Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/6f6c6da7-938f-331f-aa19-5573ef780ea3.roa
File:                     6f6c6da7-938f-331f-aa19-5573ef780ea3.roa (raw, json)
Hash identifier:          qnf5rxxFpxswKS2JwjWz0b3JLBWacgLnKeXnx4GSs+s=
Subject key identifier:   E8:14:90:01:D1:A9:F1:9A:37:B6:6B:8F:3B:88:6C:64:58:DE:03:2C
Certificate issuer:       /CN=4e2aa2db-3714-4200-b480-469b49ebedb9
Certificate serial:       010D0C9F43285847FDE4D6A24B9DAA7865D98650
Authority key identifier: 77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/6f6c6da7-938f-331f-aa19-5573ef780ea3.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     397913
IP address blocks:        192.148.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:d6:a2:4b:9d:aa:78:65:d9:86:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2aa2db-3714-4200-b480-469b49ebedb9
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=1d5af027-3c13-458e-9669-3bd7c4103cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2b:c0:5c:2b:fe:75:11:b1:9e:87:6a:ba:4d:
                    8f:92:63:08:eb:cd:ff:98:ff:06:28:81:5e:46:17:
                    e6:5b:48:66:00:dc:e6:d1:eb:14:32:76:58:42:f6:
                    d0:53:8b:f3:68:c5:f9:27:c5:cc:19:2a:ea:35:8c:
                    f5:82:ca:8b:6d:41:93:89:ba:62:10:a2:e2:65:35:
                    bf:41:16:40:7f:02:fd:b7:dc:78:e8:d5:ec:5a:0e:
                    d1:f3:4c:3e:38:a8:f8:22:e3:46:c8:61:b4:22:10:
                    dc:a8:ef:09:06:76:b9:d7:98:a1:f1:11:96:2b:be:
                    6f:79:4d:96:4f:62:b9:d7:f0:35:1b:09:3c:74:ca:
                    90:5c:89:27:ef:65:6b:be:a4:50:cc:02:3a:3e:30:
                    7c:07:af:45:0a:15:6a:34:7b:37:78:e6:8a:7e:a3:
                    dc:83:dc:1d:39:a8:33:91:7b:7d:e6:13:a6:6e:65:
                    70:65:38:24:bd:ef:d4:c9:57:49:39:89:42:3f:d3:
                    cb:cd:7f:b5:cb:a5:e6:d8:74:f7:61:ae:19:c1:bb:
                    f4:6d:c0:59:65:be:72:a2:52:a4:7b:af:d0:ca:7a:
                    87:2d:10:e5:e3:77:1f:1a:43:27:21:b5:68:6e:4c:
                    42:c6:96:fb:0d:ae:8e:cd:b3:b5:d5:dd:ba:dd:b0:
                    da:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:14:90:01:D1:A9:F1:9A:37:B6:6B:8F:3B:88:6C:64:58:DE:03:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/6f6c6da7-938f-331f-aa19-5573ef780ea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl

            X509v3 Authority Key Identifier:
                keyid:77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.148.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:92:ed:a0:07:8a:2f:36:97:4c:09:3a:da:07:7d:c7:bb:fb:
         dd:b5:70:93:76:a9:ca:13:7f:62:33:2e:6b:73:88:c4:e4:9a:
         b2:7f:ba:20:ad:c3:16:43:98:e2:aa:95:6e:f6:2e:b9:9e:4d:
         a8:f3:f4:e3:3c:ad:41:3f:5b:98:f0:9c:06:90:99:be:9a:fb:
         68:63:37:80:84:bb:da:78:d8:e8:f4:a3:47:15:a2:fe:93:81:
         7e:75:8c:eb:b1:94:d4:ab:6b:01:89:4b:09:b0:89:4a:ef:36:
         a1:7c:e1:3f:de:d8:5e:8c:54:e4:96:6e:94:2d:0b:b6:fe:30:
         fa:5f:b6:a8:ed:5d:5d:5f:7e:c0:fa:91:69:09:12:69:24:16:
         6d:a6:0f:8d:b3:db:78:1a:51:ca:9c:d8:8e:93:81:35:20:0c:
         18:b5:11:81:85:58:10:a5:af:d2:df:39:4a:97:92:75:9a:68:
         f9:7c:5f:34:67:d3:7d:2c:48:45:ea:5a:8a:38:26:f0:14:0c:
         72:1f:c7:18:51:4f:92:8c:a1:76:68:7a:38:17:0c:50:14:0b:
         41:11:f2:88:bf:ae:c2:40:a1:73:3a:b1:9b:51:36:87:70:bf:
         5b:ce:bc:84:20:62:e8:36:53:24:6b:c9:67:84:e1:fb:b7:8a:
         1e:44:53:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:08:55 2025 by rpki-client