Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/12b00a2f-9665-3d99-bf37-c8c1d9815b6b.roa
File:                     12b00a2f-9665-3d99-bf37-c8c1d9815b6b.roa (raw, json)
Hash identifier:          ZZAsB5bEmUg72PjKLotfHhuhEJVNIb3TeC/T+T4d3y0=
Subject key identifier:   86:2A:DB:CC:38:26:8D:FB:3A:5F:F1:8A:7E:0D:DB:44:36:C9:45:1B
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584832F0380B495AA89942C6A180
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/12b00a2f-9665-3d99-bf37-c8c1d9815b6b.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     394245
IP address blocks:        47.19.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:38:0b:49:5a:a8:99:42:c6:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=b06332b4-c1d8-4e38-bb05-67a83b05b399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e5:da:7d:90:fb:1b:9a:e7:54:59:b9:73:b6:
                    97:9f:a4:c2:b8:c5:de:3d:2f:4c:56:76:db:f6:f6:
                    23:a0:ee:67:15:4a:7c:95:82:d3:00:32:2a:55:3b:
                    4f:da:b1:f2:75:c2:39:ca:72:93:17:b4:9c:38:9e:
                    c1:37:9d:55:b9:13:37:50:36:1b:b5:3b:65:f8:f4:
                    b1:07:d4:b5:66:72:02:8e:90:5e:ad:58:c9:87:be:
                    7a:7e:81:ed:d0:b5:f2:f5:6c:aa:60:a5:5c:8a:6d:
                    9c:75:5c:a0:53:36:7b:54:14:5d:b6:10:d2:28:51:
                    76:da:30:c6:92:86:fa:fd:5c:c4:bb:e1:cc:f1:17:
                    7f:ad:a8:77:0b:90:eb:85:65:b0:3d:33:5a:63:8d:
                    b6:a4:41:82:54:e7:30:4b:1d:b1:99:af:ab:e5:31:
                    ac:ff:b1:30:23:13:af:a3:62:1b:4f:85:ad:ce:f0:
                    05:1d:4a:39:ec:59:7f:77:7e:2a:e6:cf:40:2e:0f:
                    bf:29:2b:d3:d0:1f:f3:2d:44:78:d9:9d:3b:9a:53:
                    38:d2:2f:d2:de:c0:2f:4f:d6:e8:96:11:55:00:0e:
                    4c:f9:07:21:cd:89:b3:0b:18:f9:94:a7:7a:a8:c0:
                    39:5f:ad:f2:40:54:5c:cc:3c:b8:10:b2:ff:5a:2c:
                    6b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2A:DB:CC:38:26:8D:FB:3A:5F:F1:8A:7E:0D:DB:44:36:C9:45:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/12b00a2f-9665-3d99-bf37-c8c1d9815b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f5:95:89:b9:21:9f:1e:92:00:33:0f:58:59:ff:9b:ea:21:
         91:49:aa:70:b1:dc:eb:f8:a8:4e:d6:60:75:7e:2b:73:6f:b9:
         ee:5c:5f:25:16:34:b6:c4:d4:ca:ea:f2:98:02:b5:b3:2d:03:
         c3:94:3c:f7:2f:c4:8f:44:48:a1:fd:ab:b0:cf:51:11:26:9b:
         6b:ea:7e:d4:69:25:11:3d:86:5b:3a:74:38:6a:e9:6a:5b:cf:
         31:1d:03:60:00:a5:b2:6f:dd:b9:45:12:01:bd:e1:20:41:32:
         9f:fd:eb:76:c5:04:19:74:f7:e4:8a:9c:4c:6a:36:39:15:d1:
         38:60:b1:2a:b7:85:95:ad:ee:8b:c1:06:83:9d:39:7a:53:f7:
         a6:1e:15:78:c8:e1:60:b5:c1:c5:88:97:5c:13:64:5f:90:17:
         6e:ca:ba:66:7b:10:ff:7a:2e:b6:9a:88:09:cf:fd:a0:7f:62:
         c3:b5:44:40:21:18:ab:2a:7e:04:6f:c8:30:f5:8d:f3:79:83:
         b8:5d:6d:a9:57:98:17:7f:90:7b:71:49:9c:07:f9:66:f0:99:
         08:02:cc:ca:22:98:08:18:49:12:0a:07:96:ab:0c:fb:65:d3:
         c2:7f:38:76:20:78:4b:57:70:46:80:84:96:aa:d2:8b:ca:d4:
         15:11:a1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:39 2025 by rpki-client