Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de489e93-9e7d-3cda-8126-d8c859ae8754.roa
File:                     de489e93-9e7d-3cda-8126-d8c859ae8754.roa (raw, json)
Hash identifier:          yjBkAQxATOyGCZquFMRXTR70DaMOY8vD8MHEUsgTx6M=
Subject key identifier:   7D:94:B8:34:B9:68:34:39:5B:A9:69:30:3F:2B:25:F8:F2:6D:D1:7E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847EFEF860C4E5684FC934DDA40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de489e93-9e7d-3cda-8126-d8c859ae8754.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     7029
IP address blocks:        40.142.200.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:86:0c:4e:56:84:fc:93:4d:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=ff6f834c-859e-4887-8a16-4de651bbbaae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cb:dc:66:e6:bc:b0:ee:79:a5:89:f4:ea:5b:
                    39:22:ec:69:79:a0:2f:5d:7d:70:e5:07:65:ac:fc:
                    81:46:aa:24:fe:b1:bc:97:06:58:a1:77:5a:8a:a0:
                    ee:e9:47:6e:8f:47:4a:23:f8:1e:6f:ae:2e:3e:a5:
                    46:56:80:19:71:1d:95:2d:87:3e:1d:1c:1b:8c:3c:
                    a1:c5:45:a7:cb:0b:be:79:0d:cc:df:61:22:48:d7:
                    6c:58:ee:b9:54:38:aa:3a:79:59:76:fb:f3:ab:56:
                    13:51:d4:08:30:96:32:ae:70:c1:02:b8:ee:0e:fc:
                    d5:db:4b:53:e7:f6:34:4a:c9:05:e5:52:d7:25:c3:
                    69:1c:09:29:e2:7d:58:6b:a5:b0:43:39:7f:c9:d9:
                    5a:d4:61:bf:4c:a6:46:68:d6:43:9e:2f:1f:63:21:
                    0f:33:ca:18:eb:7f:e0:06:17:c5:fb:7d:92:55:e2:
                    ad:25:19:46:c2:99:53:79:86:6b:bd:f3:38:be:02:
                    ab:3a:33:e0:5c:f1:24:cf:b0:bb:8d:79:5e:59:69:
                    c8:ef:64:d9:01:8e:5f:06:f5:04:0b:ca:2b:ed:84:
                    f9:78:4e:66:8a:ec:aa:63:c8:f3:af:12:22:e7:1a:
                    d0:38:3d:2f:55:8c:01:01:43:cb:59:54:49:9d:ad:
                    0a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:94:B8:34:B9:68:34:39:5B:A9:69:30:3F:2B:25:F8:F2:6D:D1:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de489e93-9e7d-3cda-8126-d8c859ae8754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.142.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d5:1b:ad:d4:01:7d:d9:9b:9b:82:11:6a:dc:a8:63:af:fc:
         a2:5f:e7:d0:4d:1e:bb:9d:0b:db:5c:07:1b:1e:7d:08:96:61:
         ad:3e:59:eb:54:a1:49:7e:1e:3e:ca:d3:11:d0:ae:2c:5c:ee:
         52:a7:a0:5b:b7:ca:f5:19:0a:9b:c4:db:8d:c5:49:52:ad:25:
         6c:65:06:1b:fa:7f:76:32:b0:62:8a:24:2e:41:4b:51:79:5a:
         e1:fe:89:69:be:1d:3f:b5:a1:23:14:76:33:91:7e:49:12:ab:
         aa:64:15:d4:dd:6e:e0:6b:f1:a9:20:cd:6e:30:c6:99:d1:de:
         b5:c8:7b:2f:76:64:3e:33:da:5c:ee:17:67:e8:cf:be:63:fc:
         6d:6a:82:e2:4d:bf:dd:67:9d:11:a6:e9:b2:df:e0:f0:9e:68:
         0c:95:90:77:a9:43:a2:c2:69:e7:e6:ce:26:f8:9b:86:90:1c:
         e3:03:20:8c:63:a5:89:03:9b:52:d7:f8:4a:d1:29:d2:a3:34:
         be:c2:62:54:03:55:61:6e:47:98:ee:13:4f:50:4c:85:72:89:
         88:c7:82:25:b2:12:90:b3:0c:c7:6c:91:b6:f2:6a:69:dd:73:
         50:c4:f1:55:27:7a:06:3a:4c:af:cd:4d:47:c8:4c:2f:15:7a:
         c6:e8:24:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:38:35 2025 by rpki-client