Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/778746d2-c9b5-351c-84d1-9834e1bdbc62.roa
File:                     778746d2-c9b5-351c-84d1-9834e1bdbc62.roa (raw, json)
Hash identifier:          9S/nafMDZ3+ZuHBMe7DMpQo7Y+C/Nj5j+JTCSVR8YdY=
Subject key identifier:   EA:D2:2F:6E:D5:D0:3B:90:EC:A7:D3:83:E0:16:9E:B4:AA:3E:5C:2B
Certificate issuer:       /CN=5886029e-a569-4937-b21c-91a2f3965848
Certificate serial:       010D0C9F4328584849456352232FC9913ADC5940
Authority key identifier: 6F:EC:B4:C9:A1:C0:84:F9:57:43:1E:FD:87:D4:0D:0E:F9:35:7F:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/778746d2-c9b5-351c-84d1-9834e1bdbc62.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        199.196.234.0/24 maxlen: 24
                          199.196.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:63:52:23:2f:c9:91:3a:dc:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5886029e-a569-4937-b21c-91a2f3965848
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=1b437f2a-ff50-40a4-8383-027a23a96a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:eb:d3:ab:56:f9:63:09:8f:5f:3b:24:6c:0c:
                    28:d8:f1:cf:10:cc:d9:0f:d1:3c:37:f3:e0:86:00:
                    ad:ad:a3:59:8a:44:73:5a:d8:d8:10:fd:b0:ed:c4:
                    fd:f5:bd:3f:73:3b:61:fa:96:82:b7:42:95:04:2e:
                    cb:04:3d:5f:d2:31:0d:7b:44:aa:1f:04:88:61:3a:
                    4d:61:ec:c9:01:ea:cf:fa:88:1b:73:6c:7e:1c:cd:
                    55:41:94:cc:82:29:1f:54:d0:54:a6:93:cd:6e:7a:
                    4e:70:cd:44:24:b5:ce:df:27:5a:bc:a1:61:51:bd:
                    03:93:0d:57:a0:b1:e7:13:fb:e3:d0:ef:c1:5a:2b:
                    35:3b:4b:2d:cf:a9:b8:d3:43:6d:ff:28:cd:66:d7:
                    fd:e7:0a:ba:57:37:d7:8d:aa:04:49:69:ae:85:0b:
                    46:cb:37:1d:a5:49:08:a8:13:44:74:9f:e2:db:d2:
                    f4:5f:1b:c4:96:db:cc:1e:26:2a:0c:8b:a5:dd:46:
                    0a:6d:7f:35:be:f1:d9:ec:66:6f:eb:0e:10:11:a3:
                    bb:b0:f0:e6:a4:18:62:e7:ec:f4:db:ca:e8:d2:eb:
                    b2:4a:99:69:9e:d9:fa:be:15:36:62:15:84:d1:3a:
                    25:0f:ed:59:36:81:be:f9:dd:6a:0a:8b:46:5b:40:
                    73:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D2:2F:6E:D5:D0:3B:90:EC:A7:D3:83:E0:16:9E:B4:AA:3E:5C:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/778746d2-c9b5-351c-84d1-9834e1bdbc62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/5886029e-a569-4937-b21c-91a2f3965848.crl

            X509v3 Authority Key Identifier:
                keyid:6F:EC:B4:C9:A1:C0:84:F9:57:43:1E:FD:87:D4:0D:0E:F9:35:7F:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.196.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d2:c9:dd:29:d8:15:5f:c7:3c:73:18:ed:68:d2:9f:03:59:
         04:7c:9e:50:51:5a:ff:fc:1f:38:19:2b:f5:61:e0:f6:85:cb:
         5e:95:af:e8:c6:da:98:49:b3:29:f5:09:cd:b3:dd:44:32:03:
         6b:5b:e4:1f:0b:d6:31:09:3a:2b:7d:21:9b:e8:2a:a5:72:7b:
         92:aa:5e:bb:d1:12:9f:c3:bc:49:ac:1d:c5:ef:ac:e0:81:e2:
         9d:f6:00:43:41:1b:e7:27:e8:3a:45:9e:a9:80:bd:35:a5:bb:
         8a:f7:f3:1e:98:09:e4:4a:49:82:59:17:1f:4b:77:78:c3:bf:
         36:9b:02:18:f0:dc:99:42:fc:98:74:48:48:4d:74:d6:93:5c:
         a1:89:23:b2:97:54:6d:06:a1:13:21:b1:ac:34:f7:9a:60:bf:
         72:66:5b:13:11:f4:db:5c:75:99:23:da:4f:b2:95:7d:70:a8:
         a8:03:67:78:29:c6:6a:96:01:54:5a:4d:42:0b:f9:28:fd:43:
         42:c2:f1:84:2f:89:f6:36:55:dc:b8:13:58:14:8c:87:1b:fd:
         39:8d:93:50:ae:ca:0b:59:f3:94:21:59:b6:94:f4:da:95:c9:
         80:34:be:da:e4:09:53:de:a7:2a:aa:2e:2d:06:0c:0c:84:75:
         0f:2e:5c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:07 2025 by rpki-client