e4:d7:ea:e4:97:99:68:cd:
                    62:d6:91:8b:32:29:50:ed:76:65:d3:5f:61:8e:9f:
                    7a:ca:3a:c0:7e:6e:a0:a2:f6:77:20:e9:4e:bc:97:
                    e3:7f:d6:a6:f7:f6:65:35:54:f4:3e:7a:ea:ca:29:
                    af:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F4:41:80:25:0E:28:AF:B2:6F:41:C7:B1:4B:F8:4F:E0:80:A9:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/62c1ea0d-7118-3861-8934-424675cb644d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:96:f1:29:0c:d0:b1:c5:41:c3:c7:cb:08:c2:f5:5e:53:dd:
         ff:ab:9c:be:a0:b5:d9:bf:07:4d:a4:24:24:87:49:37:de:0b:
         f9:e4:e2:70:f2:f0:77:f6:cf:de:c2:d9:b3:e1:d1:81:86:17:
         8d:41:52:c0:c1:74:c4:1b:a0:37:87:e2:2a:0d:39:89:48:00:
         1d:5a:07:78:43:74:f7:c6:5c:d0:10:81:a1:c5:00:f0:ec:e8:
         23:07:56:2a:e8:47:f0:5a:4e:40:d4:2a:52:77:4b:8d:c7:c7:
         34:35:73:4e:1d:45:6e:9d:9e:e7:81:ea:df:97:22:c0:06:73:
         68:70:7f:1d:c0:d9:71:fd:82:1d:09:5a:8c:9a:a7:57:08:db:
         ac:c2:4b:cd:05:28:55:a1:1c:fa:2f:e4:4e:51:5f:7a:57:c8:
         1a:f6:83:bd:fb:98:56:10:db:9f:9b:fb:b0:9b:a3:29:3c:db:
         8c:2c:96:10:38:5c:9e:c2:63:2c:36:43:5c:7d:35:73:d6:dd:
         87:2a:3b:62:78:96:74:b4:56:8c:4f:51:71:44:25:71:96:aa:
         b5:e7:5c:e8:c1:8e:00:47:79:35:d8:55:b0:da:80:53:32:9b:
         8a:5c:65:83:8e:85:97:b0:1b:b4:1d:99:ea:42:5f:d6:cd:d0:
         64:7a:69:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:21:05 2025 by rpki-client