Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4eb2d6e5-6dcf-3008-a232-4e3c5a59ba7f.roa
File:                     4eb2d6e5-6dcf-3008-a232-4e3c5a59ba7f.roa (raw, json)
Hash identifier:          zNcxV+tdxada+UJzP0Yrf3a9f1hsNiCz1emxjMewbjE=
Subject key identifier:   3C:EB:66:6B:E3:47:95:CD:BB:DC:D9:A6:BC:DC:5E:C6:9E:00:9A:DE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F155030518111D941ED6DA00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4eb2d6e5-6dcf-3008-a232-4e3c5a59ba7f.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        162.40.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:03:05:18:11:1d:94:1e:d6:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=9afd542d-b921-4f00-8421-646a44530fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:96:22:86:df:11:23:9d:63:f3:95:35:1d:
                    f2:32:26:b5:99:66:1b:ea:90:dc:f4:3f:56:14:1f:
                    ed:f4:44:9a:de:1d:7a:1b:0c:1d:9c:b8:28:e6:00:
                    c8:25:ac:c3:24:93:4c:17:55:f7:a7:a0:2e:ca:2a:
                    cf:49:9d:e4:a2:cd:19:78:06:83:31:dd:8b:30:a5:
                    bd:ad:2d:1f:0e:ce:7b:37:b3:23:d7:a7:79:b4:14:
                    3e:3a:f5:ff:78:16:7f:c8:6a:3d:e0:1c:22:19:1d:
                    8d:e3:fb:dc:3e:5e:82:79:f3:89:97:33:e5:26:b8:
                    87:14:20:f7:67:b4:4b:39:cb:8f:2c:4f:e6:b3:2f:
                    43:8c:a8:fb:ad:4b:bd:0f:7c:9e:c5:b0:4b:54:ee:
                    a7:06:47:81:80:37:07:a8:bb:c0:54:d7:b6:03:32:
                    dc:04:ea:ad:ae:2a:71:9f:50:a8:d8:d2:f2:71:7e:
                    a4:d5:24:5f:93:62:d2:41:df:8a:8c:05:9a:b8:a8:
                    10:1b:68:cd:ab:3b:55:51:b4:fc:91:d4:e4:d7:55:
                    e7:9e:56:e2:25:8e:7e:e5:66:ec:76:7d:20:da:09:
                    19:25:cc:8f:32:b3:8b:12:e0:46:ac:5c:35:52:e8:
                    b3:80:ff:52:74:fb:a9:8f:64:c1:0f:8c:7d:18:07:
                    46:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EB:66:6B:E3:47:95:CD:BB:DC:D9:A6:BC:DC:5E:C6:9E:00:9A:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4eb2d6e5-6dcf-3008-a232-4e3c5a59ba7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.40.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e4:0a:1a:88:77:a0:8a:4e:89:a0:ff:b9:77:1a:dd:46:50:
         ea:99:65:23:a2:35:a8:15:b0:a8:91:d0:f8:c6:ab:66:ba:9b:
         65:43:84:21:1e:b0:23:d1:a9:e1:82:fe:f6:76:90:37:01:c6:
         af:71:d5:41:4a:5e:49:e7:de:c6:fa:75:32:95:88:f5:d8:8e:
         71:40:f2:be:c0:bb:bc:7f:57:19:9f:e3:32:e8:49:fc:d6:2b:
         04:02:3e:cd:58:80:94:96:f7:25:bb:87:3e:77:c7:5b:e5:54:
         b4:1a:47:fe:21:c6:6b:fc:5b:8b:d5:c9:a5:c6:74:d0:94:bd:
         18:35:98:7d:b8:c8:15:e0:74:ca:c7:c8:0e:e4:66:52:37:fc:
         64:b1:c5:e2:f3:a6:3a:28:a2:b0:99:5e:cc:0d:28:00:13:86:
         da:b2:7e:d3:cb:32:04:31:9e:0c:fa:7f:65:83:9a:e0:33:3a:
         ce:86:c9:e5:7b:c8:72:c0:64:f4:30:de:fb:90:c3:f9:e7:b1:
         bd:f8:f8:75:14:54:40:65:66:b7:a2:1e:69:c2:cc:9e:c2:53:
         aa:19:fa:62:08:da:66:05:e5:c3:18:7f:1b:57:10:e7:06:da:
         a7:64:d5:8a:1f:15:e1:c5:0f:b0:d4:d4:82:e3:c3:8c:a9:31:
         a5:f9:77:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:30 2025 by rpki-client