Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/9590a3f1-b94b-3675-9eb8-35ddfb02ddf4.roa
File:                     9590a3f1-b94b-3675-9eb8-35ddfb02ddf4.roa (raw, json)
Hash identifier:          +vWppVvLt0wu478MJoBZbgtpat6zYgvm+HX3TrZIlSQ=
Subject key identifier:   7C:89:38:45:ED:85:4C:9D:21:39:14:46:1E:DC:E7:8F:26:F3:D7:AA
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F43285847DB36344D339EA136B1011580
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/9590a3f1-b94b-3675-9eb8-35ddfb02ddf4.roa
Signing time:             Tue 12 Nov 2024 15:51:12 +0000
ROA not before:           Tue 12 Nov 2024 15:51:12 +0000
ROA not after:            Mon 10 Feb 2025 15:51:12 +0000
asID:                     104
IP address blocks:        129.19.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:db:36:34:4d:33:9e:a1:36:b1:01:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Nov 12 15:51:12 2024 GMT
            Not After : Feb 10 15:51:12 2025 GMT
        Subject: CN=916457f4-d009-4303-9949-4d4c4ac4ac6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:43:8c:28:56:7c:87:89:65:e7:e4:a0:97:1d:
                    3e:88:f5:03:6b:4f:19:53:0a:8a:db:e6:60:d0:8c:
                    88:a6:17:99:0d:d1:64:97:df:86:8b:15:94:34:06:
                    ee:90:1c:79:52:36:3a:37:f5:bd:3e:65:3a:15:f6:
                    db:f0:36:9f:d2:dd:81:eb:a7:34:10:d0:b1:39:01:
                    f7:63:70:5b:c4:79:8e:74:30:a2:e7:52:45:70:d3:
                    71:5a:72:8c:ec:b2:7b:1e:af:31:b7:81:05:73:f0:
                    0a:10:0b:c7:e4:18:be:30:b8:e8:2e:b9:f8:b3:70:
                    38:a1:85:af:1c:28:c4:8b:e8:c1:76:fc:9a:77:e3:
                    1e:46:05:12:28:d8:04:77:d4:60:42:77:fd:66:3d:
                    7b:b4:11:01:80:14:11:68:7f:00:0f:f3:b8:8b:99:
                    2e:5e:18:24:63:ba:06:da:67:4f:78:e9:1b:03:56:
                    d4:e6:df:54:4f:ee:3d:b7:51:7f:6a:a1:46:a6:a9:
                    02:81:c9:8b:9c:ee:be:30:83:cd:b5:69:d2:56:4c:
                    f7:ab:26:a4:54:d9:87:9e:cb:51:e8:6b:c7:b9:77:
                    20:40:e9:42:e8:38:e3:05:67:63:7d:70:40:93:73:
                    41:c8:52:7f:c5:54:fe:b1:c4:45:1e:bc:5c:38:55:
                    cb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:89:38:45:ED:85:4C:9D:21:39:14:46:1E:DC:E7:8F:26:F3:D7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/9590a3f1-b94b-3675-9eb8-35ddfb02ddf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:fb:31:d8:da:cc:0b:6f:c7:33:e3:06:cb:c0:20:26:ab:c3:
         55:81:3d:a3:ed:51:1f:c9:5e:40:b8:4a:6d:6d:93:9a:13:f7:
         22:37:d5:f2:3e:21:70:1a:fa:dc:d2:1d:c6:dd:95:76:04:e1:
         42:ba:7d:10:08:a8:09:23:19:91:13:8a:67:91:fb:55:cf:de:
         e4:56:a9:66:33:25:b4:dd:fb:32:aa:0e:5f:98:35:be:6d:67:
         4b:5d:4f:b4:60:b6:95:25:f7:ac:07:46:10:58:a9:6f:fe:25:
         0e:61:01:64:08:20:5e:43:ab:ed:51:dd:5f:d5:61:31:4d:74:
         61:30:2f:71:fd:c8:a2:54:96:27:2c:a6:b1:53:f6:09:43:0c:
         86:bb:04:4c:ac:c4:73:47:bf:94:c8:34:4c:d1:96:0a:45:b4:
         34:9e:24:62:27:ce:18:8b:b5:86:f6:71:02:66:40:09:ff:a2:
         6a:23:4b:7e:b4:f5:a7:f6:06:68:a4:9e:c4:c8:aa:93:e7:7a:
         5c:c6:81:f8:f8:e5:f8:8f:0a:56:18:cb:fa:ab:2c:65:e2:34:
         72:71:43:90:f3:d4:35:da:94:1d:cc:80:10:0f:58:34:92:70:
         f0:00:ba:33:0d:ce:60:ea:93:fe:05:65:1f:28:6c:e0:6c:68:
         8b:ec:6a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:50 2025 by rpki-client