Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/8c8dcdb0-b8a6-3a9c-98d2-1ff481af5b0c.roa
File:                     8c8dcdb0-b8a6-3a9c-98d2-1ff481af5b0c.roa (raw, json)
Hash identifier:          igVWDkY77jYbfGgHwEcGvdOwuv9WoW0+ZEeu5EoxpsU=
Subject key identifier:   E0:2F:DC:89:3C:93:48:33:DD:87:2C:E7:83:94:4C:39:61:E9:AB:64
Certificate issuer:       /CN=979eb01f-8991-4ed1-a753-931ecafd3350
Certificate serial:       010D0C9F432858480EA50D7B0CEC3B24BF12BE00
Authority key identifier: 39:61:0F:9A:95:44:2E:7C:2A:F3:82:CE:B3:FD:84:A9:E8:48:03:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/8c8dcdb0-b8a6-3a9c-98d2-1ff481af5b0c.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     37560
IP address blocks:        198.167.192.0/19 maxlen: 19
                          2620:18:c000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:0d:7b:0c:ec:3b:24:bf:12:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979eb01f-8991-4ed1-a753-931ecafd3350
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=8879b119-805d-4a4f-b0fc-bfa3ed444040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:1f:33:3e:64:c4:2d:3a:db:31:51:70:65:
                    c7:f1:a6:bb:61:d3:d8:a2:af:8a:ca:20:b7:fd:91:
                    0a:83:87:32:77:93:8b:64:31:b9:c0:1a:8e:ff:a6:
                    2a:df:95:ef:9e:f4:a8:4f:43:a3:f8:1f:40:4c:f0:
                    69:4f:40:52:c0:f8:71:82:17:9c:48:6c:ea:8f:ec:
                    f1:d0:42:35:40:23:c9:13:1b:c9:97:22:95:60:d6:
                    c8:95:e4:3c:80:c4:c6:5b:d3:78:5d:b8:66:04:c4:
                    0f:67:00:c1:d3:79:1d:24:70:53:66:13:36:53:d2:
                    1a:18:e8:7e:5d:77:0d:9b:93:d7:7f:6e:85:4f:64:
                    69:86:33:fb:65:1d:77:4f:12:8b:c2:86:b4:8f:97:
                    34:9d:90:8d:a9:3f:86:2b:99:52:9b:19:e2:b3:fc:
                    24:a5:57:50:93:a9:35:50:04:14:af:a3:7e:eb:aa:
                    73:3b:51:bb:52:50:20:a2:67:99:bb:9a:94:c9:7f:
                    8e:a5:77:4c:ce:71:21:42:69:88:45:63:bc:ac:3f:
                    55:c0:2e:fe:21:83:3d:1b:e9:cf:07:0e:f1:de:80:
                    ae:b5:84:3e:1f:d7:78:58:61:80:71:60:67:38:bd:
                    66:33:0d:f8:61:31:c7:be:ce:41:f4:7a:4b:a2:7b:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2F:DC:89:3C:93:48:33:DD:87:2C:E7:83:94:4C:39:61:E9:AB:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/8c8dcdb0-b8a6-3a9c-98d2-1ff481af5b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/979eb01f-8991-4ed1-a753-931ecafd3350.crl

            X509v3 Authority Key Identifier:
                keyid:39:61:0F:9A:95:44:2E:7C:2A:F3:82:CE:B3:FD:84:A9:E8:48:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.167.192.0/19
                IPv6:
                  2620:18:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:93:2f:b6:7b:03:91:c7:74:6b:22:5c:7d:92:f3:79:15:f0:
         5c:67:e2:db:71:fc:a1:2c:32:0b:6d:5d:e8:86:f6:8a:cc:76:
         c5:4f:6f:e3:8b:a1:92:2e:f4:ab:e2:8b:a5:41:40:69:b4:39:
         80:89:2b:f0:09:5a:10:06:54:1a:a1:7a:eb:92:e7:12:d0:f8:
         dd:0f:ab:b4:a2:15:d5:d1:53:62:70:28:93:5c:cb:79:d1:82:
         25:58:7e:4e:14:c7:91:bb:19:88:de:78:dd:2c:8c:20:ee:be:
         95:e0:c8:f0:c7:2d:de:3b:fc:7b:62:7a:89:63:a2:ab:64:06:
         e8:aa:15:38:e3:ff:0b:4f:51:a2:7b:63:6f:5d:89:4a:1e:d1:
         0d:bb:a9:c0:df:d0:4a:2c:99:a5:dc:c9:28:ab:cc:87:46:5d:
         1f:73:77:11:25:f4:e1:15:1d:fd:c7:5a:fd:30:e3:41:86:74:
         42:be:a1:d1:f0:0f:96:13:58:01:a9:7f:c0:3d:2e:3b:47:c4:
         3d:83:51:bc:d7:40:99:13:e5:4d:6b:66:6d:ab:99:71:82:83:
         3d:5c:78:b5:d2:77:db:25:35:9c:78:e4:a5:b9:05:75:a4:9e:
         4b:97:56:c1:a7:07:0e:ab:02:75:d1:0e:cb:a2:22:57:7e:4d:
         bf:cf:b9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:50:33 2025 by rpki-client