Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/9b5c1ca8-e48e-3b72-b932-bf613f601785.roa
File:                     9b5c1ca8-e48e-3b72-b932-bf613f601785.roa (raw, json)
Hash identifier:          K+ud1bxLshwrada3ML7O8YjnCFBBE6p9fFNtNso5ux0=
Subject key identifier:   F9:3B:11:5D:54:99:AE:42:39:2D:69:CB:E5:FA:40:EE:E8:82:D7:B2
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F432858484AAAE2D799B0F6E3BE9262C0
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/9b5c1ca8-e48e-3b72-b932-bf613f601785.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     3136
IP address blocks:        198.150.109.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:e2:d7:99:b0:f6:e3:be:92:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=ade34a5c-224e-473c-9a52-07e05b596a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b3:80:ed:61:01:41:3f:e9:3a:ef:bf:97:93:
                    60:2e:97:fa:c1:3a:07:3f:bf:0c:75:c1:74:2e:b0:
                    6c:4f:41:dd:fc:03:d4:98:3d:f0:45:12:1b:60:a6:
                    9f:8b:1f:fe:26:c7:2f:58:fa:72:36:45:9d:79:26:
                    96:ed:62:01:b4:da:4c:59:01:5d:d5:52:2c:70:29:
                    27:3b:37:f2:3e:0c:5f:ef:1f:9e:06:44:6a:2c:85:
                    80:89:2d:ba:5d:6b:0e:65:05:e6:52:23:8d:09:ba:
                    c2:99:78:f5:c9:1d:16:8a:b5:65:09:72:a8:a9:ff:
                    0b:25:6c:ae:69:cf:00:b6:e3:8f:2f:8b:49:bb:10:
                    9b:60:b6:1c:5a:7f:c6:d3:a1:68:f4:08:08:a9:ae:
                    82:7e:a9:ec:e1:f5:29:c9:d9:25:2e:97:25:f9:75:
                    e1:02:82:38:bc:b2:b7:d0:d9:c9:de:13:52:84:e5:
                    0c:24:bd:83:86:04:2f:6e:18:ed:fb:2a:eb:ff:3b:
                    dc:d5:d6:e4:24:af:01:11:b7:28:3f:49:51:27:22:
                    90:0f:de:f7:98:5a:53:82:e3:bc:28:dd:ae:83:24:
                    26:2e:16:ed:c3:a4:28:02:bd:ad:18:be:1f:57:79:
                    26:a9:24:81:ee:2c:5e:c5:f8:3d:38:98:6b:42:80:
                    29:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3B:11:5D:54:99:AE:42:39:2D:69:CB:E5:FA:40:EE:E8:82:D7:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/9b5c1ca8-e48e-3b72-b932-bf613f601785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:1c:76:bb:4c:36:3c:d6:36:56:2d:c5:f2:4c:68:ef:67:f6:
         ce:a5:73:4e:7a:ab:14:c4:a9:6d:5e:ad:e9:6a:67:2a:b4:68:
         e6:0a:4f:8a:20:bd:b1:01:88:c4:5b:64:53:a8:20:9a:94:39:
         b7:0c:35:b2:4d:e9:54:10:12:09:25:7e:e1:47:bf:3e:57:1f:
         18:22:0c:64:4e:86:0a:3e:46:cb:60:37:ce:0e:17:b6:32:12:
         bf:6e:34:aa:f3:53:1e:52:4d:8d:97:5e:23:be:79:79:25:61:
         78:f7:a3:98:42:d9:a1:fe:c1:3c:8d:ec:7a:99:2c:ad:ee:37:
         f8:08:3b:70:2d:06:c5:bf:58:be:ef:bb:75:2c:41:f0:89:74:
         f2:f2:5a:9d:65:1c:a4:3d:c2:44:63:d7:12:1f:3e:4d:9e:f8:
         e6:4d:17:cc:f2:e9:d5:f4:30:d6:93:62:f5:51:cd:b0:19:6d:
         e6:56:7e:76:95:c8:59:3e:ae:8c:ca:e0:d4:e2:5c:25:38:2b:
         1b:b6:2d:6a:5e:c9:74:37:5a:8b:31:b7:67:51:ee:c6:3f:3b:
         f3:70:49:7a:c1:60:fd:5f:8c:c2:f5:c5:1e:7f:ee:03:67:d6:
         8a:7c:f2:49:4e:f0:77:f1:68:36:34:e6:97:8d:3a:bb:53:c4:
         76:bb:ec:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:52 2025 by rpki-client