Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/905b9808-a44d-3c8d-89b4-e8a4ce95b2af.roa
File:                     905b9808-a44d-3c8d-89b4-e8a4ce95b2af.roa (raw, json)
Hash identifier:          saws68Gghmsq5IssNi84Uu7odL9YH7Jf5FkNVjcQ5Qk=
Subject key identifier:   A3:13:C7:41:87:76:65:10:E7:9E:8B:9D:D5:F3:53:43:E8:D0:5E:57
Certificate issuer:       /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Certificate serial:       010D0C9F4328584945CE9A1DFC4F060FA32DE580
Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/905b9808-a44d-3c8d-89b4-e8a4ce95b2af.roa
Signing time:             Sat 22 Mar 2025 13:00:52 +0000
ROA not before:           Sat 22 Mar 2025 13:00:52 +0000
ROA not after:            Fri 20 Jun 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        199.188.196.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:45:ce:9a:1d:fc:4f:06:0f:a3:2d:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
        Validity
            Not Before: Mar 22 13:00:52 2025 GMT
            Not After : Jun 20 13:00:52 2025 GMT
        Subject: CN=f1bd13a8-ff1b-4923-8bc2-07c2bb952402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bc:44:f1:56:da:2f:50:c7:7d:04:5c:31:77:
                    93:4a:46:2f:d7:1d:5d:0a:5f:03:e6:97:4c:1f:89:
                    73:7c:5f:b4:62:1d:23:3f:31:a0:06:5b:7d:85:08:
                    1d:0d:92:e6:52:eb:47:c0:a5:69:4f:43:1a:be:55:
                    79:85:2f:e5:cd:92:bb:2c:25:9c:1f:5d:26:b0:fb:
                    5a:18:4f:1d:f7:2b:c2:7a:20:1e:8b:5e:8c:79:53:
                    78:a5:22:c6:51:bb:21:29:b7:33:34:d5:7d:66:97:
                    fa:1d:00:23:41:dd:1a:81:07:3b:82:6c:10:97:bd:
                    8e:e6:fe:60:20:c5:b8:65:bd:f0:5e:01:33:f4:5f:
                    8d:1a:5b:eb:d8:8f:5b:47:99:9b:6e:49:51:24:69:
                    0d:03:d3:68:77:90:40:7e:f1:58:d8:de:4c:91:bc:
                    72:fa:d1:75:85:b3:9e:f0:79:9a:b3:2c:ee:4c:94:
                    49:a9:e5:66:97:47:49:b6:9e:ac:be:1c:e7:07:4a:
                    29:9e:0a:18:05:35:41:82:4a:bf:a1:f2:3e:95:7e:
                    1f:f6:b0:00:c9:8f:a9:66:da:99:5a:a7:02:a8:50:
                    55:de:d2:e5:02:27:6c:e0:b1:d3:28:a8:ee:9b:19:
                    27:ab:63:e1:36:9a:00:6e:37:d6:3e:9a:49:37:00:
                    bc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:13:C7:41:87:76:65:10:E7:9E:8B:9D:D5:F3:53:43:E8:D0:5E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/905b9808-a44d-3c8d-89b4-e8a4ce95b2af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl

            X509v3 Authority Key Identifier:
                keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:cd:a8:15:c3:91:a2:d8:1f:3b:69:f3:29:46:f3:06:47:73:
         93:98:57:97:6b:ba:70:a2:ab:da:6f:0f:6d:fc:c0:22:43:f0:
         55:68:73:ba:3f:d9:a4:e8:83:5f:bf:34:19:fb:86:5b:de:9f:
         33:79:f3:51:d8:42:27:eb:50:e8:62:d5:1c:3d:a5:4b:15:6b:
         e2:bc:b0:e0:08:45:58:58:90:bd:17:4d:f4:a4:0e:19:37:cf:
         b9:f9:9b:8b:9b:b6:91:31:4b:59:24:e2:7b:0e:ef:9f:93:5f:
         57:fb:8e:2a:05:2b:9e:e0:74:37:a2:5a:e7:64:6f:55:9a:d3:
         a3:88:33:4d:0d:af:97:c0:19:9f:6e:b7:d6:09:ad:bf:fb:00:
         a9:f5:f3:cf:74:d8:40:8c:03:b4:20:f1:f3:9e:e6:9e:e6:cc:
         1a:04:89:c8:01:54:cc:59:66:9b:c4:18:df:63:f3:3b:5f:02:
         65:0c:87:ea:f8:6e:26:ef:7b:5a:0c:24:5a:ac:9c:2a:02:e6:
         bc:b5:4e:39:57:ed:33:ae:52:8d:05:6a:45:d8:20:22:cf:a7:
         f2:11:8a:4e:63:3b:f7:0e:9b:6b:27:cb:73:26:8e:d1:0f:a8:
         85:6b:57:6b:09:6a:f1:e1:d8:8a:34:3b:36:38:c3:01:09:a4:
         6f:c3:11:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:44 2025 by rpki-client