Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/469a57a5-8da5-3433-8f8e-c8eec2fa9a96.roa
File:                     469a57a5-8da5-3433-8f8e-c8eec2fa9a96.roa (raw, json)
Hash identifier:          kV+F1BkegtAEoUzaXt+JLyz8l1qXvGTeU4rwJUe3eVE=
Subject key identifier:   42:11:EA:09:4C:88:44:8E:C5:F5:56:D3:A7:AB:2C:AE:6E:FA:6E:21
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F154F53013E20A4CE4F87100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/469a57a5-8da5-3433-8f8e-c8eec2fa9a96.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        40.134.184.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:54:f5:30:13:e2:0a:4c:e4:f8:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=d84259a2-e606-4b83-a78c-abd7952a7551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b8:d4:de:bd:61:fa:5e:2b:52:33:09:d9:3e:
                    ac:6f:36:07:78:ca:d7:3b:09:a5:e0:4b:6d:bd:5f:
                    aa:ea:04:8b:b1:69:d0:08:98:e6:85:2c:c4:f8:3d:
                    12:4d:03:75:2d:ea:88:77:24:eb:b9:1d:c5:01:65:
                    aa:5c:82:ae:64:f4:ae:06:5b:e6:23:e6:64:2d:cf:
                    76:5a:d3:fa:c9:03:31:f6:d3:65:96:a0:d1:c9:7c:
                    d2:37:98:cf:68:b3:4d:92:e6:36:80:2f:47:a0:1d:
                    39:79:3b:20:27:ef:2d:f6:3d:95:79:11:25:45:b8:
                    a0:c9:9a:a7:18:48:e4:05:e8:ea:79:5c:4b:92:9b:
                    00:71:a6:5b:00:b4:91:f9:c2:72:7a:70:b2:ff:1b:
                    9e:54:54:38:9a:ba:3c:a4:64:2e:36:92:f2:c6:f9:
                    f6:f9:c5:21:5f:2b:54:92:e3:ee:70:c1:0e:2e:fd:
                    c1:5d:ee:5e:f5:2b:37:92:9a:24:29:22:fa:15:e3:
                    7a:ff:c0:b4:fa:5d:ba:2b:8f:a0:0f:5a:f6:2a:b9:
                    8f:22:66:0c:99:d4:d7:4c:e7:83:d9:86:c0:9a:90:
                    15:af:32:89:dd:7e:cc:e2:7d:67:cf:2a:ca:26:55:
                    5c:7b:41:d3:4e:4c:31:d8:4e:a5:4e:65:7e:35:25:
                    da:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:11:EA:09:4C:88:44:8E:C5:F5:56:D3:A7:AB:2C:AE:6E:FA:6E:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/469a57a5-8da5-3433-8f8e-c8eec2fa9a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.134.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6c:eb:fb:44:86:da:e0:26:ae:6b:0f:dc:52:9d:c8:2d:74:
         4a:51:a4:9b:50:2f:90:76:fe:88:a0:52:a2:f4:3f:72:60:41:
         fb:09:6e:42:d5:f6:bd:be:d5:a5:8e:64:65:00:df:e4:a6:d3:
         d3:8e:0f:86:0f:76:d0:6d:ef:5c:76:f2:83:69:c5:bc:b5:bd:
         21:88:2e:b0:e2:9f:6a:c6:b2:9d:9b:8d:4f:38:29:6a:22:b2:
         08:50:1e:ab:0a:23:2f:1e:39:1d:b8:ed:b8:40:0a:ff:ad:1a:
         89:df:67:3b:bc:98:0d:39:71:b1:fd:f4:c1:ed:c8:ff:c5:e6:
         51:ac:70:e3:32:d1:92:19:fd:02:6c:3a:18:1f:46:b4:34:a6:
         3c:39:fc:ec:f9:b2:49:34:46:be:55:60:c5:aa:b1:fa:f4:04:
         90:27:20:fc:56:bd:69:fe:f6:ff:ab:5e:49:ae:8b:58:41:0c:
         11:67:82:80:25:a1:09:9d:32:14:3b:b9:6e:76:2b:f0:f2:db:
         e8:68:ba:59:6f:5f:a8:c9:c8:a5:af:c6:25:a0:f4:43:c3:2c:
         59:3d:ec:8b:cd:7c:ed:aa:a3:e8:c5:4d:b2:37:c3:cd:d0:de:
         df:43:1a:17:b9:e6:b8:a3:3c:49:91:28:e1:23:2c:c0:5d:3e:
         5b:67:50:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:22 2025 by rpki-client