Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/628a58af-0c8e-38fb-8989-731626c867dc.roa
File:                     628a58af-0c8e-38fb-8989-731626c867dc.roa (raw, json)
Hash identifier:          9/7LAFPiQHFfEjy7DYFjilIjRucqfDeOEg+oUwZewcM=
Subject key identifier:   20:3B:52:B4:BC:2C:87:40:65:DD:95:17:22:12:99:7E:80:C1:69:F0
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F43285847F584F78FDDF1DA7841A91680
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/628a58af-0c8e-38fb-8989-731626c867dc.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     36829
IP address blocks:        141.195.99.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:f7:8f:dd:f1:da:78:41:a9:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=65408f40-d377-4e81-8788-0146a4c6ced7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:17:8e:57:d4:95:3f:6f:0d:2e:ac:e9:ef:51:
                    63:16:3f:ab:c7:5e:be:c1:cb:40:08:ac:b5:c2:3c:
                    d6:2f:03:97:a3:84:d9:05:d7:08:45:7a:b0:99:4b:
                    53:dc:87:a5:52:f0:26:01:cb:78:f7:41:23:49:a8:
                    2d:a1:51:64:89:8f:53:1a:96:b9:42:1c:b1:a8:1f:
                    42:e5:71:dc:4e:bd:3a:88:08:69:57:1f:34:f2:23:
                    4b:d7:ef:33:78:f6:16:af:a9:1f:cd:e7:f4:ef:8d:
                    8b:12:c9:a6:c2:77:18:47:b7:f8:3d:d0:a4:dc:97:
                    53:b3:e6:2d:33:ea:b0:70:57:74:d3:13:c7:78:6c:
                    b4:41:18:12:f1:12:00:8d:4d:27:43:59:6e:de:55:
                    08:33:80:4c:16:88:d4:b7:09:a1:c3:7c:3e:e2:d8:
                    7c:ae:70:59:60:12:36:31:43:eb:82:a2:02:06:71:
                    50:b6:96:e7:5f:8d:1e:34:6a:5a:1e:d6:bc:c2:e0:
                    3f:8b:ac:65:d9:58:d5:81:6a:f1:11:5d:db:ad:fb:
                    2d:92:36:7b:30:df:41:8f:f7:2a:80:83:50:99:74:
                    61:ca:cb:80:71:54:f3:48:84:41:ee:53:9c:9f:f3:
                    b0:b3:a6:ad:50:f2:8e:61:4d:4c:08:81:dd:0a:6b:
                    b8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3B:52:B4:BC:2C:87:40:65:DD:95:17:22:12:99:7E:80:C1:69:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/628a58af-0c8e-38fb-8989-731626c867dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9e:87:8c:27:3a:b7:46:88:b3:b4:e0:12:a4:44:e9:d7:b0:
         f9:b1:d2:a5:b5:06:c4:09:ed:3a:0f:10:7a:c5:2b:0d:ee:0c:
         7a:76:46:61:eb:79:c8:b4:9e:70:f5:37:fe:81:df:55:de:4d:
         72:fa:86:c3:19:8a:c2:b3:9c:1d:47:07:e8:b6:45:76:09:b7:
         36:64:d2:35:93:e2:3f:de:08:ad:9b:7e:c8:f3:3e:4b:3e:0d:
         4b:5f:3d:a0:62:b3:aa:e0:ca:67:82:0a:7a:25:59:06:0b:55:
         c3:db:24:0d:82:55:82:c3:fe:35:4c:c5:1c:96:97:89:8c:21:
         da:b3:cf:ca:fb:d3:5b:dc:6e:1a:08:39:68:a0:9e:f4:0a:50:
         05:bf:1d:4e:a2:1a:74:57:1b:5d:64:72:2a:02:77:84:c0:0d:
         48:1d:a4:6a:24:d3:ba:22:a3:14:18:13:d9:db:32:68:ca:4b:
         b5:cb:b2:0f:58:df:17:fe:31:f0:3e:83:6d:53:3a:5b:7b:d0:
         4a:96:39:ce:41:68:af:a6:67:a8:10:fc:19:01:c0:e3:05:b2:
         59:21:86:f9:46:b4:62:e2:fa:0c:ea:78:ef:d2:9c:c0:83:c9:
         40:89:50:0c:68:bb:09:4b:05:33:67:09:04:b2:ec:87:02:04:
         22:0d:ad:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:40 2025 by rpki-client