Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa
File:                     3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa (raw, json)
Hash identifier:          jbVt0eAykmVjvaXCvLa4Klimj/2/Q1Nz91ZKmcgBTQ8=
Subject key identifier:   D8:C6:CD:7C:5B:F0:6D:B3:B9:46:CA:19:F5:A2:77:C2:AA:C6:44:4D
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F43285848854B49D3010E202EC7ECA6E0
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     3630
IP address blocks:        199.109.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:49:d3:01:0e:20:2e:c7:ec:a6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=692aff2c-b996-4fc1-8799-d4425642a4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:af:1b:49:e1:c3:05:f1:b0:d6:e3:81:71:d9:
                    a3:93:ae:2a:27:8b:84:60:fd:f4:98:36:a6:b3:d5:
                    a0:c3:03:4c:ff:29:29:f3:a8:69:5c:b9:9b:0e:df:
                    ec:a4:20:85:d6:c9:a9:c6:e8:3b:54:24:87:7d:3e:
                    89:d7:95:87:06:d4:7e:e4:76:68:66:90:89:5b:9d:
                    b7:20:36:c8:aa:14:92:62:6d:44:bb:81:09:08:a0:
                    6f:e1:9d:da:14:ed:c5:2d:bf:54:ed:74:92:3d:86:
                    88:19:06:2a:f7:2c:d9:03:50:2d:72:da:3f:e1:03:
                    10:de:53:ef:04:a1:73:29:c7:7f:7a:9a:0d:a4:99:
                    8b:72:d2:39:dd:18:6a:7b:a7:06:f9:af:63:cf:a0:
                    45:5a:78:b4:73:b6:e3:b6:ee:d3:e5:09:1b:f3:3c:
                    a8:5d:0c:cf:b5:b4:99:a4:32:b3:34:ab:06:da:51:
                    f6:82:6f:19:ee:bc:ee:b7:4d:19:94:76:01:f2:6b:
                    d1:89:5b:dc:20:58:ae:ae:6d:c7:1e:70:b1:c6:2e:
                    0e:de:8d:33:3e:e8:0c:a0:c5:e3:f8:4b:01:5e:50:
                    b4:df:39:18:57:26:d4:c7:90:9e:11:d6:b2:4f:34:
                    7e:d9:27:35:37:61:90:80:09:8f:52:e7:ea:7a:a2:
                    b2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C6:CD:7C:5B:F0:6D:B3:B9:46:CA:19:F5:A2:77:C2:AA:C6:44:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:43:4b:fe:33:0b:e7:ba:3c:f7:1f:18:b2:3b:2d:3a:a7:11:
         5c:18:0d:f5:2e:3e:3c:ac:4f:05:6a:fa:4f:a8:d6:c6:f5:f6:
         76:c6:35:cc:31:65:8d:fe:0b:53:68:49:82:d5:8a:7e:c3:46:
         3f:d4:72:48:9b:1e:d4:ef:61:0f:76:f5:4c:c2:dd:bb:68:2c:
         df:a4:37:b6:79:ff:eb:75:9b:dc:21:5b:6e:82:38:c8:91:17:
         8a:66:ec:9f:23:47:49:92:74:db:4e:1f:8c:8e:28:e4:03:e5:
         84:d3:78:56:a0:4b:28:b0:ea:58:83:f7:f1:d9:ed:06:36:21:
         82:8b:98:15:44:07:e3:87:a9:5f:21:96:90:eb:38:1b:2c:43:
         94:eb:48:ff:8b:e2:11:9d:93:f6:e7:a0:01:2d:e7:0c:03:c1:
         f7:b5:22:08:f7:da:7d:c9:09:08:0c:15:16:41:28:b8:de:c6:
         cb:61:55:65:b2:09:11:9a:f1:10:a1:a4:9c:1b:92:33:00:54:
         c5:2c:b9:3d:da:a0:ba:6b:25:75:80:71:35:30:f9:66:b6:bc:
         3e:f2:77:44:79:44:c9:f6:ea:32:07:ed:a8:32:72:5b:77:fd:
         b7:5f:23:b6:77:14:fd:d1:35:ef:83:ad:dd:c3:08:a9:f0:38:
         d3:6d:72:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:44:51 2025 by rpki-client