Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/e6160c10-b008-3fd8-8017-49e70935a60f.roa
File:                     e6160c10-b008-3fd8-8017-49e70935a60f.roa (raw, json)
Hash identifier:          h0f/0ucXWk5xrvapWMushy88nh58TWHfjYotDPztXfQ=
Subject key identifier:   B4:62:F5:5C:C2:EB:44:56:C0:E2:3A:9E:D1:B5:89:C3:DC:CF:3B:27
Certificate issuer:       /CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216
Certificate serial:       010D0C9F43285848159FDED400AA22A217850880
Authority key identifier: F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/e6160c10-b008-3fd8-8017-49e70935a60f.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     14618
IP address blocks:        198.99.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:de:d4:00:aa:22:a2:17:85:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=dc1efc72-f036-4ede-b6f7-a59000a93042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:46:a7:3a:57:c1:8d:f0:c5:be:db:f6:ea:
                    c4:cd:9e:54:8e:34:50:fb:eb:ee:36:42:86:e3:97:
                    1e:45:e9:9f:f0:9b:09:8b:6e:db:be:49:5d:12:e0:
                    81:43:ea:a5:08:a8:7e:4c:4c:40:3e:cd:9c:94:a5:
                    71:d4:08:9f:77:6b:a7:6a:80:d7:a0:a0:e7:66:fa:
                    8c:52:7a:b8:6c:37:bf:a1:48:e5:b7:e6:c9:e3:2a:
                    6a:5b:7a:f0:79:22:94:07:3c:ca:e5:90:44:b0:46:
                    f5:1a:61:02:3a:95:65:c3:ab:90:0f:50:f1:a5:c4:
                    7d:2d:35:77:2a:b2:00:56:7a:32:4c:8c:5e:7b:17:
                    2a:a6:c8:aa:77:c6:99:88:55:74:54:3d:07:87:58:
                    b9:b2:78:ff:3b:85:b2:3e:3e:98:b9:4c:24:93:db:
                    fc:cb:97:df:2e:07:8a:33:3e:93:8d:a5:09:47:47:
                    b6:dd:40:7f:3d:52:13:35:3e:2b:64:09:ba:72:24:
                    09:f0:ff:b6:9a:00:32:65:f6:ee:32:ae:a7:e3:5d:
                    2f:22:98:3e:4b:9a:23:64:82:25:1b:66:2b:3d:f6:
                    63:15:a3:2d:3b:7d:b3:d7:c5:03:c1:fd:06:20:33:
                    a1:76:49:37:d8:ba:bf:59:6f:eb:90:13:e5:8a:78:
                    bb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:62:F5:5C:C2:EB:44:56:C0:E2:3A:9E:D1:B5:89:C3:DC:CF:3B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/e6160c10-b008-3fd8-8017-49e70935a60f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.crl

            X509v3 Authority Key Identifier:
                keyid:F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:2d:c0:88:0b:57:82:05:54:2a:04:ca:a9:7a:3d:51:fb:0f:
         b4:72:65:0e:e7:92:f1:88:c0:7f:c4:03:62:b9:8e:ab:68:77:
         dd:a4:3e:a5:98:2b:01:5b:a9:3f:26:6f:14:c5:3b:4d:c8:a0:
         32:fa:72:92:0c:ce:d8:45:0d:ad:17:9d:c3:a6:ac:33:1e:38:
         19:a1:e2:fb:21:09:f0:e7:6d:2d:38:e4:99:df:43:8b:2c:db:
         10:9e:97:cd:69:1f:da:ba:d3:99:e7:3d:86:3e:ad:16:56:df:
         af:ac:b9:f3:d9:c6:50:fe:46:39:93:a5:e0:16:c8:49:fb:dd:
         c6:5d:3b:f8:7e:54:33:14:de:90:f2:c2:12:cf:85:03:1e:45:
         9d:4e:12:71:bf:02:9e:67:40:dc:56:51:11:b7:d5:0b:d1:8c:
         f2:c3:9c:2e:31:5d:f2:73:5e:ca:4d:3b:fd:a6:d1:70:6e:f0:
         98:cf:fb:20:aa:bd:9d:5c:2b:7c:b4:33:75:4f:fd:fc:7b:9e:
         c0:db:89:06:3c:61:b4:8c:1f:a6:a1:91:83:b3:01:62:93:d4:
         34:d6:47:4e:a6:75:ae:0e:27:95:ac:29:18:d8:c3:02:04:cb:
         1b:ff:69:e3:2d:17:c3:7e:b1:2a:5d:e1:e3:5b:9f:46:3f:7a:
         ff:02:10:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:23:08 2025 by rpki-client