Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e23c22d9-927c-3a62-b4be-b1550143609d.roa
File:                     e23c22d9-927c-3a62-b4be-b1550143609d.roa (raw, json)
Hash identifier:          ZxDoFeNp6eW+ZbkszIeDT7ZmgcUkTn7exNoohSN652U=
Subject key identifier:   D3:0C:6A:E1:37:BE:F1:72:2D:D2:72:CF:EE:AD:A0:74:23:03:54:69
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F432858487325B9CC23BE170BEC4B4F80
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e23c22d9-927c-3a62-b4be-b1550143609d.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     0
IP address blocks:        192.42.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:b9:cc:23:be:17:0b:ec:4b:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=f7c6ce62-14bb-48c8-b4a7-3dcd59ac8b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:57:4f:01:45:39:58:3a:a2:87:91:84:a4:
                    4e:8c:ff:a0:29:30:e5:24:91:85:23:56:01:66:3a:
                    65:9e:bb:7d:43:b7:7b:a2:17:f5:79:e2:ad:14:aa:
                    b9:11:6a:e1:ec:56:21:8d:94:77:4b:17:63:45:a1:
                    ad:da:8d:0f:62:94:2e:73:2b:b8:9d:fb:55:f2:0d:
                    47:46:4b:83:77:7d:0d:cb:48:42:21:41:72:0f:7e:
                    f9:39:81:79:a9:f4:82:d0:fa:64:67:e0:c8:dc:30:
                    90:0c:19:eb:45:0b:ea:8e:34:0e:08:94:a1:bf:a7:
                    f8:50:f5:6d:4c:09:23:13:88:28:20:31:76:37:21:
                    7d:89:dc:80:27:02:df:38:23:24:ee:dc:79:ac:57:
                    dc:0c:9f:08:c2:e8:a6:0b:d8:20:8b:56:ca:36:23:
                    08:fe:43:6c:c8:3c:80:3f:ce:ea:6f:ab:1e:4f:e2:
                    47:ca:b3:61:c2:95:fc:6b:52:bf:75:da:0d:f7:8d:
                    a0:cf:43:14:e4:3c:71:9d:c7:b4:3d:80:78:fa:e8:
                    99:65:03:50:41:ea:1d:41:46:be:c2:d7:92:db:53:
                    45:bd:69:d7:71:30:71:78:ca:01:1b:64:84:a7:79:
                    17:f5:e2:e9:00:f6:6f:39:a6:78:f0:ce:31:cf:5a:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0C:6A:E1:37:BE:F1:72:2D:D2:72:CF:EE:AD:A0:74:23:03:54:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e23c22d9-927c-3a62-b4be-b1550143609d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c3:99:67:ab:e9:ef:56:1c:d4:86:fa:50:f6:06:a0:b3:e1:
         c5:af:92:e7:9b:12:64:11:c2:65:08:5c:11:58:e7:5c:89:ca:
         e8:69:65:36:6b:17:88:a0:48:78:ac:50:d8:9c:2f:7d:3f:79:
         88:37:d2:59:e1:af:65:3e:21:85:5d:f1:6b:61:92:0e:4d:d9:
         76:7b:1e:7c:38:7d:e0:cf:57:1c:3c:53:6a:de:4b:fe:08:0c:
         5c:4c:e0:b1:1e:56:84:74:c3:42:26:af:e3:c8:6f:c1:73:54:
         9e:69:1b:4a:cb:2d:9b:23:d8:4f:3b:3a:6f:1f:ad:a5:11:1f:
         43:9f:e7:7e:5b:32:c6:df:80:82:58:5f:44:19:30:50:cf:d9:
         09:0e:5f:5d:94:82:7e:79:28:6c:3b:6d:b4:e0:91:a2:18:00:
         3a:ed:81:61:e3:c2:bb:7a:63:43:39:9a:c9:e9:a4:13:0a:3b:
         2c:1a:e9:37:5b:69:25:69:38:d2:da:7a:06:93:d0:aa:67:0a:
         5e:07:6f:5e:3c:cf:31:cb:3a:72:50:3a:03:66:32:35:39:99:
         61:3c:bb:ff:eb:1f:51:2e:d4:d5:a9:8e:8f:37:aa:59:76:ff:
         8e:25:15:06:3a:d3:92:4e:cf:7d:76:29:1b:ad:1a:b8:7b:26:
         27:96:16:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:22 2025 by rpki-client