Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/9f89589a-17cb-34cc-9116-cdb2d9be527e.roa
File:                     9f89589a-17cb-34cc-9116-cdb2d9be527e.roa (raw, json)
Hash identifier:          WnjTB5VBJrDtVTEqzaSEVLgl55OtwwuxFZPFUweeK04=
Subject key identifier:   04:75:F1:6D:61:D2:9C:DC:F6:C1:D4:79:3B:3F:39:FB:F6:58:01:BA
Certificate issuer:       /CN=a619cbd3-121a-4de5-b31a-efa0c294c430
Certificate serial:       010D0C9F432858487FB5E1F2109532862EFE6B00
Authority key identifier: 20:E3:4B:44:25:30:34:A0:86:8F:A3:75:96:5E:65:DA:D8:BE:16:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/9f89589a-17cb-34cc-9116-cdb2d9be527e.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        192.206.146.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:e1:f2:10:95:32:86:2e:fe:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a619cbd3-121a-4de5-b31a-efa0c294c430
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=b5bdaefc-8a93-4e4d-b1ef-06e77631b29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2e:bb:95:2e:90:a8:f3:40:e1:ab:92:93:8d:
                    60:91:6e:de:0c:91:32:29:55:e1:c7:10:b4:75:d2:
                    1c:c3:93:32:30:8f:23:6e:f0:c3:f6:4c:ef:3a:9e:
                    58:29:23:5e:80:b4:a1:93:32:20:12:5a:18:7a:32:
                    c6:7b:37:6b:9c:c9:d2:45:d3:1f:22:6e:9f:cf:2f:
                    dc:0f:6a:94:82:78:7a:ef:e4:0a:f8:0c:a7:4e:a1:
                    13:de:6f:a6:fa:60:ad:dc:f9:d9:1b:17:af:71:9c:
                    72:e7:4c:74:fa:7d:e2:85:7a:ee:3c:49:81:33:37:
                    50:03:9a:be:2f:5d:74:d0:af:7e:7a:8f:b2:42:2b:
                    57:5a:45:5f:d6:2a:d8:2f:e4:dc:2f:4a:de:5f:88:
                    d4:f8:b8:5c:46:0a:ec:a1:0a:56:aa:35:cb:87:f1:
                    1c:91:44:f1:8b:a6:45:9d:a8:f6:50:0a:1d:b1:ad:
                    26:26:ff:ec:cc:58:f3:76:4a:aa:f6:14:79:be:df:
                    31:2e:42:2d:ae:f2:c3:f4:2d:c7:89:4b:ed:f0:d4:
                    5e:91:60:84:5b:87:c4:24:f9:1b:3f:1b:b1:97:24:
                    25:c2:41:f8:74:b8:b3:87:a2:4c:31:0f:6c:52:9b:
                    18:f3:82:8b:17:a2:b6:2d:c7:32:a0:ff:dc:ba:17:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:75:F1:6D:61:D2:9C:DC:F6:C1:D4:79:3B:3F:39:FB:F6:58:01:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/9f89589a-17cb-34cc-9116-cdb2d9be527e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/a619cbd3-121a-4de5-b31a-efa0c294c430.crl

            X509v3 Authority Key Identifier:
                keyid:20:E3:4B:44:25:30:34:A0:86:8F:A3:75:96:5E:65:DA:D8:BE:16:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a5:a3:88:1e:cc:cc:da:97:20:ad:f9:8c:6c:8b:8e:c7:99:
         a5:42:80:ca:9f:9e:23:06:b2:0b:74:cc:87:11:b8:aa:35:de:
         27:e4:b0:3f:23:a0:e4:56:d7:7d:2d:38:7f:59:86:fc:bb:20:
         dd:57:09:54:c9:67:80:ab:71:04:9c:ad:ef:ab:7a:1c:4d:76:
         55:e4:de:45:8b:3b:fd:58:50:3f:85:45:88:7f:f9:45:ae:ee:
         aa:ad:66:13:3e:9b:c7:d8:35:98:b1:ad:02:ca:72:8f:dc:7d:
         61:7a:6a:18:ef:a7:9f:ed:6f:6f:38:7b:2d:b3:99:b5:d5:ce:
         61:d6:97:7a:80:ab:26:e8:2d:19:c0:8b:0f:c8:e5:83:de:84:
         85:b9:d2:03:e7:3d:03:94:75:66:78:69:a7:a0:7c:b6:a5:1e:
         63:9e:fc:17:1b:70:3d:85:f8:bc:aa:e1:0d:82:41:c9:88:70:
         0e:4f:4f:c8:1c:64:36:4f:99:f6:9f:6c:61:01:96:82:83:6f:
         5b:ed:9b:24:f6:6a:16:44:a3:45:56:5a:49:9e:56:35:33:8c:
         6f:fb:a4:cf:1b:e4:fa:18:fc:24:e5:7a:d5:34:aa:9a:b4:81:
         10:3e:d7:9c:eb:1c:4a:cb:83:51:f0:64:b9:5a:2b:a6:64:d5:
         e3:51:b4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:42 2025 by rpki-client