Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa
File:                     ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa (raw, json)
Hash identifier:          D1xG3jCPlVhbgUN8hQH5f/gfeXnZ8mIuXhwtJa13S+k=
Subject key identifier:   4F:60:7A:E5:84:36:34:78:FA:53:84:52:C1:47:52:6B:63:94:41:31
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584863CB084A898F252BF77331BC
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     2495
IP address blocks:        198.248.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:08:4a:89:8f:25:2b:f7:73:31:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=ebd14d60-6ec8-441b-b3ba-3e5447c05fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:67:e8:99:a2:9a:23:a8:c6:c3:c5:6e:db:bf:
                    6f:d6:be:ad:df:67:24:08:a1:86:39:80:5a:db:c6:
                    32:d5:c5:ab:22:0c:03:6e:e5:61:46:8f:10:c0:97:
                    fb:c3:9b:de:dd:fb:64:52:16:15:95:e8:ec:d3:3f:
                    30:66:8d:85:75:7a:28:7f:88:6d:39:f4:8d:1d:d3:
                    45:43:be:1c:ea:a9:eb:84:bf:bb:91:ca:df:4a:4b:
                    7d:8e:9f:52:09:82:c3:58:e8:c2:7c:b8:ab:b6:05:
                    e0:71:31:e2:ae:c9:af:4d:54:67:07:b5:7c:e0:4c:
                    56:6f:aa:80:66:40:fa:b7:ce:0c:7e:53:74:c5:42:
                    20:e3:e3:7f:a6:8b:bd:0c:c4:bf:7d:16:79:99:db:
                    ba:33:6d:99:e7:28:46:a3:4a:f4:26:21:91:7c:86:
                    a5:4c:77:e4:79:e6:71:58:84:56:3c:e0:43:89:57:
                    ec:d1:aa:13:b6:fc:76:16:f3:a4:99:33:89:1c:0c:
                    4a:fe:77:f4:74:43:40:c9:98:42:e6:04:41:96:94:
                    2e:e0:90:5b:3a:bb:12:07:90:d6:f5:6d:88:fc:b4:
                    4e:c4:ba:4f:a4:93:40:48:83:27:5f:91:c3:b2:eb:
                    37:06:7f:87:1e:76:2f:69:91:83:a6:53:97:93:28:
                    d1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:60:7A:E5:84:36:34:78:FA:53:84:52:C1:47:52:6B:63:94:41:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:41:80:c5:f8:f1:ae:ec:f8:dc:60:9e:57:a3:04:17:c6:b6:
         af:80:08:8e:8f:85:70:97:b9:c3:4f:c5:a0:98:68:b4:d1:46:
         94:77:1d:0d:56:7f:9a:63:14:dc:dc:0b:74:4a:23:4f:c2:90:
         7f:8b:31:cf:4c:09:7f:be:89:46:11:63:17:a8:8b:9e:fb:45:
         fb:e1:9a:fc:1f:c4:f7:c0:51:04:24:a6:b7:89:84:36:1f:c7:
         e7:8e:d4:2c:5d:60:cb:b7:67:fc:3c:d8:0f:e0:32:e0:ab:ae:
         10:74:c6:0a:99:32:8d:77:fc:13:38:da:a6:53:e3:8a:03:e8:
         4f:f3:92:5c:dd:db:10:97:2c:ef:af:00:05:b5:5a:f6:d7:6f:
         ab:d9:59:a8:b1:ae:c0:59:b4:3a:ad:ed:86:66:cd:cb:e6:7c:
         2a:89:a5:c1:dc:54:3b:ca:48:67:3c:15:13:6b:b8:c5:c4:83:
         a1:4c:0e:e8:c8:75:b1:f2:7a:21:f5:16:e3:b3:8e:20:95:da:
         f2:11:b8:c3:1c:f7:26:8b:79:6e:36:ae:76:59:e6:59:5d:e4:
         aa:36:96:6b:9c:2c:37:61:e0:b1:80:9f:e4:4b:2e:95:8b:f4:
         c6:59:22:98:a1:2d:d0:0f:7b:fa:fc:35:26:64:a2:e7:68:f8:
         2f:6e:76:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:50 2025 by rpki-client