Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/42c47900-5457-3149-beac-2366a6171933.roa
File:                     42c47900-5457-3149-beac-2366a6171933.roa (raw, json)
Hash identifier:          Zipx78PiNMdH7yETn4th0cWdEf4On4VN/2J083dfc90=
Subject key identifier:   6D:D8:D4:97:4D:00:3F:4F:7B:00:F8:63:3D:B3:F9:E1:49:EF:C1:2A
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F432858486EF5B821FB403FB4BC0F3080
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/42c47900-5457-3149-beac-2366a6171933.roa
Signing time:             Sat 04 Jan 2025 14:00:51 +0000
ROA not before:           Sat 04 Jan 2025 14:00:51 +0000
ROA not after:            Fri 04 Apr 2025 13:00:51 +0000
asID:                     9009
IP address blocks:        198.145.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6e:f5:b8:21:fb:40:3f:b4:bc:0f:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jan  4 14:00:51 2025 GMT
            Not After : Apr  4 13:00:51 2025 GMT
        Subject: CN=f2d15f8b-9012-4b09-be0c-dc02964ccb48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:ee:79:82:e8:f0:b7:b8:ba:c3:a1:0a:cd:
                    d3:ca:5e:cb:27:b9:1f:4b:4a:ca:32:4a:16:5d:6c:
                    cf:d0:73:52:4a:69:62:64:02:7e:be:3b:c4:a6:77:
                    92:60:4e:87:20:a1:11:c6:43:66:16:11:ae:1a:d1:
                    1d:8b:9e:d2:54:a5:3c:f5:81:7a:2e:90:81:5f:1c:
                    ef:81:41:f9:be:b7:fd:16:4b:aa:49:bd:d2:56:2e:
                    1c:ec:25:66:5d:c5:79:3d:14:16:16:2e:66:68:af:
                    17:2b:14:34:80:43:82:57:37:22:0d:71:f9:f5:25:
                    29:07:16:b8:f6:e3:f8:2d:8b:3d:65:13:23:1a:19:
                    5f:b3:2c:1c:40:c0:9b:b3:5f:e2:31:d8:93:ee:fa:
                    66:c0:c1:2f:6b:ab:f8:a2:9e:05:ea:62:58:4c:c7:
                    c1:d1:29:f4:5b:7a:1c:57:6c:48:da:1b:d3:04:4e:
                    ec:b4:d9:d7:36:5b:c5:91:a4:64:3e:fa:8e:00:fa:
                    32:f0:4d:27:57:68:f4:d8:d2:df:96:61:75:d3:3a:
                    f8:76:e0:96:de:16:fd:89:6d:bf:53:b5:dd:9d:98:
                    0f:08:06:27:9a:d3:0e:49:d7:06:f7:a3:13:78:aa:
                    50:25:6f:1a:e7:bb:35:7c:97:6f:a4:c5:28:d0:7c:
                    27:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D8:D4:97:4D:00:3F:4F:7B:00:F8:63:3D:B3:F9:E1:49:EF:C1:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/42c47900-5457-3149-beac-2366a6171933.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:bb:ce:76:15:8a:dd:2a:fe:66:d7:58:5c:4d:0e:e2:57:27:
         b3:7b:38:8b:83:10:25:1a:92:c8:f5:e8:23:93:e2:dd:72:3d:
         57:98:c2:21:c7:50:6a:b0:2f:ee:8e:4a:21:ed:18:f9:2f:62:
         ff:03:60:57:30:45:3e:06:44:4d:e0:fa:08:22:01:10:5f:bd:
         bd:49:5b:9c:de:02:bd:50:af:79:5c:13:b6:b1:30:44:7a:36:
         27:05:a4:66:77:2c:6b:3f:25:a9:f7:15:79:73:ec:18:02:d1:
         0a:40:fc:17:0d:1b:39:2a:4d:b7:e5:90:72:6b:a7:cb:68:27:
         06:2a:95:96:b1:88:07:dd:bd:01:e7:be:2d:63:e5:51:0a:d3:
         29:c8:e1:af:76:5d:23:09:a2:f5:3a:43:37:0b:c9:94:6a:b6:
         53:84:54:70:9c:6a:e7:4f:c0:6b:4f:5a:07:2d:7e:42:9e:8e:
         b1:73:95:07:02:38:b4:bc:60:10:e6:3d:ec:41:08:80:0d:58:
         b5:f0:1d:fc:6d:55:ad:78:0d:bf:41:2d:2f:f8:14:80:c0:ec:
         1d:30:b5:0f:6e:da:5a:98:0e:a1:61:d5:93:df:99:0b:6a:15:
         5f:3a:2d:02:70:74:fd:b9:67:2e:33:5e:54:32:cf:35:10:bc:
         7d:cf:3f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:26:14 2025 by rpki-client