Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a740622d-6498-3883-b84d-5e46c91b4dcb.roa
File:                     a740622d-6498-3883-b84d-5e46c91b4dcb.roa (raw, json)
Hash identifier:          oc1j9lRDHiPs/dUHDVdonnpC/4Zx72MCFUzl6wDghPI=
Subject key identifier:   22:49:03:55:53:27:65:61:F3:15:4F:70:F1:EF:D9:81:C7:60:FD:3C
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F432858485B6AFD748263853F9D1F7C00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a740622d-6498-3883-b84d-5e46c91b4dcb.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     209181
IP address blocks:        198.145.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:fd:74:82:63:85:3f:9d:1f:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=4c5bf978-da57-4fee-a563-b7b400123cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:85:ef:41:4b:98:ae:eb:4e:c1:36:94:a2:d8:
                    27:5f:ba:10:29:50:54:5a:71:d6:35:0a:85:40:d5:
                    eb:e8:a0:7e:4f:ac:6d:33:49:bf:de:0a:81:85:25:
                    83:de:7e:44:e4:88:52:62:73:9e:5f:2f:ad:e3:c5:
                    56:70:f1:73:d1:c5:e1:d9:08:28:38:61:13:07:f6:
                    17:d7:1f:b0:d8:2d:43:f4:92:74:ca:54:7c:9a:8c:
                    a4:c2:fa:35:0d:5a:27:0a:1e:45:4a:f9:ad:d9:79:
                    aa:44:a7:5f:d4:fa:e0:c8:2c:28:70:f1:83:74:b1:
                    2c:84:58:25:7d:48:bf:62:51:cc:c2:40:3e:4c:7f:
                    49:41:8e:e5:b7:54:5a:b2:1f:14:37:98:ed:92:85:
                    c6:f8:9e:8d:7c:e2:5e:2d:a8:89:9d:75:e3:21:86:
                    22:b7:f4:ef:16:be:6f:e8:a8:ef:e7:69:26:33:a8:
                    f5:e2:92:d8:7a:6b:59:8e:e0:45:4e:2c:59:cb:0c:
                    3e:66:f7:92:90:6e:c0:66:9a:33:13:7d:d7:b2:c0:
                    98:51:4d:8e:70:a8:94:73:31:26:85:26:6b:57:80:
                    ff:85:a2:09:b9:f6:56:c7:29:43:5e:b4:7a:3d:19:
                    78:c8:e7:25:8a:f0:e5:bc:78:eb:e7:4c:12:3d:a0:
                    11:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:49:03:55:53:27:65:61:F3:15:4F:70:F1:EF:D9:81:C7:60:FD:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a740622d-6498-3883-b84d-5e46c91b4dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:19:87:5e:72:81:04:1b:0a:c7:28:1b:15:9f:57:a0:35:ce:
         b1:a8:ab:1b:7e:b7:16:2d:f8:8a:0c:f3:e2:f0:7c:2a:2e:3b:
         d1:bf:36:ab:e4:6d:4d:7a:3f:02:29:26:8c:ab:84:2c:2c:57:
         d9:10:d0:14:22:2f:28:7c:0f:c0:ab:63:4a:73:a0:d0:2a:1c:
         ab:f1:8d:1a:52:05:b5:bb:49:c2:a3:2f:82:81:b6:9e:c0:69:
         5c:bb:ad:e7:c8:5d:20:22:b8:e1:9e:e1:f4:4a:6a:43:3f:81:
         37:80:72:6d:b5:8f:a6:82:63:c7:77:fa:81:55:d8:36:7a:87:
         e4:61:8e:ad:f4:3b:8a:30:4e:ab:d4:e4:f0:96:b1:fe:96:da:
         9f:eb:62:e2:f2:20:d0:f9:ca:1f:c6:72:87:cb:d7:71:71:e6:
         31:7f:aa:7c:19:1d:48:4d:82:21:03:24:8a:28:0b:60:b6:14:
         cd:e1:8d:ad:23:4b:7e:e7:75:72:5b:d9:9a:50:d6:f5:d7:a2:
         9a:13:9b:0f:5f:2e:aa:f4:6b:9e:c7:4a:11:95:d0:c0:45:b6:
         53:99:e8:dc:41:f8:da:1b:cb:97:f4:1f:00:0c:2a:85:e2:3a:
         ef:3a:bd:38:c5:ed:55:4a:8f:71:8c:66:c7:19:91:2b:f4:a5:
         e8:6b:4d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:44:37 2025 by rpki-client