Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa
File:                     87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa (raw, json)
Hash identifier:          yCyl5B9uR5b1dbsYgtps0P9bgqnzgoL04DEGno5W2mU=
Subject key identifier:   40:F3:65:03:F0:FA:A6:6B:ED:02:8D:8E:29:6B:B6:DA:3B:60:5A:3E
Certificate issuer:       /CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Certificate serial:       010D0C9F432858480A75143D5D3447473B607E80
Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa
Signing time:             Fri 29 Nov 2024 14:00:51 +0000
ROA not before:           Fri 29 Nov 2024 14:00:51 +0000
ROA not after:            Thu 27 Feb 2025 14:00:51 +0000
asID:                     4226
IP address blocks:        199.192.96.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:75:14:3d:5d:34:47:47:3b:60:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005
        Validity
            Not Before: Nov 29 14:00:51 2024 GMT
            Not After : Feb 27 14:00:51 2025 GMT
        Subject: CN=44ebe573-8896-45aa-bb4a-52742715a392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:36:69:27:be:aa:3b:06:9e:1e:8e:2c:98:30:
                    9f:41:d1:4e:9e:2f:4e:f6:5d:25:41:9b:09:35:6e:
                    e1:fd:5e:27:10:ea:56:ea:24:ff:86:0b:6c:fe:1e:
                    37:8d:b5:0b:5d:a1:50:08:68:91:45:85:fe:d6:53:
                    3f:ed:45:55:dc:2e:04:5e:45:e2:06:81:52:3e:86:
                    f7:5c:ee:54:62:c7:3e:a3:da:9c:b9:bf:e4:12:4b:
                    34:18:58:47:39:2b:16:c4:af:0e:81:03:81:fa:8d:
                    d1:02:3c:68:67:66:61:09:4f:75:76:db:fb:d0:e1:
                    36:aa:27:7a:22:38:27:6f:03:ad:68:91:32:31:78:
                    90:9f:48:74:38:79:24:4f:ec:04:85:0f:76:7b:22:
                    be:4a:78:05:64:80:2c:4e:a3:dd:ae:e6:c5:ab:ed:
                    d9:1d:85:76:41:3e:1b:ba:a0:81:ec:4d:97:a2:80:
                    af:48:5a:87:8e:ec:92:6f:7f:0b:6d:13:8b:7d:b5:
                    44:a6:1d:3f:1f:33:4c:3b:16:95:5f:4f:8a:cb:f7:
                    12:51:33:35:51:46:2c:b8:4b:1a:9d:b8:52:bd:06:
                    87:bd:c8:fc:2f:69:8c:55:b6:1c:82:13:36:a9:cd:
                    77:01:52:d1:91:c5:df:1c:60:7c:4b:61:77:39:a9:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F3:65:03:F0:FA:A6:6B:ED:02:8D:8E:29:6B:B6:DA:3B:60:5A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl

            X509v3 Authority Key Identifier:
                keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:69:19:0d:e0:66:7d:0d:ee:9c:c7:c2:a0:73:01:fb:d7:51:
         33:a6:8b:41:7a:d9:77:a7:55:bc:19:67:6e:e8:b3:38:5f:07:
         df:62:5f:2e:b2:22:07:91:c3:71:24:b2:91:b4:92:c6:26:5e:
         1f:70:b9:76:35:a0:5f:6f:23:d4:d4:a4:4d:11:73:30:cc:0e:
         e4:86:4b:ad:d3:df:62:24:5b:da:0d:ae:7d:9e:18:95:86:e3:
         c7:69:76:65:5f:c3:cf:4a:b6:4e:7b:00:6a:56:fa:b9:ba:9e:
         f0:20:a4:e7:91:e1:6c:ef:69:89:c5:3d:8e:91:a5:13:a3:0b:
         c9:31:ce:59:d4:58:e0:09:d9:e7:dc:ab:44:5c:1b:b0:94:47:
         f3:93:c1:08:ef:7a:32:75:42:02:67:94:3f:f6:c1:34:b5:24:
         e1:12:d0:1c:2f:c5:4a:39:ef:d5:94:69:3a:12:ee:d7:3c:a3:
         02:fd:27:db:2c:f4:ea:ea:9a:9e:ea:1a:af:be:96:05:fb:e2:
         73:92:8f:88:13:c9:17:44:fa:61:dc:a7:95:e7:6e:3a:2c:21:
         61:04:d2:32:b5:0e:1e:f0:e7:c8:d6:03:a1:87:0c:1c:ad:01:
         88:de:32:a5:ed:3e:1d:6c:02:dd:27:68:75:4a:46:27:67:42:
         c3:17:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:17:22 2025 by rpki-client