Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/9b38cfce-bac1-32c9-96e7-2bcb44f3c23d.roa
File:                     9b38cfce-bac1-32c9-96e7-2bcb44f3c23d.roa (raw, json)
Hash identifier:          PHFTooKpzPNlUORBFXXFM64/NkzXaWyntnHeLvRxk/U=
Subject key identifier:   C0:ED:6C:11:C5:D0:4E:62:1C:31:2D:EA:68:AF:E1:E7:2A:D6:52:15
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F43285848547032542E9A5FEE8AE78A40
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/9b38cfce-bac1-32c9-96e7-2bcb44f3c23d.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     36511
IP address blocks:        199.101.188.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:32:54:2e:9a:5f:ee:8a:e7:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=586e0590-8779-4521-b34a-af4e704fcac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:49:00:1c:95:ad:da:eb:e3:ce:33:42:e0:
                    35:04:e2:73:f3:09:85:fd:59:60:29:c8:c9:00:9d:
                    ec:94:57:4c:18:db:42:1a:b4:23:83:67:e9:a5:fb:
                    ba:49:af:a1:c2:a5:80:0c:96:fe:d6:93:f1:f6:f5:
                    b6:fd:54:80:60:34:11:f3:14:ba:19:f4:fc:11:23:
                    9e:7c:9b:dc:0e:e8:ae:58:ff:22:8d:df:c6:a5:3c:
                    85:c3:8b:26:79:82:ac:d8:70:70:ef:38:8e:c2:e9:
                    b1:c4:47:cc:51:9e:74:3d:40:26:52:80:2b:d3:de:
                    5e:0c:6d:dc:1c:2a:4c:f2:39:b6:d6:45:c9:42:64:
                    b1:86:e3:a3:0e:ae:e6:ba:06:70:f7:48:a3:4c:61:
                    3a:bc:87:89:8f:fa:7e:d2:8c:0e:d1:58:cf:06:60:
                    45:bf:3b:58:c1:6a:a8:9d:7e:e8:85:6d:52:81:3b:
                    c1:0a:62:69:5c:c6:ef:76:80:68:09:a8:46:15:34:
                    88:44:ba:23:a0:0f:23:43:8d:3d:23:cf:9b:7d:9c:
                    52:c3:f3:d2:49:93:d8:24:07:29:a6:1a:b4:d4:9f:
                    b4:57:bb:cd:6f:e1:09:ef:87:b3:9e:ba:4d:1d:be:
                    5c:a3:3d:5c:3e:03:ac:45:79:1e:17:49:ea:ab:e9:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:ED:6C:11:C5:D0:4E:62:1C:31:2D:EA:68:AF:E1:E7:2A:D6:52:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/9b38cfce-bac1-32c9-96e7-2bcb44f3c23d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e6:0b:32:95:37:0b:e1:9d:99:2c:e1:b4:0a:bf:e4:3e:3a:
         0e:5e:86:7a:f3:2b:ec:7e:ce:3b:c0:50:e5:e8:10:93:10:35:
         e5:ad:b9:67:4e:ac:73:c6:b6:fb:cb:b0:64:9d:f9:9d:92:30:
         49:39:69:fe:6f:0d:88:de:36:b8:18:0d:2b:22:8d:61:38:f4:
         5d:b3:56:ac:c4:59:c4:86:70:b5:f7:81:68:88:1c:98:19:c5:
         ac:52:0d:b8:a4:76:6c:61:b2:dc:1a:47:9e:61:fe:22:13:63:
         1e:80:9f:06:fb:e7:9f:e9:cf:95:14:4a:1b:51:94:94:da:78:
         27:5c:a6:f5:c9:3f:fb:0e:4e:2e:ab:06:93:13:50:1c:c5:2a:
         5e:0d:f3:99:dd:a0:6f:05:6a:24:9b:fa:91:fd:ba:a0:b3:fc:
         a3:4e:d9:b2:85:0f:36:bd:fc:56:ef:34:01:30:99:d1:02:c2:
         e9:0c:26:49:b2:56:be:3c:ad:68:5d:f5:7c:2c:4c:e7:f1:00:
         1d:dc:64:fe:f8:75:10:ab:ff:63:62:cf:3d:da:b0:70:22:a2:
         15:40:d7:1e:b7:cd:d4:00:dc:e6:95:42:0f:f2:0c:db:bb:e7:
         9e:ff:dc:e7:ed:85:d0:f9:d1:c0:76:d6:62:a8:7f:8b:05:1f:
         12:0c:d1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:49:52 2025 by rpki-client