Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/690bc59b-aeec-366e-9e9b-ec0a6716af69.roa
File:                     690bc59b-aeec-366e-9e9b-ec0a6716af69.roa (raw, json)
Hash identifier:          3YsUk5kLeXgnMYZdNAnav6SOn5DRBFeXmW64Uj2AfHs=
Subject key identifier:   26:B6:19:CF:1B:BF:23:2B:51:DA:24:20:82:30:53:EE:A1:E0:66:DD
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325DCB9908C205491340500
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/690bc59b-aeec-366e-9e9b-ec0a6716af69.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        199.232.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:dc:b9:90:8c:20:54:91:34:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=77d00def-5252-4336-a72d-2368ace248c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b9:a4:62:a7:43:b1:bc:be:cc:66:5f:d9:88:
                    40:dc:b4:66:a8:58:8f:f8:53:48:2e:d0:09:10:22:
                    09:70:82:a7:fd:30:a7:c6:fc:ee:bc:5a:42:0e:21:
                    f8:8e:16:60:6b:f2:71:d9:06:02:17:dc:8d:56:72:
                    ca:f5:44:12:cb:28:26:cc:cc:d5:46:1f:59:76:c5:
                    70:bf:a1:83:b3:d3:89:be:32:84:20:6d:f1:04:fc:
                    9c:d9:81:76:53:f2:f7:53:54:d0:24:4d:35:96:e8:
                    d7:78:f9:a0:47:8d:86:e0:17:e5:d8:3f:fb:10:a3:
                    a7:03:fb:ab:7b:fc:46:41:37:d5:b5:0f:0d:68:42:
                    33:35:13:ba:e1:fd:f1:80:2d:59:0b:aa:09:f9:f1:
                    29:56:f8:56:75:47:5c:39:5e:8a:71:e7:3d:12:93:
                    71:a9:c4:d2:fb:25:11:c2:7a:05:47:2e:1b:3b:44:
                    66:5a:6d:09:66:b7:dc:b1:cf:8d:1f:b5:ac:fe:01:
                    66:ec:53:30:ee:be:0a:7b:ad:75:ca:f2:46:81:ca:
                    98:56:6a:8a:5e:61:1d:11:ec:52:33:62:80:9a:23:
                    3c:04:bb:86:98:75:53:df:b9:4b:30:84:ef:5b:fb:
                    b1:a0:c7:d7:f7:0f:c7:24:70:a5:32:8e:d9:b5:d3:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B6:19:CF:1B:BF:23:2B:51:DA:24:20:82:30:53:EE:A1:E0:66:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/690bc59b-aeec-366e-9e9b-ec0a6716af69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f1:04:6f:13:65:2d:fd:57:89:d1:3d:9e:b6:33:0a:13:4d:
         bf:27:7b:92:fd:df:64:ce:49:92:30:f8:dc:35:36:de:b3:ec:
         b9:6c:62:51:fb:ce:cf:7a:2a:65:72:32:b3:3d:b9:a9:a4:11:
         ff:25:55:80:be:25:8c:03:09:1f:08:60:6e:eb:09:e4:ab:fa:
         67:c5:96:27:fa:b9:76:64:da:8e:51:38:d5:3e:5a:50:df:51:
         24:12:c1:e8:59:6e:36:db:9b:a9:7d:2d:cb:ff:4a:a9:94:89:
         7b:ae:e8:a6:b8:1b:98:3a:3a:a0:d8:4f:93:97:e3:a4:4a:43:
         4c:4f:48:69:9b:77:d3:58:4a:ca:2a:a6:1d:0c:ab:f9:fa:54:
         ef:21:1c:b6:04:68:45:5b:65:dc:a7:48:75:44:aa:fb:19:44:
         87:a5:59:a5:ed:5e:d1:5e:0a:9b:f1:b3:6a:95:4e:64:77:13:
         2e:0a:fe:cf:1f:54:2a:aa:f6:05:f9:57:ff:64:9c:95:5d:2a:
         77:32:7e:75:c2:6e:8b:a3:19:60:31:f3:0c:b5:ab:8f:98:cc:
         4c:bc:e0:29:b9:68:d8:64:89:60:70:e2:8c:b4:79:fa:c1:8f:
         90:89:9a:f3:da:06:73:87:25:47:c6:15:fc:f3:79:d3:f3:7e:
         e2:2c:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:13:51 2025 by rpki-client