Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa
File:                     86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa (raw, json)
Hash identifier:          UOdpXespfG9MalgDAEGtHXZsKYGLHVq2/Qhc/1c+F4o=
Subject key identifier:   67:36:15:68:7F:82:9A:78:54:31:68:0C:0F:D2:8F:A5:B2:4E:09:E7
Certificate issuer:       /CN=d5a6b267-6096-4872-9afb-b9517766833a
Certificate serial:       010D0C9F43285847DF2F56D781F69D2A73D4FD00
Authority key identifier: 5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     10886
IP address blocks:        199.7.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:56:d7:81:f6:9d:2a:73:d4:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a6b267-6096-4872-9afb-b9517766833a
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=319f3d1c-3474-4659-a765-fe4c07bd4763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:30:26:21:0e:8c:65:12:e4:79:95:ad:bc:
                    7e:51:da:9e:84:49:aa:55:60:9d:14:34:24:82:9e:
                    f7:91:67:a9:c2:d5:45:e3:d9:d4:4f:96:44:8f:90:
                    b1:54:4e:c7:68:d0:35:90:44:53:54:c1:6c:2f:ee:
                    e3:91:e8:79:2a:14:ab:07:f4:18:7a:47:6d:89:41:
                    f4:36:a0:da:1e:37:6f:a0:38:18:0d:30:84:79:5d:
                    37:7d:db:60:5d:d6:08:3b:0b:f9:93:15:41:50:ec:
                    20:95:4b:aa:54:eb:7d:d1:a4:07:7c:a0:d1:4b:27:
                    95:54:8a:b8:cc:17:8f:e7:ab:8d:a2:e4:ec:19:47:
                    ec:d5:47:e8:ac:06:94:c3:47:7d:6f:84:43:e2:ed:
                    e5:52:c4:f7:0b:84:55:6a:4c:9e:dc:54:ea:4f:9a:
                    ec:d6:4f:13:eb:17:de:be:4f:93:f6:bf:bd:02:90:
                    e0:8c:a8:1b:2c:28:e5:d7:93:18:b8:53:c5:aa:30:
                    69:e2:e3:16:c0:c6:27:e6:d0:89:f1:da:80:ad:88:
                    ab:be:91:f6:cb:48:1d:bb:c0:36:d4:3d:a1:12:68:
                    eb:f6:64:71:67:ea:6c:44:45:f9:d1:cf:2f:27:b3:
                    26:54:7a:64:dd:58:6b:18:4b:57:7e:12:68:a9:4c:
                    95:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:36:15:68:7F:82:9A:78:54:31:68:0C:0F:D2:8F:A5:B2:4E:09:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:0f:a7:6a:41:8a:91:6c:ac:ba:2a:0d:38:90:16:95:49:95:
         af:fe:b8:5a:7b:26:2e:0a:4b:fc:61:bd:ce:02:24:e6:1f:70:
         2c:81:73:02:82:47:d0:84:7f:a4:f9:dd:b2:08:60:ae:5b:aa:
         25:10:ba:3d:d5:16:7c:7e:b6:d8:f6:bb:2b:a8:2d:3d:f3:a3:
         39:09:64:0e:7c:8d:89:9e:14:11:e6:5e:1a:af:6e:52:15:62:
         58:76:11:cd:6e:45:fc:4b:1b:95:77:0e:30:41:50:e9:57:6e:
         70:48:ed:1c:e2:c6:65:9b:79:22:9e:77:e8:a3:48:d1:3d:34:
         8b:87:be:96:c7:8d:eb:e8:b3:d7:3f:23:2c:ef:3b:c7:55:d9:
         da:9e:b0:86:67:05:e5:99:0e:5f:92:dc:2a:04:46:aa:d8:ce:
         63:00:b7:15:48:42:a9:58:f0:6f:e9:6e:d1:9d:1d:d5:8f:74:
         76:e8:0d:f2:fd:ca:26:34:d5:41:7d:c8:80:33:f4:db:8b:87:
         00:d6:f2:fe:e1:59:4e:8c:0f:d6:30:d7:a6:f3:f2:a9:23:f6:
         39:99:d4:8b:f4:28:5d:07:a1:07:a3:3e:d9:18:46:99:7f:10:
         d2:43:75:c5:95:3f:77:55:a6:73:0b:c7:97:80:c4:40:77:b2:
         cb:37:d8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:05 2025 by rpki-client