Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/3b3253ab-1eaa-3003-99b4-14ff84d6e89f.roa
File:                     3b3253ab-1eaa-3003-99b4-14ff84d6e89f.roa (raw, json)
Hash identifier:          Pf+9fhhCFOop2uMQEIx/PtTXi4BY+IIEeiCM0Tzqid8=
Subject key identifier:   09:2B:47:69:05:B9:0F:3E:C1:B2:92:F5:19:02:95:7A:6A:25:07:91
Certificate issuer:       /CN=49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7
Certificate serial:       010D0C9F432858485F9AE063ABE9752387C58580
Authority key identifier: 53:94:6A:20:C8:68:7F:32:21:E1:A0:E3:FA:9C:32:E5:87:4A:61:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/3b3253ab-1eaa-3003-99b4-14ff84d6e89f.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        198.212.50.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:e0:63:ab:e9:75:23:87:c5:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=6e0c3ba4-f33c-448c-954b-affd0d11470e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:59:3b:57:1c:ea:9a:2e:58:56:fe:7f:c2:
                    14:32:5d:71:87:2a:3b:26:45:5a:2a:83:ad:55:2f:
                    3d:c8:e4:88:d0:fb:02:0d:51:4b:3f:63:3e:e1:b7:
                    00:8b:59:b2:78:64:8c:52:eb:da:20:94:6c:d3:48:
                    11:5b:1b:1f:3e:88:36:99:a5:8a:ac:85:73:21:4a:
                    a2:f2:0c:9f:fe:34:eb:3c:a7:bb:a7:66:9d:96:2a:
                    7f:84:37:5f:2c:bd:88:d6:c3:b4:c1:6a:c8:37:06:
                    a4:44:9f:0d:7d:f8:2c:68:ba:1a:ff:53:6b:c0:d4:
                    19:12:a8:2d:72:1d:8e:96:ef:f9:02:82:89:ab:ac:
                    8c:09:d0:ec:54:9f:c7:c7:75:2d:89:ef:c4:15:7c:
                    a9:57:15:e8:42:aa:19:2c:5c:ab:7f:40:fa:91:9a:
                    7e:cc:47:bc:55:ab:22:ba:64:9e:17:bc:37:c8:83:
                    71:2d:ca:a4:61:8c:8e:b0:4f:e6:66:11:6c:34:72:
                    64:cf:9b:98:da:38:89:b8:e9:21:b5:3d:e6:05:52:
                    05:2a:78:6b:73:1a:6e:cb:87:8c:7a:2b:14:cd:f7:
                    f5:cc:f7:0f:f7:0f:82:ae:d0:69:ba:cb:50:5f:3d:
                    cd:90:95:b6:af:bc:b5:9c:dd:00:35:11:e1:00:5e:
                    2d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2B:47:69:05:B9:0F:3E:C1:B2:92:F5:19:02:95:7A:6A:25:07:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/3b3253ab-1eaa-3003-99b4-14ff84d6e89f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.crl

            X509v3 Authority Key Identifier:
                keyid:53:94:6A:20:C8:68:7F:32:21:E1:A0:E3:FA:9C:32:E5:87:4A:61:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.212.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:92:f3:0d:6b:55:f2:9c:b4:8b:ea:d7:f7:68:2b:a9:a7:e0:
         16:4a:94:98:22:c7:aa:4d:ae:b5:e0:c5:e9:c0:2c:df:35:7f:
         70:57:66:ff:0d:89:ea:80:ab:a2:35:96:6e:47:09:93:57:48:
         b4:0e:43:5e:5d:80:68:a3:c8:9c:2b:0b:3a:b7:01:73:9e:d7:
         b9:28:cf:49:48:89:df:99:88:93:1f:27:57:ae:4f:5a:ec:c8:
         e7:78:39:4d:34:56:79:ae:d9:e6:aa:59:30:c9:5f:be:a8:34:
         2e:a6:87:50:54:35:06:f0:a0:5e:2b:f6:8b:34:96:b5:32:68:
         d0:f1:a8:98:c7:ab:21:c6:ca:0a:c4:71:3a:7f:2f:23:73:d0:
         b0:4f:ee:80:ad:4d:0b:a2:fd:10:3a:e6:2b:a6:df:21:82:06:
         66:ca:fc:9e:04:46:b3:d1:70:06:15:4e:5d:e2:20:07:6a:19:
         80:b0:c1:93:65:4b:97:44:e5:75:ef:d0:5d:a5:5c:0c:45:b0:
         7b:d0:6d:5b:a4:06:46:56:38:ff:2f:b6:a5:48:b8:38:3f:c5:
         fb:5f:b5:20:f8:33:cf:13:cd:5e:8d:f5:00:41:c3:df:45:9e:
         9a:34:91:11:6a:e3:9b:b9:db:f3:f7:45:5c:55:3f:c6:43:67:
         2b:60:b5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:39 2025 by rpki-client