Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e727d729-e439-4963-b6df-9b7aec75f8e1/f9b63be0-4e77-3548-95c8-c67bb50729dc.roa
File:                     f9b63be0-4e77-3548-95c8-c67bb50729dc.roa (raw, json)
Hash identifier:          MYh6tGZb9cukPf+mEQx26vq3UQ7OCwk9cazqjMisydY=
Subject key identifier:   E5:37:73:34:95:0A:4C:2F:79:B0:1A:EF:16:A7:29:8F:FB:A9:96:0B
Certificate issuer:       /CN=e727d729-e439-4963-b6df-9b7aec75f8e1
Certificate serial:       010D0C9F432858483B4FF87F7AC832325BCEF890
Authority key identifier: 5F:1B:E0:33:1D:DE:F6:48:34:80:91:29:ED:C0:37:6C:67:5D:06:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e727d729-e439-4963-b6df-9b7aec75f8e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e727d729-e439-4963-b6df-9b7aec75f8e1/f9b63be0-4e77-3548-95c8-c67bb50729dc.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     46851
IP address blocks:        199.47.80.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:4f:f8:7f:7a:c8:32:32:5b:ce:f8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e727d729-e439-4963-b6df-9b7aec75f8e1
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=1c262765-83f5-4518-af76-eef77a64c83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:55:a5:4f:6d:c3:c5:64:11:ae:57:f8:f0:
                    f9:df:39:59:b1:cb:73:f2:df:3f:b8:cf:4a:a8:d1:
                    bc:18:c8:d0:b7:af:c2:12:c2:6b:b0:f3:ea:9b:29:
                    5e:c6:71:d9:e9:25:7a:b5:16:92:5b:17:01:82:0f:
                    da:f7:c6:1a:85:7b:c4:54:4c:e8:0f:6f:5b:0d:34:
                    4c:ce:58:17:a8:f2:d4:df:37:85:e2:63:1c:93:79:
                    b9:b5:d8:2c:f0:35:49:08:f6:18:c8:42:7c:ca:2e:
                    bf:88:1e:2f:f8:ff:83:de:ec:31:36:07:bb:2b:d9:
                    da:85:44:48:8d:c4:35:14:00:40:65:4a:3f:17:ab:
                    7e:cd:12:87:19:bc:76:23:ca:ee:9a:04:00:40:c0:
                    e5:77:c3:c3:ea:eb:26:e6:a4:7d:0d:b9:c1:af:b5:
                    04:03:73:b5:a9:cc:f4:a9:9d:2e:b3:3e:79:02:b4:
                    e2:98:23:d4:01:43:b8:ef:f5:9d:27:e4:5a:c4:bf:
                    10:f2:48:5f:3e:30:98:28:cd:a7:f8:13:2b:a1:83:
                    f9:cb:18:80:d3:dc:7a:2d:ea:6e:c3:bf:3e:2f:16:
                    77:ad:cf:07:20:0d:46:a2:6a:d3:95:34:a6:ed:aa:
                    af:5b:f5:0f:88:2c:45:3c:d8:8e:17:56:72:39:69:
                    8f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:37:73:34:95:0A:4C:2F:79:B0:1A:EF:16:A7:29:8F:FB:A9:96:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e727d729-e439-4963-b6df-9b7aec75f8e1/f9b63be0-4e77-3548-95c8-c67bb50729dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e727d729-e439-4963-b6df-9b7aec75f8e1/e727d729-e439-4963-b6df-9b7aec75f8e1.crl

            X509v3 Authority Key Identifier:
                keyid:5F:1B:E0:33:1D:DE:F6:48:34:80:91:29:ED:C0:37:6C:67:5D:06:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e727d729-e439-4963-b6df-9b7aec75f8e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c5:c3:92:dc:a1:2e:21:08:6f:ce:3c:8b:0b:a9:f0:a9:de:
         ea:66:f0:2b:e1:47:9f:ff:e2:12:57:ae:bb:55:04:85:c1:c2:
         2e:e8:2d:2d:93:5e:64:31:c7:46:bf:65:9a:85:22:c5:ab:d5:
         d7:e3:3b:ff:bc:e4:d7:c0:be:23:4e:23:01:bd:50:ab:fe:fe:
         35:9b:4f:c9:01:39:03:fc:96:37:e3:d4:b4:14:53:db:c6:9f:
         dd:f3:c3:cc:ff:c3:6b:60:fa:ca:f4:12:0c:61:be:6f:1f:9f:
         88:5c:a4:ad:5c:45:d3:22:96:88:54:74:88:ce:89:13:6d:81:
         29:c5:66:f1:d8:58:e1:f6:cc:3a:a7:89:f7:72:9d:1d:0a:20:
         ec:78:8e:c7:85:3c:ba:e2:b0:4a:09:ff:3c:40:1f:ab:40:60:
         1a:be:b5:09:b4:97:f7:03:3d:b1:21:04:d6:b9:5f:8a:fc:26:
         50:cf:c9:bc:29:c5:60:83:ee:fd:fb:e0:5d:12:52:38:46:66:
         34:79:8d:e9:a6:9e:52:d1:bc:97:0e:9d:43:4e:ea:a8:b4:89:
         3e:bc:a7:5d:71:23:5c:fe:8c:01:5b:c5:58:55:eb:3f:d9:ae:
         6b:0f:fc:d9:75:0d:62:c3:32:5c:b1:02:d1:d5:07:ea:41:63:
         d6:b3:59:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:42:44 2025 by rpki-client