Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/fa0a09b6-862a-32cd-98d8-c131ba182dc1.roa
File:                     fa0a09b6-862a-32cd-98d8-c131ba182dc1.roa (raw, json)
Hash identifier:          L2xDnw/RPqUkW1cXB1kDKijle8dtbaQsFZWdqXbcKXo=
Subject key identifier:   47:96:6F:52:ED:40:D9:4B:02:AD:0D:60:C0:D6:88:78:E8:40:93:A2
Certificate issuer:       /CN=14f19494-e6ec-42e7-bce4-8903df1f6f9d
Certificate serial:       010D0C9F43285848424AE20039C8A4848C198040
Authority key identifier: D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/fa0a09b6-862a-32cd-98d8-c131ba182dc1.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        199.124.28.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:e2:00:39:c8:a4:84:8c:19:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14f19494-e6ec-42e7-bce4-8903df1f6f9d
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=f2029115-7765-40bb-bf2f-84a3a3b90455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6a:21:60:31:ab:68:28:7f:95:f0:bf:25:30:
                    6f:10:bf:a7:c0:ec:30:13:71:1c:e8:1a:7b:f9:a2:
                    b0:87:78:21:88:34:f6:28:ca:be:c9:7f:6c:1a:ea:
                    2d:37:45:3d:ea:2f:9b:8e:ad:f2:dc:95:3d:eb:62:
                    1c:ea:50:cf:86:31:e3:f8:6b:0b:a3:21:cb:bb:10:
                    38:3a:db:ac:78:c5:38:22:ce:7e:88:81:fd:c9:b4:
                    0f:56:e0:b0:41:d9:3e:48:a9:fe:8e:9a:7f:76:06:
                    b1:8b:4c:1b:d4:3a:fa:51:d5:a2:18:4f:bb:6c:d4:
                    9e:1b:22:81:b5:cd:65:34:1c:3f:0e:c3:e1:46:fe:
                    67:89:09:d9:e0:a7:e1:7f:eb:74:f0:1a:b6:7e:64:
                    45:d0:e3:b1:ef:c4:be:bb:b4:b6:5f:43:0a:fb:71:
                    85:16:45:c0:a3:18:b4:af:6c:9e:2b:a2:aa:ba:8c:
                    e0:10:e6:71:2b:f4:8a:3b:b0:5e:a7:33:4f:31:43:
                    92:26:35:02:43:68:e4:d7:6c:fd:a3:a3:26:18:b6:
                    0e:8d:76:a1:42:69:23:50:cb:e7:07:62:4a:60:3f:
                    94:b6:19:94:11:32:e3:1e:ee:5b:78:02:54:ef:08:
                    3b:dd:e5:96:77:0e:f6:da:e8:9a:65:87:e6:12:73:
                    a4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:96:6F:52:ED:40:D9:4B:02:AD:0D:60:C0:D6:88:78:E8:40:93:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/fa0a09b6-862a-32cd-98d8-c131ba182dc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.crl

            X509v3 Authority Key Identifier:
                keyid:D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.124.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:62:2d:7a:f1:33:be:92:16:9c:49:cd:4e:75:e7:69:32:29:
         2f:3d:38:aa:fd:30:38:d4:0a:9f:e6:93:7b:5c:63:a5:5a:f5:
         bf:3c:4c:dd:7d:5c:b1:25:74:68:e9:cb:d5:09:b3:87:ba:bc:
         64:1e:6a:30:a9:63:c4:98:bc:de:33:c3:e2:a0:0f:fe:08:75:
         50:5c:e6:3b:4b:0c:85:0f:ca:ac:13:74:06:d7:67:d4:f9:04:
         62:b5:80:a0:e4:d4:0d:b4:40:e4:6c:34:95:f8:f2:db:e2:8b:
         0d:5b:11:d5:44:79:d1:7f:90:a6:7a:2c:79:e5:71:7a:9c:f3:
         10:5f:83:01:68:d1:e7:07:35:b6:15:4d:38:cf:94:91:f4:55:
         54:b2:f8:84:6d:1b:b8:a9:8b:6c:bf:dc:49:02:33:ea:3d:49:
         ef:15:a0:44:89:aa:36:9e:f9:87:45:99:0d:18:95:0e:cf:8d:
         54:e6:75:fb:1c:d9:46:c3:4b:b2:42:ec:84:2e:de:d5:4c:8c:
         a4:49:42:c1:cb:6c:fe:75:56:6c:19:bc:77:9a:3a:d7:46:de:
         2d:c7:4a:86:54:f0:58:d4:2f:19:bd:4f:5c:42:fb:79:70:69:
         76:ef:4f:fe:57:0e:5a:ff:32:bb:0d:6a:f8:06:80:65:a2:50:
         e2:66:2b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:08 2025 by rpki-client