Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/6e451ade-7ec1-3c2b-be40-38f31289f4f8.roa
File:                     6e451ade-7ec1-3c2b-be40-38f31289f4f8.roa (raw, json)
Hash identifier:          xiAQWbMHUD9njbWhaAfUqEpJ8FT8arK+/eDQg0SkWVs=
Subject key identifier:   8D:DE:A6:25:27:5D:6C:B9:45:D3:23:56:4A:75:90:5B:5E:B0:3E:CB
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584863CB1380F93CCA6BE1C00440
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/6e451ade-7ec1-3c2b-be40-38f31289f4f8.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     26548
IP address blocks:        192.169.46.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:13:80:f9:3c:ca:6b:e1:c0:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=387cc83f-2672-4032-9d65-e2653a76f3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dc:83:97:f1:d7:7c:da:e2:2f:51:1d:7c:43:
                    ac:d9:c6:c5:58:9e:db:73:a0:1b:63:34:b4:fb:e8:
                    8d:55:75:3c:2a:e4:f7:0e:ad:8f:73:50:44:d1:82:
                    03:26:23:4e:b4:ad:b4:37:00:85:2a:e4:33:c3:d2:
                    b1:d6:cf:3f:62:a1:88:08:2a:9b:c9:82:91:05:52:
                    86:c5:d9:ab:be:8e:5a:9f:2d:a8:ce:c1:c1:3d:4a:
                    08:8f:87:c5:a8:43:17:c6:d0:0d:28:02:35:01:27:
                    f1:8b:27:19:55:17:ef:83:63:1d:52:c5:8f:39:64:
                    05:33:be:03:49:c9:b1:65:fa:2f:7e:40:66:89:eb:
                    ab:8f:60:bc:37:c7:a5:1a:bf:53:43:7f:e0:1a:03:
                    18:5d:e8:52:68:13:a3:49:a4:8e:0d:22:c3:90:53:
                    e2:d5:f4:2e:93:1f:da:93:dd:dc:9f:10:a9:1c:49:
                    66:90:c5:01:38:a3:7b:a1:d6:b1:af:0b:dc:8e:46:
                    d3:87:67:4c:1c:b4:42:98:99:d2:6a:80:2f:4f:31:
                    9d:dc:84:67:ef:b7:8c:96:98:27:67:59:ec:a6:68:
                    1a:99:84:c5:1e:2b:50:02:97:4d:15:85:13:15:c3:
                    d8:10:49:be:af:c4:b7:96:88:9e:12:a4:6c:76:06:
                    e0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DE:A6:25:27:5D:6C:B9:45:D3:23:56:4A:75:90:5B:5E:B0:3E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/6e451ade-7ec1-3c2b-be40-38f31289f4f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.169.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:59:35:fd:44:19:18:24:54:8c:75:b0:5a:54:01:b8:10:d8:
         1b:84:26:f3:3c:7d:a7:2f:61:af:7d:40:84:05:3c:d9:8f:10:
         1c:ad:f8:7d:36:7a:6f:30:57:e3:0f:e8:75:3b:8d:fb:dc:b0:
         a4:67:44:05:f8:03:57:79:05:98:44:2a:6d:a4:d2:d1:18:83:
         39:21:6a:91:b6:66:1e:16:6f:0c:45:de:9f:44:a2:05:07:23:
         30:3c:0e:24:f9:fb:a9:87:b6:91:ee:53:41:d0:12:39:0b:33:
         ae:f9:72:a4:cf:d2:0b:43:6e:1d:85:26:b4:06:f5:f7:dd:dd:
         85:1c:27:18:00:d0:26:ef:ef:9e:46:67:45:97:0f:3a:78:c4:
         61:6c:34:c5:2e:b6:bb:33:17:84:38:e4:07:02:e9:96:ab:53:
         bd:6e:01:35:4c:fe:16:4a:3c:3f:5c:44:f2:75:64:26:00:d1:
         36:70:9a:34:e9:f4:2e:c7:e8:94:23:1e:dc:ea:88:e0:e3:0b:
         00:1b:1c:36:01:6c:d3:6f:21:41:2a:9c:cb:d5:4f:af:26:8e:
         e9:0b:dc:5d:7b:c2:07:61:b2:2f:f5:dd:47:1b:64:25:9f:dd:
         a4:57:29:1d:7a:63:2c:70:bf:57:89:34:f5:d1:ea:05:eb:c9:
         89:0c:f8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:26 2025 by rpki-client