Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa
File:                     93af5d7f-145a-3b75-9635-bd780078b94f.roa (raw, json)
Hash identifier:          dL5H8gz3qEFfvyFjUjM6EfIf5zxb3BCB1lVngrooX3A=
Subject key identifier:   56:C3:14:14:EE:C9:61:09:F0:DB:FB:67:38:65:C3:36:80:A4:E6:B2
Certificate issuer:       /CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
Certificate serial:       010D0C9F43285848E2D107E6220197DC27EE8120
Authority key identifier: BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     25830
IP address blocks:        199.195.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:07:e6:22:01:97:dc:27:ee:81:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=f34bc25f-debe-4dc9-a798-53b945c50ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:21:51:c6:a2:75:60:16:76:9c:1d:6c:34:42:
                    4e:ab:9f:f0:55:c8:f5:51:d8:8f:c4:32:4c:a9:92:
                    f9:3f:e8:4f:06:1b:52:1f:c7:06:2b:88:4e:53:3d:
                    e1:cf:8b:42:82:91:c0:75:1e:7a:16:0b:72:1e:78:
                    8e:df:c1:86:dd:c4:8f:27:09:3b:9c:63:b2:e7:34:
                    44:2f:12:c9:b7:de:44:17:a5:0f:6d:8a:00:b9:4e:
                    e2:83:53:c3:0c:6c:d1:b2:31:f0:72:bf:5d:4a:03:
                    c1:5e:8f:89:7e:66:f0:31:3c:a0:47:ff:55:5c:bb:
                    a4:35:64:1e:b9:8c:30:54:44:14:bf:49:e4:2c:e4:
                    fa:55:2f:ec:c4:01:72:ad:7c:5d:d1:0d:cc:a5:15:
                    3e:5b:20:7b:88:b9:3e:ba:89:3d:33:2f:05:a1:21:
                    26:c9:98:0e:01:12:f3:1d:18:cb:88:99:21:12:6b:
                    c2:ad:84:82:df:bc:ca:86:42:19:59:3a:3a:30:e2:
                    86:1b:6b:1c:6f:41:3e:94:86:c3:5e:e0:0c:61:af:
                    e0:ed:76:2c:d1:be:9a:30:21:3f:6d:e1:8c:b0:c0:
                    e9:c7:82:97:74:57:68:94:67:e7:a5:77:f3:df:c1:
                    59:fc:f0:88:bb:67:58:d2:a5:11:1b:55:2f:55:4a:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C3:14:14:EE:C9:61:09:F0:DB:FB:67:38:65:C3:36:80:A4:E6:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl

            X509v3 Authority Key Identifier:
                keyid:BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:3b:b3:44:c2:c1:54:58:50:f7:4b:e3:70:99:ec:4c:8b:64:
         90:58:31:cf:da:ab:ac:44:8e:9b:1d:db:71:75:df:e6:70:4b:
         8c:31:0c:85:8f:c9:4b:42:5d:d6:4d:55:0d:c3:ea:5b:ad:e9:
         84:60:66:85:e1:a4:77:bb:a9:fd:c3:51:46:e1:10:91:f3:71:
         27:d1:91:88:31:9d:89:34:64:6f:f0:55:9a:c9:19:cf:4e:76:
         46:99:5d:50:5a:bf:49:fa:ee:e8:22:7c:6c:3b:b6:68:6d:a0:
         0b:d3:49:46:bd:37:ab:7d:37:93:1b:23:80:8a:d0:63:02:2f:
         14:0a:96:e4:f0:ca:b0:be:15:49:98:14:95:69:7f:cc:56:d5:
         92:42:27:21:54:aa:86:dc:23:a6:fd:ae:d6:5a:46:77:3d:5c:
         97:9f:9b:b2:f4:42:18:79:da:83:50:43:6c:d8:8a:4b:89:98:
         49:e7:e8:f5:33:5f:cb:14:e0:aa:78:05:3d:af:fb:c5:2d:83:
         ca:4e:0a:79:c5:85:c9:40:4f:24:fc:e8:ec:dc:3b:bb:6d:f1:
         02:95:e9:5c:e5:7d:6c:56:29:82:77:34:a9:89:7d:c0:88:46:
         05:c4:be:b8:1f:5a:39:83:16:1e:cf:c5:c4:17:66:53:61:ea:
         25:d2:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:27 2025 by rpki-client