Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4e92900-c6fe-3a90-9815-f1ee0f051193.roa
File:                     c4e92900-c6fe-3a90-9815-f1ee0f051193.roa (raw, json)
Hash identifier:          p8y66ghMFHUJcHK8ibZcxaW3KQj13pgFN+FRW6h2siI=
Subject key identifier:   F3:29:7D:20:99:0F:FE:25:12:3C:4B:8D:0E:4F:F6:89:8D:CC:36:3E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858488AE0B48C978583E45D530480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4e92900-c6fe-3a90-9815-f1ee0f051193.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     7029
IP address blocks:        98.20.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:b4:8c:97:85:83:e4:5d:53:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=df499163-6b8d-438e-ae4f-ee5898f36441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3d:93:58:3d:a0:52:1d:84:79:d5:c8:48:4f:
                    ae:02:48:0c:97:c3:bf:75:cd:e9:99:99:af:a4:31:
                    de:58:3d:ce:b9:fb:19:37:f6:98:e2:7d:29:1b:dd:
                    56:ae:e7:48:9b:50:e2:28:11:7e:0d:29:24:db:c8:
                    a0:28:33:e1:98:b8:2a:f0:f8:29:f6:c4:cf:2f:21:
                    90:89:d2:b5:48:27:52:70:19:ac:db:4e:25:a3:d4:
                    18:47:60:46:1c:28:1d:39:ba:98:62:e6:a8:bb:73:
                    3e:33:5a:79:e3:05:74:4a:44:95:17:0e:45:4e:ca:
                    99:50:e1:bc:8c:af:54:98:06:bf:7d:7f:3b:ec:50:
                    d3:48:06:7f:13:01:c7:4b:72:78:4e:3b:73:67:b4:
                    f2:dc:43:73:91:0f:e0:32:a7:a6:b7:7b:97:82:84:
                    f9:40:a7:07:2e:d2:6b:69:56:10:59:13:8d:f9:ad:
                    d9:33:ea:92:cb:d8:04:3b:df:6c:55:18:26:8c:a6:
                    0b:9a:72:ec:3c:6c:12:a0:f2:85:85:6d:83:ac:7a:
                    5d:47:76:b8:ee:04:58:be:e0:12:c4:a3:dc:9d:b3:
                    c2:86:7c:4a:83:bf:8b:fd:ca:26:52:b2:02:39:08:
                    fb:42:20:f8:8a:07:d4:72:0b:4a:37:55:5d:d4:cd:
                    18:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:29:7D:20:99:0F:FE:25:12:3C:4B:8D:0E:4F:F6:89:8D:CC:36:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4e92900-c6fe-3a90-9815-f1ee0f051193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.20.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a0:13:71:8f:4e:59:8e:01:3f:6c:25:85:9d:91:aa:69:4f:
         54:db:8d:37:2a:3d:e4:68:77:bb:8f:9d:60:da:21:59:81:79:
         eb:df:88:93:05:48:48:ea:ad:87:56:98:21:0f:b4:d4:f0:bb:
         7d:53:8a:7f:dc:f5:db:37:1d:24:3c:14:2c:c1:51:3a:65:59:
         85:67:6a:1a:7a:83:ae:f1:60:ec:d8:a1:5a:60:9b:f0:34:4e:
         3d:52:96:35:bb:95:5f:ee:1a:82:66:42:ec:20:c7:81:c7:f7:
         da:e2:90:d4:f3:cc:75:21:0c:89:74:c4:75:54:40:9c:cb:7a:
         28:b3:33:94:21:be:3f:2c:63:99:19:b3:b9:58:41:36:3f:9a:
         b8:77:ae:fb:bf:cb:0c:7b:23:0f:c0:f3:32:c5:27:d5:be:fa:
         fa:ee:22:f2:6b:55:8d:f2:61:98:bd:ad:36:70:8b:2b:90:49:
         d8:d3:6b:9e:7f:38:23:dc:44:1e:26:5e:1d:f0:5d:1d:fe:ce:
         74:1d:37:a6:02:40:92:27:f7:8b:5a:db:64:b2:3c:f6:bb:c3:
         b9:9a:5f:0f:aa:3e:af:c2:9a:cc:1b:7a:a5:65:c8:9c:91:c4:
         75:d9:21:cd:d4:c7:92:22:1d:61:2a:af:d5:fe:59:46:23:36:
         ee:6a:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:04:17 2025 by rpki-client