Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa
File:                     564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa (raw, json)
Hash identifier:          1Hq1xRXpsgjG/gMsufQ18NXCir5KMCKqddIG2DkK87s=
Subject key identifier:   25:DB:EB:85:2D:4C:25:C9:5A:AD:FF:43:6C:09:03:B6:0F:EB:61:F8
Certificate issuer:       /CN=1380a44d-7851-4eb6-8887-413917dcdc12
Certificate serial:       010D0C9F432858488DAB4ED53773B36B90D3C0F0
Authority key identifier: 6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     132369
IP address blocks:        199.101.116.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:4e:d5:37:73:b3:6b:90:d3:c0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380a44d-7851-4eb6-8887-413917dcdc12
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=91afb8f6-5214-4bbd-9785-a6d8827292c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:5e:87:4c:6f:61:e4:81:59:89:9c:42:cc:
                    04:dd:6b:97:d2:58:37:38:6e:43:39:ec:7d:36:66:
                    40:9b:fa:3f:8d:01:2b:6d:a6:68:30:fd:4b:2f:b0:
                    a0:5b:3c:b7:af:61:69:53:81:16:45:5a:5a:27:12:
                    bf:f7:ac:4a:b8:a0:6d:92:b0:36:33:27:c3:59:a9:
                    09:4b:4a:6a:86:48:26:80:b8:51:7f:34:8e:36:c8:
                    aa:2f:35:b6:61:7b:c2:e1:fc:1e:77:73:76:f3:d8:
                    67:95:ae:55:6a:63:a9:62:22:2e:1e:2e:2c:08:52:
                    bc:e3:d9:66:7f:6f:a8:eb:df:d7:cb:d4:d2:a6:af:
                    4a:fa:72:42:2b:57:87:81:d7:c8:d1:cd:6b:d6:7a:
                    bc:d6:21:28:2f:02:07:fc:f0:f3:ae:d9:04:42:15:
                    e0:28:ee:52:49:0e:e4:7e:70:60:a9:ad:33:e4:03:
                    ca:5b:d7:6a:a8:3b:93:80:99:2d:f0:25:dd:d5:53:
                    e9:c4:12:c2:e2:61:dd:27:d2:63:30:b1:86:45:b3:
                    fc:b0:ee:3a:d1:ff:16:68:5f:e6:d2:03:db:4f:5a:
                    fa:e6:74:f3:57:14:86:33:e1:8a:8f:54:f4:02:0a:
                    4b:66:d2:ff:96:1d:56:0a:80:63:2c:6a:85:44:4e:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DB:EB:85:2D:4C:25:C9:5A:AD:FF:43:6C:09:03:B6:0F:EB:61:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/564dab34-32c7-3d2a-89a2-0f3e970ee2e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl

            X509v3 Authority Key Identifier:
                keyid:6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:b9:bd:fb:48:c0:4b:1f:6c:98:6e:39:49:06:10:8b:33:
         bb:fc:80:08:4a:e2:55:73:a4:56:d1:0c:c8:65:1b:52:f9:31:
         b8:fe:ad:1a:a1:3e:13:ac:0e:f2:c2:4b:e6:52:56:35:90:74:
         f3:14:18:bc:ec:1a:ad:ea:5b:67:d7:75:3c:75:34:90:91:b9:
         4a:f6:b3:39:67:bd:8c:29:a8:87:98:a1:1b:1c:8a:c0:d1:58:
         53:f0:15:87:72:75:71:5d:61:38:9e:7f:54:96:b7:71:b5:72:
         f5:60:db:81:1a:e6:fe:69:58:f2:26:06:73:9c:c8:cf:dc:e5:
         49:2b:eb:d7:e0:a8:af:5d:11:33:a2:48:d6:00:a7:b7:b0:ef:
         9a:04:44:dd:9e:63:2c:45:04:0f:7b:89:27:a7:7c:f8:5d:00:
         6d:83:d7:36:75:91:03:07:ce:64:50:9d:47:31:86:92:1d:81:
         64:98:97:e2:09:ad:0f:fc:b4:c4:c9:73:fe:7f:1a:32:aa:70:
         62:ee:fc:d3:41:f2:97:16:88:57:99:a3:e4:aa:13:c3:0d:be:
         46:c7:66:6a:89:60:ca:81:3a:2b:bf:31:4e:64:87:39:3c:86:
         03:6f:f3:7e:11:cb:fb:14:70:d4:df:c1:f0:b2:62:8b:62:b8:
         e4:13:4a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:56:55 2025 by rpki-client