Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/149f4f30-e56d-3d95-8270-5e4f72c5eeff.roa
File:                     149f4f30-e56d-3d95-8270-5e4f72c5eeff.roa (raw, json)
Hash identifier:          WJhiuyaDChsnVR2t1QRJZv3xztula0u/FyJHQdv5FFI=
Subject key identifier:   EA:E7:C1:89:B6:A5:95:25:D6:45:C7:C8:23:0C:C2:9D:3C:F1:DE:B8
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F43285848090FBBD50715C2019F696140
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/149f4f30-e56d-3d95-8270-5e4f72c5eeff.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     2734
IP address blocks:        98.158.158.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:bb:d5:07:15:c2:01:9f:69:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=a34d21db-382a-4e8d-9d85-a51e8a18b0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:3e:9b:7a:71:3d:f0:00:9d:7a:da:3e:d2:
                    1d:a5:09:7a:76:1c:ce:7d:03:67:8c:98:6c:39:be:
                    36:64:87:d0:24:ba:04:8d:60:e8:29:98:b0:e1:6e:
                    44:d3:6b:b0:2b:45:7f:24:a5:a9:85:c0:46:c8:98:
                    e5:ed:02:0f:4f:f6:6f:63:58:b4:b9:a6:1c:de:5c:
                    1d:de:0c:77:e3:1d:16:72:93:5e:6b:96:0f:01:1b:
                    c2:08:ec:7d:5a:45:66:ea:0a:39:b4:c5:38:4f:8e:
                    68:42:fb:64:9e:b6:54:6c:04:67:c0:5c:59:44:f1:
                    6e:c7:57:8b:0e:22:38:bc:33:49:f3:0c:ce:4b:33:
                    bc:de:83:82:b5:6b:6f:36:11:78:93:14:f8:68:94:
                    a7:66:38:2d:1b:1d:1e:5b:51:ca:9c:e0:64:2d:d7:
                    8f:dd:52:39:d8:83:16:ce:bc:08:5f:23:3f:15:c6:
                    5a:a5:04:8c:c7:b6:41:17:ff:fc:9d:2a:bb:e1:4a:
                    db:5c:67:25:d7:cd:f1:54:26:2f:5a:aa:90:41:5e:
                    ef:1f:60:dd:bc:39:c2:85:02:89:55:f1:5c:3f:ec:
                    41:aa:14:1f:63:cb:33:a8:56:5d:3f:cb:49:95:34:
                    c9:fb:64:ea:d4:e9:6e:54:4d:80:78:03:7e:f7:b6:
                    43:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E7:C1:89:B6:A5:95:25:D6:45:C7:C8:23:0C:C2:9D:3C:F1:DE:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/149f4f30-e56d-3d95-8270-5e4f72c5eeff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:68:e1:3a:c5:0b:c3:bb:d7:b0:b2:96:0c:50:ef:7b:e3:b6:
         30:ac:c6:5e:3e:b4:f1:e1:ee:04:54:6b:3c:67:a4:c6:b7:cd:
         ea:13:59:aa:d7:dc:2d:aa:f5:01:d7:41:3d:4f:15:94:81:10:
         f5:6a:ee:dc:1b:bb:f8:87:32:f1:44:ec:f0:2a:6a:0b:82:2a:
         ed:72:81:a7:45:c0:82:2a:54:08:2e:58:44:b7:ca:f5:aa:ba:
         64:8c:ac:81:99:bf:85:a7:7e:85:46:0d:f8:2d:1f:bd:61:da:
         ec:33:2e:07:29:71:56:a3:5a:97:a1:81:f1:a8:0b:d5:28:f3:
         44:a5:d7:0c:3c:fa:83:74:df:b1:69:58:01:1b:f6:67:bf:76:
         16:83:cb:9d:bb:6f:b6:15:e9:d5:bf:00:f4:5e:95:2b:77:f7:
         8a:b5:42:45:d1:e8:70:a1:e4:8c:16:59:7c:bf:be:48:1e:85:
         80:a7:84:fa:81:e3:e2:4c:8b:93:ff:f1:99:77:24:8f:80:b5:
         14:bb:1d:e1:ff:c9:94:b8:12:6b:24:5d:82:ff:08:bd:84:0d:
         ac:9f:a7:c5:da:f6:5d:10:83:c0:ba:8b:08:82:f6:61:f3:f7:
         58:04:3b:a6:b8:a9:9f:89:ae:80:41:40:4c:e2:c9:a9:01:3c:
         ba:ed:7b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:22:08 2025 by rpki-client