Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c31c4613-8e00-3105-92eb-34eba8b9948a.roa
File:                     c31c4613-8e00-3105-92eb-34eba8b9948a.roa (raw, json)
Hash identifier:          PevcJ5WfZazJ07PAuYPToDHXnZ4SsRXHJMpkFGG6QW0=
Subject key identifier:   E9:09:97:41:4A:E0:A5:2B:D1:FB:A0:B8:9B:C9:7A:99:8F:97:1B:F2
Certificate issuer:       /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial:       010D0C9F43285848424AC95065AD8892572705C4
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c31c4613-8e00-3105-92eb-34eba8b9948a.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     400039
IP address blocks:        199.101.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:c9:50:65:ad:88:92:57:27:05:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=7e53b139-172b-4a5e-8f14-5418c2bd9496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:4a:e2:43:fe:e4:0a:87:12:44:e8:ae:af:
                    12:29:ae:b0:5e:4e:0c:74:ae:2c:7e:29:cb:e5:e5:
                    0c:5a:ca:5e:e1:09:7c:1b:c4:c8:cb:8a:b8:6c:6e:
                    1f:c2:2e:b4:f9:a0:ff:60:2c:36:46:82:4a:39:99:
                    8f:45:47:f6:e6:0c:cb:6b:f7:c8:6e:ae:1f:f2:fd:
                    2d:6d:ac:af:5a:98:95:1e:c3:a8:ad:dc:fe:fa:97:
                    25:5a:9f:56:b3:69:43:ff:db:27:d6:84:49:df:91:
                    a8:e4:77:a9:c2:ae:b0:f9:93:c0:52:57:a6:b7:2d:
                    d9:dd:3c:46:60:59:17:25:a2:7d:04:10:79:1c:3b:
                    7d:d0:18:cf:69:3b:26:09:51:b0:7d:35:76:c3:71:
                    de:ac:3c:e2:a9:c8:80:b8:94:b0:d8:9e:82:3e:4c:
                    90:e7:e7:06:2f:3e:3b:70:bd:5c:89:8d:cc:44:bc:
                    ee:33:a7:05:9f:75:76:ca:df:a6:a6:59:6c:b1:7e:
                    7a:e0:3f:1a:39:4a:86:96:09:18:5e:a1:1e:04:b2:
                    1b:f7:ce:80:a9:f9:cb:67:5a:a2:b6:26:54:aa:4e:
                    2a:b3:4d:ec:ae:ab:61:6d:4e:a8:2d:0a:0f:2c:0a:
                    2d:78:4a:5c:c4:c8:bf:81:2f:d6:aa:62:f3:e6:22:
                    19:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:09:97:41:4A:E0:A5:2B:D1:FB:A0:B8:9B:C9:7A:99:8F:97:1B:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c31c4613-8e00-3105-92eb-34eba8b9948a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl

            X509v3 Authority Key Identifier:
                keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b6:72:ce:2a:4b:41:3c:39:48:df:4e:7a:d5:06:83:a7:f8:
         2a:41:14:e7:d8:8e:83:2f:4e:11:9a:be:c6:de:0b:cf:37:48:
         e8:0e:28:cc:8a:6a:f5:00:0b:26:fb:c4:c5:aa:f3:47:76:c4:
         4d:d0:5e:5e:ad:d7:58:d5:91:49:13:6e:50:24:62:a4:21:c3:
         20:ab:4f:4d:b7:ee:bc:8d:e2:fd:ff:e3:ea:ca:ee:6c:00:e2:
         3b:61:07:f4:7e:d3:8e:2b:a3:38:0e:c7:5d:f7:98:32:e6:9f:
         10:d3:ca:15:de:e0:75:48:8e:71:42:69:d5:c9:b7:b3:33:cc:
         34:9a:b1:3f:83:ee:d7:bb:5f:51:2d:b1:6f:0d:ef:a2:ff:0f:
         c2:ff:e5:18:7d:64:06:c3:8b:0c:db:cc:89:a1:0d:f1:72:54:
         09:28:10:f6:d1:5a:cb:90:3a:6a:5b:b3:47:f8:8e:67:92:39:
         98:60:9f:1d:31:18:28:3b:e1:15:0c:fc:ba:f9:c6:a1:f4:2a:
         86:83:e4:74:92:40:60:16:ee:3c:0a:df:56:74:5c:69:e6:d6:
         95:e7:bf:26:c9:b8:1c:9f:b9:74:55:f5:1f:48:60:05:34:d2:
         38:77:9d:2b:a8:bb:1c:a4:60:1f:f3:cd:4e:57:9d:f5:4d:88:
         ba:92:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:28 2025 by rpki-client