Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa
File:                     cd6f640d-6126-3532-82b5-d912ca3486c0.roa (raw, json)
Hash identifier:          EjQ9VYiho0Vwn0Z3wcOptiV9+0wuL0/YmqFKCqVJPsI=
Subject key identifier:   B8:BE:9E:83:A8:52:5A:FE:35:46:2B:14:36:F8:C1:07:4D:84:9A:A5
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F4328584882808901BD387AC2C036D100
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     3756
IP address blocks:        199.109.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:89:01:bd:38:7a:c2:c0:36:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=9f8381db-50db-41f3-98aa-17290ae5f141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:62:b0:35:dd:5a:67:a6:83:66:3b:3f:82:
                    6c:02:2a:d0:14:6e:92:4f:4f:be:3b:f2:5c:ee:51:
                    23:14:b2:f5:f1:fe:22:e5:79:f3:85:25:c3:29:ae:
                    f8:97:2d:c6:ba:1d:a7:75:dc:df:34:26:94:d5:4d:
                    25:31:e9:1f:86:d1:d5:4c:12:12:71:ad:60:09:39:
                    3d:ca:b9:9d:20:ce:cd:fb:b4:df:86:30:46:9e:b4:
                    8b:6a:a0:2d:73:b0:e8:c3:de:fa:4d:62:52:5f:bf:
                    fc:6e:aa:08:52:f2:03:4a:50:ce:31:68:52:31:b5:
                    c0:45:b6:22:95:dd:21:0f:80:24:48:18:ff:f9:ef:
                    d0:7e:db:82:43:f0:2a:27:8c:a8:81:8c:bc:93:b2:
                    68:d0:2e:88:f2:1e:5e:11:36:04:84:2a:bd:ff:b9:
                    7c:07:21:a1:c6:fe:35:1d:4b:47:9b:53:a3:64:81:
                    a1:8f:84:15:e2:65:6d:1a:63:8f:b3:6a:90:43:4f:
                    06:3d:d1:2f:1f:58:18:75:b4:b6:d0:23:21:00:c3:
                    eb:b7:fa:53:89:13:ed:78:c0:3a:4c:82:e6:ab:f0:
                    33:fc:56:ca:e3:c8:78:77:a3:e8:33:17:f5:e9:87:
                    48:db:b1:f0:89:c4:b7:79:84:32:8e:28:7c:d4:6a:
                    2c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BE:9E:83:A8:52:5A:FE:35:46:2B:14:36:F8:C1:07:4D:84:9A:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a6:1b:10:31:3b:b6:3d:15:d3:fb:30:6d:b5:97:63:43:e7:
         85:d7:cd:f0:67:da:91:26:46:09:f6:a1:e7:a2:5c:4c:1e:87:
         c6:75:0d:a5:9e:c5:72:80:45:d1:7c:ff:ee:04:5d:4f:66:57:
         7d:99:56:2f:2d:b2:25:f2:c7:58:37:36:4a:cb:2a:24:49:d8:
         cd:0a:72:87:a2:d0:e2:8f:0f:28:62:16:25:fb:ee:92:22:97:
         cd:7e:19:f0:c0:cd:47:cd:86:05:0f:98:a8:ed:b5:d6:82:d2:
         90:a0:99:65:0f:a1:95:d1:ad:b9:1d:82:78:ba:1e:88:df:e7:
         b1:bf:90:6d:95:07:1e:ab:f9:18:d6:05:37:46:a0:e2:b3:8e:
         33:77:33:c6:ed:95:0f:6a:48:67:80:aa:16:ef:ad:ca:68:eb:
         8d:13:6e:83:8a:6c:06:0e:a3:2b:9a:95:b9:fe:91:26:2c:14:
         58:24:98:12:9b:a1:22:0d:6d:47:69:b6:19:8a:32:e0:e1:d6:
         59:58:d2:38:1b:01:7f:88:5f:85:5e:af:03:12:5b:c2:ee:d1:
         80:47:de:49:0e:2d:f2:fe:34:c5:06:d7:97:09:d2:eb:66:9e:
         8a:57:fa:0b:56:45:95:71:ad:4c:81:fe:51:ba:b9:c3:f0:2e:
         47:98:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:57:57 2025 by rpki-client