Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/429747c5-c7e0-337f-97dd-1c905d4631ce.roa
File:                     429747c5-c7e0-337f-97dd-1c905d4631ce.roa (raw, json)
Hash identifier:          gn7p9tALJsDpPl+B+qzxRfO90TMyLu9mDNqH/xPr6MM=
Subject key identifier:   3E:05:5E:6F:94:07:07:8F:23:18:60:D4:FA:8C:51:A9:F1:B9:21:4D
Certificate issuer:       /CN=45fe4043-69f6-4f38-9003-897cd909fb3b
Certificate serial:       010D0C9F43285848F65BE45DF07D4BF0C16B1980
Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/429747c5-c7e0-337f-97dd-1c905d4631ce.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     14618
IP address blocks:        199.19.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e4:5d:f0:7d:4b:f0:c1:6b:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=0cf948f0-07fd-41a6-a677-9371d2c0565b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fe:b0:07:12:a3:61:8b:72:cc:c8:36:78:65:
                    b2:82:37:ec:ea:46:68:21:c5:20:5b:a4:74:40:51:
                    b1:2d:4f:9d:5f:22:b0:7e:7a:c6:f5:5a:26:04:74:
                    c9:16:a1:3d:ea:e4:a7:a6:1f:47:90:a1:aa:46:ad:
                    d0:ec:d3:6b:94:3e:9d:bf:d6:7b:4d:14:b2:69:13:
                    3e:05:6c:96:0f:30:1c:a4:35:bc:e6:99:67:9c:61:
                    8b:2f:73:9f:62:5d:70:21:40:ff:f2:d0:fd:d5:4d:
                    75:1a:c3:de:07:c0:37:ca:8d:f4:d0:c7:a3:df:8d:
                    3c:9e:74:de:e3:c7:c7:c6:da:82:5b:6c:b5:5a:19:
                    19:6b:ff:45:18:dd:5e:5f:83:64:08:50:5b:04:fc:
                    ae:88:b8:da:bd:d8:81:89:94:ee:c6:17:6d:a4:32:
                    35:65:af:32:a2:a3:c2:b2:39:e9:98:cf:2f:b4:95:
                    0d:04:16:29:f8:24:22:b0:ab:44:6a:1a:a8:b4:a6:
                    23:5a:85:52:63:df:f0:0e:ea:5b:42:70:70:b9:80:
                    05:8c:64:07:2f:0f:66:69:b8:29:e2:92:3a:37:1e:
                    b9:eb:e5:87:10:59:ec:da:ba:4a:d8:fd:8e:74:9a:
                    fc:06:6d:8f:d8:74:a5:78:a3:9d:e3:d7:6d:6f:ba:
                    a6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:05:5E:6F:94:07:07:8F:23:18:60:D4:FA:8C:51:A9:F1:B9:21:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/429747c5-c7e0-337f-97dd-1c905d4631ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:05:51:70:ab:af:fc:93:36:bb:e3:13:be:06:ac:be:2c:4a:
         6e:d5:63:60:a0:ac:4c:e2:45:80:4b:bd:33:23:39:4a:8b:79:
         75:00:fb:fa:3a:82:d4:a3:54:1f:a0:40:db:a6:2d:69:65:4e:
         5c:3c:59:d6:0f:e6:4a:ea:de:5f:d3:62:30:f4:b3:90:a0:16:
         f1:24:a0:34:14:b9:82:50:37:4a:12:20:79:45:62:86:ba:1a:
         6e:1b:c6:3f:3e:cb:05:fc:29:b8:b9:98:84:a3:05:03:eb:a9:
         1a:c4:fd:d2:13:c8:4a:45:1b:d2:40:38:f7:5d:d6:30:e9:9c:
         90:8d:02:50:81:f7:8a:5f:b0:f4:c4:39:ce:ef:dd:20:02:04:
         9b:91:b1:1e:c2:f3:19:6d:2e:3f:c7:71:8a:72:0f:a7:bc:fc:
         b1:c2:a7:bc:ec:9b:b3:78:a3:ff:79:16:27:e4:1c:59:c2:66:
         63:60:f3:5f:a4:3b:fe:9a:77:34:8d:78:a4:69:d6:55:86:11:
         e5:7c:86:91:83:c5:f4:3f:e8:a0:81:2e:b9:84:c7:8a:37:c1:
         2c:11:b9:02:84:13:2b:e6:4d:96:b5:7e:c7:31:a0:8a:57:1c:
         18:fb:59:3e:3d:2b:5b:c7:86:b8:6d:0f:3f:8f:be:ad:cd:0d:
         7c:be:46:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:35 2025 by rpki-client