Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/124ea916-fd4b-430c-809f-10f23ffc4887/9fe4fd2a-ac5d-3892-a7b7-8610ee2cf514.roa
File:                     9fe4fd2a-ac5d-3892-a7b7-8610ee2cf514.roa (raw, json)
Hash identifier:          SAwtuVaKylnDNqhY5NZC8hYQwcFfV/yI8mn1MyQvjn4=
Subject key identifier:   DF:3C:B8:DA:00:B4:C8:29:C9:C0:32:83:B8:D7:93:91:17:BB:A6:37
Certificate issuer:       /CN=124ea916-fd4b-430c-809f-10f23ffc4887
Certificate serial:       010D0C9F43285848E9EB568437112B1472547180
Authority key identifier: 01:15:BD:5E:51:FB:7D:EC:84:B9:BA:88:75:57:2E:50:A5:3C:66:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/124ea916-fd4b-430c-809f-10f23ffc4887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/124ea916-fd4b-430c-809f-10f23ffc4887/9fe4fd2a-ac5d-3892-a7b7-8610ee2cf514.roa
Signing time:             Mon 17 Feb 2025 15:04:25 +0000
ROA not before:           Mon 17 Feb 2025 15:04:25 +0000
ROA not after:            Sun 18 May 2025 14:04:25 +0000
asID:                     199610
IP address blocks:        98.158.24.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:eb:56:84:37:11:2b:14:72:54:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=124ea916-fd4b-430c-809f-10f23ffc4887
        Validity
            Not Before: Feb 17 15:04:25 2025 GMT
            Not After : May 18 14:04:25 2025 GMT
        Subject: CN=f9b659ef-db97-47ae-9651-6e741de78e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:c2:b3:02:b6:c0:88:70:15:b2:4f:9b:66:
                    64:54:2d:c0:dd:c9:7e:74:96:fd:19:66:21:cc:a7:
                    d8:20:5f:e3:44:2b:8b:4e:c3:cb:49:16:8a:55:36:
                    1d:0d:14:3f:0d:eb:a7:05:6f:95:ce:f6:86:11:2b:
                    2a:60:a6:65:6f:fa:c8:45:b5:a5:d7:7a:a0:31:cb:
                    37:58:10:44:4b:16:6d:9e:a1:d3:3d:5d:a8:26:85:
                    47:b0:d4:c7:43:a4:01:fa:bf:89:b4:cf:4c:59:a4:
                    d0:2c:fb:b5:1f:28:3d:d0:fb:0a:71:1b:ad:f7:77:
                    d7:b3:c8:07:c4:d4:f4:64:1d:1a:c1:47:0f:6c:47:
                    34:61:48:d8:34:fc:21:26:c5:64:59:2e:77:a6:5d:
                    fd:41:20:6e:87:d6:99:14:53:a4:ce:e9:26:2e:e9:
                    f1:a2:61:cf:93:2e:8a:95:7d:e1:fe:74:9f:6f:6e:
                    ac:85:af:a4:5f:b8:84:16:5f:c8:d4:89:6a:89:98:
                    00:7a:29:a7:50:65:fc:54:43:dc:97:3d:fa:f4:d7:
                    54:3a:b3:02:21:34:b6:90:d6:b9:ee:96:c8:b3:23:
                    75:e5:24:0c:17:04:37:fb:85:e5:52:cc:00:fe:c0:
                    fe:7c:99:c9:66:89:f1:cd:e3:59:92:fd:1b:f7:bc:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3C:B8:DA:00:B4:C8:29:C9:C0:32:83:B8:D7:93:91:17:BB:A6:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/124ea916-fd4b-430c-809f-10f23ffc4887/9fe4fd2a-ac5d-3892-a7b7-8610ee2cf514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/124ea916-fd4b-430c-809f-10f23ffc4887/124ea916-fd4b-430c-809f-10f23ffc4887.crl

            X509v3 Authority Key Identifier:
                keyid:01:15:BD:5E:51:FB:7D:EC:84:B9:BA:88:75:57:2E:50:A5:3C:66:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/124ea916-fd4b-430c-809f-10f23ffc4887.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e5:c1:7e:6a:dc:c8:0e:e9:85:ed:8f:53:98:44:21:dc:a1:
         78:49:e6:71:d4:f4:55:1d:43:bb:48:41:d5:f4:98:39:62:26:
         14:d1:cf:c0:3b:d9:ac:bc:ff:de:36:55:c2:9f:6d:1d:d4:80:
         81:ea:ad:3c:87:da:87:51:7b:6d:4a:0a:4c:66:ab:06:de:24:
         9b:fb:11:af:fd:62:0c:7f:fb:15:c5:5e:04:74:99:54:d3:84:
         8e:03:0c:2d:61:e1:47:cf:a5:62:aa:8d:fb:a2:3f:0a:68:3a:
         46:51:fd:a0:7c:91:02:82:d9:7b:aa:e4:e8:4c:bb:74:1c:55:
         1e:e7:8c:6f:09:ed:71:8b:0d:00:e4:fd:36:ae:8d:f7:00:f2:
         a4:a7:e9:0e:4b:0f:cb:68:85:6a:e1:2e:95:67:cb:38:03:3e:
         5f:d5:1a:3e:00:ab:90:b9:7b:1d:88:06:01:88:13:4d:50:92:
         a0:fd:0a:2a:6c:9a:9f:87:6b:70:18:11:63:d3:82:a3:61:4c:
         ab:73:59:fd:5e:21:a1:a2:46:24:69:bc:69:3b:bd:f6:80:06:
         0d:55:6d:02:65:ac:af:b8:27:b0:13:44:89:b9:87:3d:b2:22:
         99:a1:d3:db:1b:da:00:4c:a9:0d:db:15:52:65:3d:28:98:9f:
         99:57:14:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:04:50 2025 by rpki-client