Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4958a300-389c-3447-9137-eb63e47ab7a1.roa
File:                     4958a300-389c-3447-9137-eb63e47ab7a1.roa (raw, json)
Hash identifier:          qyrTzwvV/zfts1JY0KXKZ4g0m7r1xw9kUPLtQZqinK0=
Subject key identifier:   1D:15:5E:D9:40:FE:AF:0D:CE:50:43:8E:69:3D:67:E7:3E:26:70:74
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F432858485E35AC6927419FABD91D7200
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4958a300-389c-3447-9137-eb63e47ab7a1.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     262287
IP address blocks:        198.145.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:ac:69:27:41:9f:ab:d9:1d:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=fefc4e41-f25e-4186-b9d4-a48e37b7ebb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f0:b7:2c:05:28:63:69:75:be:18:e1:a3:86:
                    9f:72:c1:d3:7d:ae:3f:64:48:fa:60:cc:a0:14:48:
                    6f:b7:12:09:48:30:b0:05:7f:e3:43:ab:14:93:4a:
                    7c:8b:fa:ec:78:87:9d:ba:35:6a:c1:fb:6c:26:b5:
                    f1:b5:c3:e1:dd:c8:cd:3b:10:90:7c:1b:55:87:5c:
                    6f:9a:98:bb:6d:95:cd:a6:5e:ae:e8:5d:e2:fa:eb:
                    a8:24:d4:bf:fe:f9:81:81:2e:7b:28:7c:47:15:e3:
                    e7:bd:0d:17:fb:e0:6e:7f:13:75:aa:34:59:03:d2:
                    3b:3b:6d:af:a6:c8:cc:19:9d:c1:0f:0c:5b:c8:6e:
                    74:25:f3:72:75:00:28:bc:ad:70:48:3c:f8:df:7e:
                    64:e4:2a:39:1c:99:47:84:19:74:73:67:46:e6:9f:
                    de:40:06:9d:fa:0f:ff:97:61:2b:cb:ba:fd:5b:d5:
                    5c:25:6f:04:47:56:0f:6c:84:44:50:c2:b6:54:e9:
                    0c:8c:e4:47:fc:56:81:3d:d5:aa:e3:1f:5f:e7:23:
                    1b:87:d0:61:f6:f5:1c:73:d2:9d:77:88:d9:ab:95:
                    52:3b:19:55:5f:cf:5f:2d:15:c1:e8:f5:eb:20:a6:
                    28:d0:64:7b:bb:0d:17:3c:36:25:99:73:ae:c5:fc:
                    06:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:15:5E:D9:40:FE:AF:0D:CE:50:43:8E:69:3D:67:E7:3E:26:70:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4958a300-389c-3447-9137-eb63e47ab7a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a5:60:b1:c8:dc:44:9e:91:fa:1f:e7:b3:21:c5:e4:a5:82:
         c1:62:3b:23:d5:cf:f7:23:5f:5d:8f:99:85:04:38:20:0e:f7:
         1b:01:cf:c1:0f:48:46:7a:33:dd:62:c6:4a:63:6c:0a:0c:6e:
         18:b7:cc:fc:42:f4:eb:a7:35:c9:3d:b8:91:f8:90:13:7e:1f:
         46:87:5c:b8:9a:d5:ec:d0:d1:0f:cc:9c:94:a1:09:4f:11:7a:
         3e:c8:6b:48:b7:f0:3e:86:a9:aa:07:80:f3:83:16:2e:02:75:
         e5:8b:c0:4c:e5:76:3a:38:4d:50:84:14:86:0a:78:98:3a:41:
         1c:fc:28:5f:d6:e4:d0:e8:a0:fc:b2:18:1b:1d:d8:e7:99:ed:
         c0:86:70:6f:93:32:91:96:ea:1b:fb:10:2e:7f:9f:27:af:0a:
         de:ef:51:b9:13:62:a3:e3:f1:a9:6c:38:35:a9:d6:c6:df:a3:
         a5:4b:15:e3:a7:ff:2b:d5:01:78:a4:ab:11:58:aa:ea:bc:1f:
         5f:d4:54:a7:40:c9:18:9b:ff:59:c9:03:52:4d:8e:6e:54:d1:
         2a:37:6c:88:a1:be:5d:43:91:df:27:79:44:5a:cc:5e:1b:a3:
         d6:7c:03:85:b8:cc:99:30:5e:b3:b7:16:67:25:6a:f4:3f:90:
         26:9e:00:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:22:00 2025 by rpki-client