Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa
File:                     a24dc796-a354-3534-8807-c7f4b3475218.roa (raw, json)
Hash identifier:          CoHnVg31/j0bi3jWorvF6YR0lLHeYerj+eyb7A4sQcY=
Subject key identifier:   62:DD:8C:3E:AC:AA:CF:21:60:DD:50:81:08:B2:34:A4:35:08:D3:D1
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584840E556D76007DF005A3AB980
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     11052
IP address blocks:        199.249.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:56:d7:60:07:df:00:5a:3a:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=b8648432-7e2c-4c26-a0ec-9bad4b880bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:bb:b4:ab:08:71:0f:7b:05:1d:c6:50:09:
                    9a:68:5c:1e:d4:92:12:bb:91:7b:b0:94:df:4e:af:
                    01:e0:e9:68:74:a7:58:08:9d:35:9b:89:87:f5:da:
                    d8:8e:61:26:45:2e:0b:10:81:28:84:1d:37:1f:5f:
                    2c:70:44:43:f8:3d:52:1a:0c:04:61:00:0b:9a:fb:
                    3d:f5:e9:b0:53:dc:76:03:f7:8d:23:86:80:9d:dd:
                    89:71:8b:59:1e:8c:39:7a:84:57:cb:82:57:56:a9:
                    d8:c3:9c:b7:08:d6:c0:68:26:4a:b1:a3:d8:ce:7e:
                    d0:69:6d:90:25:de:88:3a:09:2c:f7:77:da:2f:96:
                    94:a8:6f:15:ab:f8:e8:34:e0:47:7c:3d:80:6d:aa:
                    b3:42:ec:ec:1a:da:51:43:37:12:dc:dc:cc:80:8a:
                    58:79:82:17:f9:e1:67:7f:e1:57:5b:07:ae:49:15:
                    8c:32:f3:50:97:07:1d:f9:13:fa:22:7a:1f:4b:c3:
                    d8:7e:50:fc:0b:c6:4f:2f:ac:24:cc:cc:26:42:78:
                    8a:a1:91:1e:97:c0:b4:f9:b6:22:83:ef:93:dd:6e:
                    0b:23:73:f6:11:60:41:d5:65:40:98:4c:1d:6c:31:
                    85:f6:b9:14:83:ac:5c:55:8b:48:a4:19:36:fb:8f:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DD:8C:3E:AC:AA:CF:21:60:DD:50:81:08:B2:34:A4:35:08:D3:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:9b:7a:d3:45:bb:ac:49:1c:d9:ac:84:59:0a:a6:bd:8b:ac:
         01:e8:ef:0e:27:2e:bf:59:f8:d3:5a:67:ec:7f:6a:78:e8:f5:
         30:59:44:10:69:fd:f2:c8:1a:fd:05:b5:59:e9:0c:04:f8:38:
         56:31:65:ee:f2:09:a7:9c:fe:fb:86:d6:39:c9:a6:7d:0d:ff:
         3e:c3:09:5e:75:41:58:25:c5:c8:f6:61:2b:00:87:d7:d3:75:
         88:34:28:08:89:5b:4d:a8:c5:5a:24:f9:50:4f:29:01:dd:f2:
         b4:19:11:04:95:4c:df:a5:0e:37:ef:21:25:4c:4b:db:3e:55:
         21:4b:69:dd:cb:d0:bc:78:62:f9:f8:9e:14:27:4e:12:29:95:
         9a:36:da:fa:e7:2b:b7:c2:db:c0:be:11:be:ed:d9:73:24:92:
         61:2a:c3:0a:4b:42:52:57:97:6b:24:0a:cf:8e:40:05:5d:74:
         40:a6:84:06:9c:68:d5:5f:00:e4:98:3f:fc:5a:7f:16:b3:56:
         0f:2e:01:33:e8:f6:56:cc:e7:ff:be:fb:26:1f:61:36:49:fa:
         ba:0d:41:39:96:de:fc:ec:f4:bf:da:85:a7:30:ff:02:45:3d:
         9b:8e:1a:01:3f:c4:9d:fb:a4:b7:dd:a6:c5:d3:21:36:54:5a:
         44:01:ba:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:49:17 2025 by rpki-client