Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/b08af031-d473-3555-848a-e8df72a59930.roa
File:                     b08af031-d473-3555-848a-e8df72a59930.roa (raw, json)
Hash identifier:          qlJQUWH2HUo9cp6SvfOu/1gXAL04ehf3Y+rkenKWtZE=
Subject key identifier:   2E:A7:98:BC:B2:AA:C0:8D:00:77:0F:A4:76:69:52:EC:71:24:D2:3A
Certificate issuer:       /CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6
Certificate serial:       010D0C9F4328584869606A6DEC8C707ED836AA00
Authority key identifier: B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/b08af031-d473-3555-848a-e8df72a59930.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     398564
IP address blocks:        192.190.63.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:6a:6d:ec:8c:70:7e:d8:36:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=3789dbe9-4d2c-4c42-9f95-d1aa37cf777d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:13:a6:65:00:6b:dc:18:31:cf:e6:82:a3:
                    2d:9a:b8:18:3b:aa:ab:8a:b0:98:bb:2e:fd:7e:4a:
                    8d:bd:0f:02:f8:98:a6:91:18:37:7d:c9:15:8f:01:
                    d0:3b:1e:3d:95:3d:9e:5d:af:b6:fa:38:21:a5:a4:
                    13:3e:81:4b:dc:3c:d2:cf:d5:d4:b9:f3:29:13:88:
                    c4:7e:69:34:c0:72:36:fb:fe:79:18:6c:f4:7b:d2:
                    52:74:98:4d:7c:1b:7c:aa:3a:0f:3b:37:0a:a7:98:
                    3e:ac:70:07:a9:72:71:e4:ce:46:63:74:bc:85:0d:
                    48:9c:5f:5f:cf:84:a9:2c:48:21:68:9f:de:f3:bd:
                    2f:d8:5f:88:ae:25:c2:1c:d2:85:e0:c7:fa:f3:21:
                    f1:7c:f4:0f:d0:9c:c4:99:66:de:8f:63:8d:9e:90:
                    1e:75:25:d7:5a:4c:d7:54:8c:e9:03:fc:1c:22:f3:
                    31:ed:da:30:cd:30:ac:6e:66:90:3f:a6:46:df:72:
                    7d:0a:f3:d7:87:eb:b7:67:d4:43:0b:d4:06:a4:61:
                    b7:c9:0f:26:1d:a4:14:e1:fb:a4:f3:5b:f5:43:55:
                    d4:97:99:83:26:f8:e1:65:60:11:81:57:c5:96:44:
                    5b:6f:85:4b:f7:f0:24:86:85:e0:f6:10:98:c8:ed:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A7:98:BC:B2:AA:C0:8D:00:77:0F:A4:76:69:52:EC:71:24:D2:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/b08af031-d473-3555-848a-e8df72a59930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl

            X509v3 Authority Key Identifier:
                keyid:B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:42:b0:88:da:7d:5d:4c:7c:3c:9c:62:53:32:c9:59:a6:91:
         f3:c7:09:1f:d8:08:ca:21:8b:e9:aa:0e:6b:cb:3c:98:f8:a8:
         66:bc:f1:51:a6:bf:b1:c4:fe:6c:eb:a3:51:4a:3d:b5:20:d8:
         98:28:12:a8:f3:91:f8:05:0c:e8:bd:56:a2:13:fe:db:4a:f2:
         06:00:8a:e5:37:3f:88:bf:91:3d:40:c2:79:a5:66:ec:46:29:
         37:c7:be:29:68:e9:a4:3f:95:73:7d:21:8b:13:fe:05:bd:37:
         0e:64:7d:1e:b1:ed:15:32:20:ec:1a:ed:e3:c6:ff:cf:67:bd:
         ec:13:0b:d3:7b:5d:08:60:c6:65:3b:5f:be:fd:f0:35:73:41:
         ee:3f:1f:dc:75:b3:54:16:54:dc:5c:f7:d2:61:ca:dd:e1:17:
         46:00:35:5a:ab:e5:ab:e6:a2:00:0e:13:ac:96:3a:a3:bf:48:
         8e:de:39:70:21:61:55:a7:be:60:cf:69:f8:8d:be:19:5b:2f:
         cb:1f:43:9e:91:3d:49:6a:54:e8:28:7f:53:e9:37:4f:63:f7:
         b9:14:47:5c:67:e6:62:8c:18:59:27:ce:f8:cc:80:5b:0c:91:
         f7:89:54:4c:0b:bf:2b:11:56:80:6e:31:5d:71:ee:c2:9f:f4:
         4b:01:7d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:40:59 2025 by rpki-client