Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/ee5c8804-1692-3b01-8cae-45c923677711.roa
File:                     ee5c8804-1692-3b01-8cae-45c923677711.roa (raw, json)
Hash identifier:          BtESpTw3IUB+H0KNbDFbMvl4sdisGhHQrqgNg05ZPso=
Subject key identifier:   89:D4:5D:FB:6A:89:D6:84:73:67:88:0C:0D:22:E2:FE:D6:07:F2:D4
Certificate issuer:       /CN=48e7861e-5414-403c-8268-a7d7b18f405d
Certificate serial:       010D0C9F43285848424ADC7C96B1BDE1411D7FE0
Authority key identifier: 4F:99:9D:30:47:BA:8A:6F:1D:E0:06:67:BA:BA:4E:D5:1E:7C:42:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/ee5c8804-1692-3b01-8cae-45c923677711.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     20325
IP address blocks:        198.27.28.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:dc:7c:96:b1:bd:e1:41:1d:7f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e7861e-5414-403c-8268-a7d7b18f405d
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=75701d2e-4c7e-41a5-9a43-d7bcf44b3210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7e:78:d4:52:71:3e:15:64:60:24:0a:59:88:
                    7f:97:fb:0d:8d:6f:ab:a7:b8:6b:0c:55:35:f2:99:
                    14:8b:fa:42:22:06:c7:a2:9f:8b:d1:38:45:22:ff:
                    81:45:87:56:a1:bb:d5:ff:f7:b6:9d:23:47:84:4c:
                    00:61:fe:72:fa:49:ae:4b:f0:4d:fd:e2:9d:69:47:
                    09:ba:47:e1:49:7e:d3:fe:83:f8:65:21:a7:ea:c7:
                    c7:54:90:df:a6:99:de:d0:e3:e8:5d:44:3e:43:8e:
                    e9:71:6d:57:23:f8:5d:2e:cc:40:b9:39:b8:2f:24:
                    a8:77:40:46:bb:71:6b:9e:c4:2f:cc:28:50:de:72:
                    96:84:f7:53:aa:2f:bc:08:78:61:e1:f8:c5:8e:61:
                    88:6d:fc:81:0e:87:18:ca:43:cd:6d:9d:ac:84:63:
                    69:ae:d0:09:18:e4:d2:0f:22:ce:88:56:65:5a:d8:
                    ab:55:79:07:c1:e6:60:cd:2f:20:d7:3d:88:8a:be:
                    b4:db:73:42:5b:1f:e2:56:71:8d:4e:b5:83:69:fb:
                    48:57:b7:8c:7d:a0:59:e3:f5:fe:ce:c7:96:00:69:
                    2d:94:2c:41:27:fe:9b:b4:e7:a0:36:1f:ce:bd:a7:
                    23:fb:b3:46:5d:3a:d2:f3:2b:1f:e1:49:b6:7b:bf:
                    3f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D4:5D:FB:6A:89:D6:84:73:67:88:0C:0D:22:E2:FE:D6:07:F2:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/ee5c8804-1692-3b01-8cae-45c923677711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.crl

            X509v3 Authority Key Identifier:
                keyid:4F:99:9D:30:47:BA:8A:6F:1D:E0:06:67:BA:BA:4E:D5:1E:7C:42:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.27.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:91:db:ac:80:92:a7:d7:d1:88:dd:e2:ef:31:f3:0f:b5:02:
         4a:1d:0e:83:bc:7b:5f:7b:62:41:a4:ed:e1:24:8a:27:82:29:
         13:3a:3e:58:a9:74:90:54:2c:c2:96:f5:3c:03:70:6c:ab:c6:
         14:1c:15:03:d3:36:6c:85:a9:be:73:67:08:3b:d3:45:ff:50:
         c0:d2:a5:8c:54:f5:f7:7f:61:4b:4a:f2:8c:50:c4:ed:cc:53:
         77:6e:7a:06:1d:32:c0:7d:fe:ef:21:2a:29:c9:a3:d9:cc:83:
         6a:87:85:ee:be:b1:13:1a:d7:f2:4f:73:bc:ae:40:33:6e:94:
         da:b1:4c:88:be:52:97:2a:8d:b7:95:66:16:54:16:c7:d9:25:
         eb:ed:1a:5d:0b:c3:0d:3c:5c:38:c2:68:2f:d5:18:bc:e7:4c:
         cd:25:00:26:a1:de:6e:9f:c1:7f:30:2c:3d:92:63:b4:0f:99:
         a1:28:c8:82:b5:5b:35:f7:c3:a1:c2:a3:36:84:89:29:5c:7f:
         e5:4d:55:53:4b:db:df:30:e6:cb:f7:5b:b6:96:42:64:20:f7:
         96:85:b3:7d:5b:d3:3c:dd:23:87:db:9e:5b:11:9d:c1:59:06:
         d4:d7:d5:00:14:da:a1:d8:ea:59:cf:cc:f3:ad:50:07:96:67:
         c0:68:ff:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:16:47 2025 by rpki-client