Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a497725a-c9d8-30b4-ab87-e0665089bff2.roa
File:                     a497725a-c9d8-30b4-ab87-e0665089bff2.roa (raw, json)
Hash identifier:          oSmhqSOPVfaD2iG/upsXBMRgsmBgkFlK7gQd7tbk3xk=
Subject key identifier:   67:9E:3A:24:BB:32:14:7D:E2:F0:BE:19:75:BD:6A:45:A3:47:0C:19
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F154FF3F07EB866D361B0900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a497725a-c9d8-30b4-ab87-e0665089bff2.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        98.16.216.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:54:ff:3f:07:eb:86:6d:36:1b:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=d1986edd-324c-4d41-9f3c-834e5b6ff737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:5e:b4:13:df:51:3f:6c:c7:2a:86:09:be:
                    c4:bb:70:4e:d6:80:d1:c2:5c:24:c6:d6:0a:12:c5:
                    47:71:c5:36:7c:f7:88:0f:01:89:91:1d:dc:4e:0e:
                    88:5e:2a:d0:00:de:cf:fe:3c:1c:3a:4b:68:bc:66:
                    a0:1c:a3:00:6c:0c:a2:6f:cc:d5:b0:0d:cf:5b:75:
                    1c:04:ca:24:c2:91:7d:29:b4:a4:89:5d:44:60:8f:
                    ad:60:8e:c0:fa:75:36:ce:62:ad:09:cc:60:79:d1:
                    62:2b:1b:50:5e:1e:f6:cc:35:7e:e1:00:a1:7e:24:
                    5c:66:2c:2a:d9:3e:77:d1:07:68:2c:b2:c6:4d:11:
                    92:1c:21:83:6d:4c:26:df:32:06:28:63:02:68:6c:
                    6b:a1:0d:51:e5:f3:29:75:3c:1e:ef:ea:8a:d6:1d:
                    fb:34:8c:97:46:c6:8d:21:68:3a:39:4b:4f:45:ca:
                    92:9e:e0:f7:2d:34:2f:ff:10:f3:f4:ec:e1:5c:12:
                    68:18:6b:7c:3c:ee:e8:96:20:d5:8e:c1:f2:6d:4a:
                    e2:e6:48:f0:3e:24:91:43:92:0e:64:06:f2:b2:18:
                    ed:e5:42:b9:42:83:77:eb:f8:ac:9e:0f:b8:c0:6a:
                    83:30:0d:f4:40:20:c3:76:52:c7:ca:61:ae:64:50:
                    e9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9E:3A:24:BB:32:14:7D:E2:F0:BE:19:75:BD:6A:45:A3:47:0C:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a497725a-c9d8-30b4-ab87-e0665089bff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.16.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:35:4e:4d:c0:54:b8:59:58:e6:55:27:29:ba:a0:84:c8:61:
         b5:11:46:fb:fb:a5:e9:1f:cb:30:7b:66:7e:e0:9e:f6:64:da:
         72:4c:ec:75:fb:bd:d4:c6:65:e9:22:ac:94:32:d7:13:c9:af:
         0f:f5:36:7a:69:ae:d0:77:51:1e:5a:3c:8b:8f:59:48:88:fc:
         7d:38:e1:0c:20:a7:9b:13:b6:7e:45:71:21:1d:d5:1b:7b:6d:
         88:a6:eb:f9:df:2b:21:36:35:55:a6:98:4a:57:1c:c4:b6:50:
         f5:d1:a0:2d:b2:01:af:2d:35:fd:ea:c3:d6:8d:0e:7f:a4:e2:
         d1:3f:32:62:25:5f:13:cd:0b:ba:ed:87:df:36:55:1e:39:fc:
         9d:73:88:20:31:6a:f9:bf:83:bb:37:43:61:86:bb:4e:53:d9:
         b8:c1:9d:d0:de:8b:13:2d:6b:52:21:a5:71:08:cf:82:1c:10:
         a9:fe:99:46:44:34:5b:73:e8:cc:96:55:d1:21:ea:be:69:30:
         26:c6:6c:c5:59:c6:25:25:59:33:5d:fe:f7:40:04:21:40:95:
         89:ad:6c:66:9e:b4:54:59:30:1c:f8:3e:2b:fc:47:7f:12:92:
         c8:08:52:ad:5c:26:a7:03:0d:01:ad:b1:df:73:35:67:81:91:
         3a:01:bd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:09 2025 by rpki-client