Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa
File:                     44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa (raw, json)
Hash identifier:          dPurl68uPqunVbP2bVItTphRywcHMuzxNUsdwNgXZVw=
Subject key identifier:   56:28:7D:A9:D8:59:66:5E:3B:5E:73:EB:30:2D:6F:80:60:B6:A0:3E
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F432858485CD02F7B350E573AE033AB00
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     2381
IP address blocks:        198.150.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:2f:7b:35:0e:57:3a:e0:33:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=a7e6879f-9745-4273-ac32-42bfbd1b2636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:65:49:ed:56:2b:dc:49:00:b8:20:bd:39:c1:
                    df:dd:2f:e3:a7:e3:7e:98:52:25:83:93:8c:b1:fc:
                    ae:a3:b4:76:31:50:7e:52:bb:95:a8:3b:a0:c7:6a:
                    4a:08:5d:b7:d4:cb:e4:46:b1:57:c7:68:a9:f4:7f:
                    ed:37:bb:61:22:ba:48:05:11:f4:41:63:6c:3f:7d:
                    83:be:96:08:82:ef:c6:7b:01:98:2b:ff:88:64:c0:
                    9f:75:cf:d1:54:6f:80:24:c7:81:96:bd:e6:b2:3b:
                    50:18:a6:b7:aa:d4:37:ed:a5:4f:d9:08:47:8c:de:
                    e5:c6:d7:99:b8:1b:7d:90:7e:ad:0e:6f:bd:4c:c3:
                    72:19:6a:10:e4:67:51:30:90:4f:63:bd:bf:92:d6:
                    31:15:b6:73:bd:8b:7f:4b:99:ea:9b:35:35:36:35:
                    7c:2a:c7:97:8a:7d:21:09:b6:ce:cb:84:72:83:87:
                    f4:ce:96:6f:87:88:97:cf:91:da:d3:d2:bd:4d:68:
                    56:f2:1c:5c:57:24:c3:23:ba:8d:6d:c0:f0:25:f5:
                    bc:26:72:37:21:0f:4c:8c:81:9d:a1:07:c3:48:f8:
                    02:29:c1:76:8b:94:85:67:fc:d4:2d:26:ed:a2:4a:
                    24:d5:49:6e:0b:fa:1c:f4:c3:a1:93:b9:42:49:ac:
                    47:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:28:7D:A9:D8:59:66:5E:3B:5E:73:EB:30:2D:6F:80:60:B6:A0:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:92:29:87:2a:d7:e6:a1:4e:79:0d:85:f4:4b:7e:d9:e0:73:
         dd:d8:24:8e:f1:07:9c:ee:8e:d1:de:6f:4e:58:35:5a:a3:34:
         9b:0e:36:a0:35:63:5a:37:66:a3:00:27:f0:71:f3:b3:ca:b5:
         b1:03:61:a2:8d:9d:37:e8:1e:79:6f:14:19:48:f7:1f:d3:79:
         55:ea:41:d4:05:09:bb:1f:43:6d:26:db:09:0f:4b:f0:34:be:
         f1:2a:30:c8:5a:2d:24:9e:5d:91:92:f3:76:4f:7d:27:1b:b3:
         8f:4f:00:6b:70:ad:dc:ff:76:89:35:11:b7:62:6f:70:60:34:
         67:fe:33:51:51:c1:84:94:e8:84:70:55:09:a4:f1:a5:ac:f4:
         92:0b:1e:46:69:5a:0e:a2:24:f1:32:90:47:d7:48:84:7b:4e:
         f3:f9:ed:13:45:d8:b9:12:7d:b5:9e:d8:10:26:eb:b7:2e:1c:
         cd:18:e0:16:74:9d:a9:cb:c5:7f:05:5f:55:07:00:f9:21:66:
         88:8b:0e:16:c6:d2:4b:c0:6d:17:1e:73:1f:51:cf:3e:99:a3:
         e8:de:18:dd:59:d0:21:46:14:eb:03:27:bd:35:76:04:53:3f:
         8f:ab:31:a3:7a:36:0c:b2:83:53:f0:95:9c:c5:ee:f4:da:05:
         b5:c5:3e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:25 2025 by rpki-client