Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/ff991b74-3673-336f-90a4-4663655d56fc.roa
File:                     ff991b74-3673-336f-90a4-4663655d56fc.roa (raw, json)
Hash identifier:          AuYpIX8WYetzEhoHKUrYiVSs7EFNPq3s9GxcJdQ+qLA=
Subject key identifier:   70:89:98:AB:C5:C4:26:07:8A:8D:70:68:AE:59:73:6D:2B:A5:26:31
Certificate issuer:       /CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
Certificate serial:       010D0C9F43285847EFEF8AB1AB343D9F0BA62DC0
Authority key identifier: E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/ff991b74-3673-336f-90a4-4663655d56fc.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     6939
IP address blocks:        192.197.89.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:8a:b1:ab:34:3d:9f:0b:a6:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=2449f790-e40f-451f-8fde-c814b1a911e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:27:08:17:b6:01:3f:9c:fa:6f:f4:e3:86:
                    b4:34:ad:b7:ae:ac:24:ef:a0:1b:7a:9b:8b:c3:55:
                    5d:f3:d2:71:ed:f9:bb:c0:7a:1d:d4:d2:8e:40:c9:
                    13:5c:b1:b5:26:34:c7:ee:1b:54:fd:06:ee:d8:f4:
                    96:31:4c:27:31:b0:f8:84:5f:21:97:b5:e9:aa:5c:
                    96:3e:f8:c1:9a:2e:3d:fc:7c:00:73:d7:78:a9:0b:
                    9c:20:d8:eb:24:81:5c:43:c0:59:38:c7:90:0f:37:
                    e3:de:96:7c:06:71:73:72:27:17:b6:22:50:45:e3:
                    b9:e1:28:7a:cb:4c:9b:2f:78:a1:9d:cf:87:34:e4:
                    ad:59:40:df:bd:9f:ac:d8:a3:b6:45:48:96:4d:e0:
                    e6:ac:ac:12:63:9b:41:92:fb:41:7f:51:81:51:8f:
                    cc:12:44:36:13:30:f9:b3:a2:32:d6:3c:66:a2:bd:
                    28:0e:05:5d:bd:7b:24:64:d9:83:31:14:76:6f:25:
                    fc:f7:34:aa:f5:e9:09:5e:0b:fb:60:0c:e7:fc:d6:
                    36:23:47:27:d5:ce:89:e5:95:c4:2b:54:02:e9:fe:
                    1e:74:e4:f1:e1:ca:80:7b:78:07:5d:17:eb:c8:2a:
                    dc:c1:a5:ae:f7:7d:41:6e:fb:70:ac:44:b7:2c:f8:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:89:98:AB:C5:C4:26:07:8A:8D:70:68:AE:59:73:6D:2B:A5:26:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/ff991b74-3673-336f-90a4-4663655d56fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl

            X509v3 Authority Key Identifier:
                keyid:E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:3c:67:6c:e4:6e:97:a0:2c:43:b1:fd:94:b6:5d:6e:60:00:
         3a:a5:5c:af:75:6d:2d:d5:0a:ca:83:6b:49:0e:da:aa:36:82:
         da:40:51:e6:f3:9d:e5:ee:fb:8b:75:10:7f:9d:7b:ce:dc:3b:
         b4:a3:ba:ff:9e:d9:48:ab:c1:48:3f:60:6f:5d:08:29:ca:39:
         71:62:29:5f:af:6f:5a:8f:6a:c3:fc:eb:48:6b:a4:c8:ad:14:
         8a:62:57:a5:a3:87:d7:40:b7:c2:8f:ad:bd:38:97:df:49:3a:
         87:69:80:1c:8a:7d:73:74:b7:34:c2:65:38:17:ca:c0:1f:5a:
         cb:fc:f1:b6:a7:59:d9:ec:54:59:56:0e:93:ad:f2:c7:7b:b8:
         a7:16:89:02:db:80:18:2f:f0:7a:1d:94:fc:a7:6e:ca:38:7d:
         9b:69:fb:b5:a2:69:d2:55:c9:2d:1e:9b:66:15:91:21:d1:92:
         11:e6:a4:ec:56:f6:b3:59:8c:69:e7:22:f7:2b:bc:93:de:17:
         73:19:3c:f7:4b:80:52:60:22:e4:bd:4c:5d:aa:3a:db:d0:65:
         57:0f:ec:b2:07:45:71:f5:50:65:5e:85:a0:a4:dd:30:7a:99:
         fb:f6:88:a9:2b:b4:61:61:18:1c:0d:e2:c7:21:c6:d2:6e:83:
         91:b6:93:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:00:26 2025 by rpki-client