Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/121b201e-674e-3e6c-8bff-44dd04fc884f.roa
File:                     121b201e-674e-3e6c-8bff-44dd04fc884f.roa (raw, json)
Hash identifier:          BNoTipVQjnHz9wXVopm2SwbjgilGHX+4hnXRh0jGVdI=
Subject key identifier:   58:24:A1:5F:8D:5E:0C:8A:47:D0:78:A1:99:9C:A5:88:00:16:3A:48
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F1550924510EBB06811A0680
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/121b201e-674e-3e6c-8bff-44dd04fc884f.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        209.92.8.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:09:24:51:0e:bb:06:81:1a:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=a59001d2-d60b-4db0-8312-fb12e670ad29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:f7:2d:f6:af:92:44:0d:f9:55:1d:e6:16:
                    5a:74:50:67:c2:9e:c7:25:e3:41:a5:42:a2:25:81:
                    a4:3f:c5:ad:5b:6c:f9:52:47:33:b4:f4:b5:6d:e1:
                    66:65:4a:b9:96:a6:5c:d8:fe:4e:fe:ed:d6:8f:10:
                    f2:ec:65:3c:fd:4d:b8:12:3a:9e:03:d1:b2:99:6d:
                    ed:f3:8d:11:c8:6a:c3:c3:09:8b:01:24:41:19:77:
                    62:4f:12:61:6f:de:7b:61:5b:3b:52:fa:6e:46:b0:
                    4b:2a:77:bb:ff:65:12:ee:c9:fc:8d:d1:2b:15:2d:
                    c5:5f:9c:59:83:4e:4a:d4:3d:6e:b2:c7:d9:fc:9a:
                    48:83:58:2c:89:31:77:39:b6:aa:2c:93:84:7a:c4:
                    bc:b1:ca:f5:ae:df:1e:46:cc:92:f8:3e:97:5b:f7:
                    e4:49:73:df:57:53:3c:6d:67:52:62:09:fa:83:a3:
                    8c:2b:07:65:44:8d:da:d2:b3:c0:d8:3e:ba:87:0b:
                    fa:d6:77:d7:6b:4f:74:01:81:11:79:ca:cf:a7:5b:
                    75:0d:8b:3f:be:16:b7:42:76:53:b8:cb:bc:ce:47:
                    ff:d0:ce:53:68:55:d1:d1:66:27:89:7d:f9:4d:32:
                    a4:42:fc:9c:e8:3e:7d:92:d9:a8:64:e9:6a:c0:61:
                    f6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:24:A1:5F:8D:5E:0C:8A:47:D0:78:A1:99:9C:A5:88:00:16:3A:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/121b201e-674e-3e6c-8bff-44dd04fc884f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:50:a1:cb:89:d0:3c:eb:1e:ce:86:fc:11:b9:2c:f7:a7:89:
         90:64:dc:81:50:fb:0d:d5:b2:c9:67:b0:4b:de:69:86:40:ad:
         a1:e1:96:35:97:21:e2:56:21:f6:6d:01:53:e1:66:16:1c:6b:
         9f:c5:8e:08:69:c6:de:24:0d:08:de:55:67:83:64:32:88:1e:
         cf:9b:2b:12:35:ef:61:d4:47:24:12:0d:a5:f7:46:c4:0e:00:
         be:46:1f:4a:dd:84:ea:1e:65:20:f5:57:d6:d7:f7:e3:ea:ef:
         5e:dc:f5:79:4e:b7:a0:8f:0e:d3:ff:60:27:bb:65:9a:01:be:
         b7:f1:3e:c0:02:7b:20:6a:d5:d4:8b:71:35:1a:41:a3:3b:79:
         59:cc:0a:05:46:69:93:e4:0e:6b:1d:ef:86:4e:09:aa:3d:d3:
         93:fa:b6:79:8a:c2:93:11:d9:94:14:c4:f0:1e:11:42:fc:52:
         24:f7:8b:89:f3:74:f1:33:a4:58:42:27:17:b2:a7:ad:5c:84:
         90:40:2f:71:82:c7:4b:58:36:08:27:ca:34:38:5d:1d:a1:f5:
         a6:30:f9:05:53:61:24:64:fe:bb:e6:61:fe:98:c1:8a:f2:ba:
         3e:08:37:f4:fc:68:52:31:08:41:0c:8f:d9:92:06:19:a1:f8:
         4d:5a:f6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:46:29 2025 by rpki-client