Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa
File:                     e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa (raw, json)
Hash identifier:          6K3YonYd/NI5J8ozaDfPig2l+zkavysMNF7VD440UDY=
Subject key identifier:   0C:EE:F0:45:26:3D:23:F5:17:54:32:B9:3B:C8:92:2B:25:C9:FD:5F
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F432858483CF5A9FCCAD70D1C6FAFB600
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa
Signing time:             Tue 17 Dec 2024 16:10:22 +0000
ROA not before:           Tue 17 Dec 2024 16:10:22 +0000
ROA not after:            Mon 17 Mar 2025 15:10:22 +0000
asID:                     21949
IP address blocks:        207.22.0.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3c:f5:a9:fc:ca:d7:0d:1c:6f:af:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Dec 17 16:10:22 2024 GMT
            Not After : Mar 17 15:10:22 2025 GMT
        Subject: CN=87ffe8a0-a306-4ea0-8680-7a60e65b9557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:59:27:b1:41:16:db:b1:0c:1a:a8:2b:78:91:
                    ef:85:ed:ae:da:42:0f:2f:a9:e1:76:41:da:0e:4f:
                    3b:7c:e2:4f:af:8d:8d:25:50:8b:90:ca:a7:f6:db:
                    38:20:67:b3:13:f9:c4:82:71:cb:72:c8:1a:d3:6a:
                    55:cf:32:1c:5f:22:36:26:19:c3:02:5e:a5:6c:6a:
                    3d:94:5b:e5:24:6b:0a:f8:1c:87:72:35:62:b3:88:
                    16:b8:e6:41:83:01:1b:a4:9b:5e:d1:7d:12:84:02:
                    1e:b6:9d:00:60:c7:e1:0a:8a:7e:2a:1c:61:08:84:
                    c7:66:e7:14:1c:47:3a:e8:11:c0:3b:13:16:9b:be:
                    01:d3:c3:83:d0:00:43:d8:11:06:88:57:b7:ab:be:
                    df:4c:c0:e1:85:2a:f4:39:b9:17:f0:9b:8f:91:53:
                    0d:ee:39:ff:9c:90:12:90:74:35:ee:c4:8e:78:55:
                    38:c9:fb:ee:5f:be:fe:2b:6b:13:3a:a9:8b:b0:e2:
                    29:94:cd:99:3f:13:ff:b9:90:9f:cb:9c:e0:1b:64:
                    6b:ec:86:a2:51:65:01:38:80:df:79:91:63:4d:ef:
                    45:d8:94:2f:d4:45:f9:d2:63:56:ab:a2:c4:b5:a7:
                    5c:b9:5c:a3:01:fd:9d:46:5d:63:29:26:6d:58:cb:
                    72:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EE:F0:45:26:3D:23:F5:17:54:32:B9:3B:C8:92:2B:25:C9:FD:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ba:ee:b0:3d:2b:f9:a3:de:f7:23:0f:90:e9:2a:78:74:77:
         8e:e1:15:e1:8d:3e:31:ba:21:50:ab:56:8e:ae:bc:1e:e0:a2:
         ef:3c:41:07:4d:c3:ff:57:ca:21:e0:27:59:38:36:37:e4:28:
         b9:75:62:4f:27:60:1b:dc:56:50:1c:b5:b0:c0:e6:a9:82:91:
         fa:e5:52:cf:b4:02:1b:31:92:66:1d:5c:b1:10:51:be:01:aa:
         b4:89:a9:15:39:3e:92:9d:21:a8:87:93:be:06:e5:7e:a6:20:
         bd:76:43:54:a2:58:14:4f:44:c4:27:43:bd:1f:6b:98:e6:b2:
         0f:e7:47:3b:22:8e:81:9f:91:d8:a0:bd:cd:01:57:c9:fb:ba:
         ec:21:2b:84:d3:23:58:23:9e:6b:b9:ef:eb:e5:77:9c:2c:56:
         63:6d:8c:39:f2:86:11:65:f5:6b:09:79:0b:81:87:80:42:75:
         56:0b:74:63:f4:74:38:b1:d3:18:cc:24:bc:fd:bf:32:f3:fa:
         03:3d:89:f2:b1:3a:ec:91:e4:dd:36:f5:44:26:75:1e:73:fe:
         e9:0a:a0:a9:57:26:2f:86:44:59:80:6e:1e:8c:e0:32:c4:cc:
         b9:3e:94:cc:ed:7e:16:41:e6:e6:f3:3f:bf:95:2d:ce:67:84:
         20:2d:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:52:58 2025 by rpki-client