Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa
File:                     f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa (raw, json)
Hash identifier:          5RYx7j7fgKqrTn8RS9n1/URFoC8Yn+LvxqOncSRXZkk=
Subject key identifier:   BD:F8:3A:20:4C:3C:90:41:3B:3C:D3:C9:E1:18:15:8A:32:7F:8A:A6
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F432858483E1AB8272AE8654AFD928000
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     1640
IP address blocks:        199.59.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:b8:27:2a:e8:65:4a:fd:92:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=eed569bb-aa4d-4318-9c60-faf93c4bbfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:57:f5:fd:10:c2:73:24:21:59:9e:dd:fe:8c:
                    a5:ad:6d:ca:86:80:49:72:09:3c:07:29:f1:6f:68:
                    55:61:6b:fe:77:53:59:a7:85:60:d4:3b:ea:06:bc:
                    ac:f1:02:7f:f1:25:5e:2a:45:a7:3b:66:84:f2:a5:
                    4e:20:c5:64:9c:59:c6:fc:48:7a:be:b5:aa:4c:a4:
                    1a:81:95:30:c3:1e:06:de:c7:b9:fc:17:04:e5:98:
                    79:d4:57:13:0c:09:16:a3:ce:be:58:c4:31:25:7b:
                    05:a5:3c:19:f6:dd:16:e6:ba:c7:23:60:ba:a4:bc:
                    7d:2d:54:43:29:c8:6b:c8:ec:62:ac:f6:c7:e9:d6:
                    c2:48:f5:8f:ee:34:dc:1a:13:27:c1:92:33:a4:40:
                    77:d6:18:5f:5c:bd:b7:df:a7:67:93:2b:ac:33:77:
                    af:b7:fd:5c:aa:a8:8c:f8:b2:e2:a4:b0:ba:f2:ba:
                    55:78:b0:74:a7:9d:c7:22:10:ab:16:ff:fe:b9:20:
                    37:82:9b:fb:56:c8:c1:94:44:5f:33:1e:36:d5:5a:
                    78:19:5c:20:94:a4:34:b0:c5:ef:a8:93:9e:0a:98:
                    61:4a:c6:eb:a9:c2:4e:0a:9b:e6:7e:d5:30:3e:51:
                    ac:62:59:d1:5a:38:a2:6e:71:73:76:bc:02:d8:62:
                    55:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F8:3A:20:4C:3C:90:41:3B:3C:D3:C9:E1:18:15:8A:32:7F:8A:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:de:83:44:ad:4e:88:22:51:12:a1:a1:4f:2a:7e:10:2a:91:
         67:e5:91:43:0e:f3:50:c7:b8:0e:ab:f9:a7:8c:04:9b:d9:ff:
         ae:e5:0f:cb:90:cb:72:d4:43:e9:0f:32:f2:86:ff:95:49:35:
         fd:3e:17:84:54:10:e3:ba:93:d8:24:ea:02:62:1d:8b:0c:d4:
         54:e6:37:b5:c3:92:03:c7:ae:77:8d:00:7f:7a:24:2a:58:42:
         6e:e6:3f:44:32:da:f6:77:b8:b4:52:83:21:16:0b:88:e5:0c:
         73:cb:0b:8b:c0:44:61:af:d6:30:25:9f:25:07:61:12:f8:b3:
         f0:6a:32:9b:c3:e2:ee:64:48:31:bf:86:72:d8:a8:c5:5f:48:
         7d:8a:be:15:d7:47:ff:fb:b4:7e:38:00:c3:72:44:7d:64:71:
         1f:5b:c7:e8:e0:34:8d:ac:99:a5:7e:47:d7:a0:1d:df:e8:57:
         87:a3:53:82:11:a4:8a:7b:47:08:59:91:70:e6:91:72:c0:56:
         e9:27:aa:a0:7c:06:9f:f6:41:c7:f6:cf:26:27:c7:56:76:51:
         fb:a9:86:c4:ea:de:45:b8:76:5b:16:70:45:9b:7a:4e:7b:e9:
         90:4b:f8:52:5e:82:6e:15:eb:de:d1:5d:55:fe:d5:5e:0e:75:
         7e:95:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:04:47 2025 by rpki-client