Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/07c30033-c037-384c-b725-0b56b7f2738d.roa
File:                     07c30033-c037-384c-b725-0b56b7f2738d.roa (raw, json)
Hash identifier:          zf5vBx8SBNOG8zrpT0CzlUNJ7o7ClZnlmeTvAaCNr+A=
Subject key identifier:   80:39:30:DB:1E:DB:C6:48:D8:C0:BD:ED:6E:EF:11:C8:1E:68:D6:ED
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F432858484D759A1A5B2C5A9287AC31E0
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/07c30033-c037-384c-b725-0b56b7f2738d.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     4181
IP address blocks:        198.150.172.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:9a:1a:5b:2c:5a:92:87:ac:31:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=450fc608-4f26-41b0-9c6f-dd77471e66ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:d3:17:c4:82:f1:bc:4c:d2:15:88:39:0b:
                    57:4f:8d:25:96:0c:02:98:72:61:46:2a:11:9c:98:
                    35:06:ba:b6:13:99:49:4e:ae:02:99:23:40:17:c3:
                    bf:46:5c:46:96:eb:28:98:a0:e7:23:14:4d:90:d9:
                    fc:33:9a:97:0a:bf:6c:e6:5f:da:50:de:90:09:42:
                    7d:59:8a:8f:b9:ea:6e:d1:46:b9:34:e9:6b:b8:e1:
                    8e:48:f3:ac:ec:a9:8e:18:f8:f6:23:3c:df:cc:05:
                    8d:55:e4:2e:7c:ac:6d:2d:9a:24:e0:be:70:82:4f:
                    8d:b1:aa:86:30:ae:71:88:d9:94:7c:ee:82:bb:a2:
                    89:57:89:7e:9f:b3:32:d4:e8:87:d9:91:9f:1c:b4:
                    4c:8d:06:ba:25:c4:fd:5d:fe:4b:a1:ef:76:90:97:
                    fb:85:5c:b4:eb:36:dc:22:67:7d:bd:84:39:05:28:
                    2c:60:4b:a1:e8:01:17:96:d5:fa:6b:ca:4a:83:a2:
                    96:2e:31:4f:71:9d:93:83:67:47:61:21:8b:5c:ca:
                    3a:c2:33:d3:0c:fc:b7:52:e9:1c:78:4b:eb:28:78:
                    cc:be:1b:00:d4:84:11:1f:18:a6:4b:ea:91:0a:c7:
                    7d:42:91:d2:a9:21:29:60:ff:33:3d:3c:f8:c5:5c:
                    c9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:39:30:DB:1E:DB:C6:48:D8:C0:BD:ED:6E:EF:11:C8:1E:68:D6:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/07c30033-c037-384c-b725-0b56b7f2738d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:fe:a9:95:ed:13:5c:1d:cc:c4:8d:df:b3:6d:91:37:09:a6:
         9e:fb:0e:65:aa:a2:55:02:f1:75:e4:d0:71:95:d1:65:69:fd:
         31:3e:1a:5d:53:25:af:6b:85:37:5a:8e:90:01:1f:d6:b6:8e:
         cb:8b:16:6e:6c:a7:d1:4a:c6:41:2d:8d:5b:14:ec:26:53:d6:
         ae:88:e9:9b:59:d4:f5:50:fd:09:39:63:53:27:b2:35:ec:e4:
         90:bf:e3:8b:bc:46:d5:39:fa:28:ec:f2:4c:0b:e0:6a:20:54:
         c8:d3:9d:f5:b4:13:c9:07:09:31:60:16:a8:d3:fb:16:a1:5b:
         a2:a8:e7:be:fd:e7:58:b7:f1:a2:a2:cf:a2:c6:3f:a9:65:4e:
         b3:54:59:a3:3e:70:d6:61:d2:75:8a:56:1c:69:9a:75:1c:ca:
         d4:82:71:57:c5:16:3d:ea:4a:c9:a4:dc:6f:b7:e8:69:25:34:
         27:e0:a6:a5:4f:b4:b6:82:04:7d:2d:24:c2:5c:77:4e:50:f8:
         42:e6:c2:47:76:32:84:7b:88:e8:5a:da:0b:5a:14:78:b7:15:
         dd:86:94:ed:ed:8e:f8:d8:d7:c2:e0:dc:cf:64:03:0f:96:60:
         ae:17:29:ef:23:14:e4:c9:e8:97:c0:96:c8:6f:68:9b:65:d6:
         cd:8d:47:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:24:48 2025 by rpki-client