Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b28b0af2-45c3-38b2-a507-22bdaca3a869.roa
File:                     b28b0af2-45c3-38b2-a507-22bdaca3a869.roa (raw, json)
Hash identifier:          FN4lNOrMvXmJwI7WKUcAcsudYBDnooUJXsjjEB7HUIc=
Subject key identifier:   6E:7C:53:C1:C2:7C:61:79:F8:61:CD:DB:58:03:E5:05:B2:F7:D7:DE
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858487325DB7CEE674F7AC29237E8
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b28b0af2-45c3-38b2-a507-22bdaca3a869.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     54113
IP address blocks:        199.232.116.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:db:7c:ee:67:4f:7a:c2:92:37:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=ea95bd4c-11ab-42d2-b4df-b96abd800322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f5:2e:af:36:d5:c0:db:d6:a1:11:ae:f3:f0:
                    3c:b4:75:af:8b:d1:8f:4f:1f:85:31:fd:47:65:55:
                    15:d2:eb:4e:fa:04:ba:da:bd:34:14:d8:e6:12:ea:
                    56:0e:8a:74:2e:25:1d:c2:12:f4:5f:5c:e4:22:b4:
                    2c:1d:bb:19:f2:45:eb:2d:f8:f8:de:3f:e3:2a:f3:
                    9e:c9:8c:99:be:18:a7:97:f2:75:2e:b3:e8:72:0c:
                    55:98:c6:04:49:d9:b2:a7:aa:7f:35:6b:67:06:aa:
                    92:85:f0:4a:7e:f0:23:86:fb:cb:5f:11:16:e7:3d:
                    dc:60:62:02:46:8d:7c:39:5e:39:3a:f9:30:6a:58:
                    21:f0:0b:6e:b5:2a:bf:d4:0b:92:46:90:b5:52:e0:
                    f4:8b:70:45:bd:a3:d0:dc:8c:a4:6e:9d:ea:32:c3:
                    0e:23:ef:d2:53:a7:51:95:b4:66:71:01:1b:f8:1b:
                    65:f3:80:da:ba:48:70:d4:78:09:0e:54:2f:fa:51:
                    eb:af:2b:d6:1f:df:e7:8f:38:74:e7:fc:96:ea:01:
                    f5:f5:90:f0:e3:d8:b4:be:ae:26:4f:57:ab:64:a9:
                    aa:1f:1d:03:12:9e:de:cb:d4:06:16:b6:50:c1:41:
                    81:50:85:48:47:1f:c9:e3:a6:ae:e0:7f:fa:19:04:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7C:53:C1:C2:7C:61:79:F8:61:CD:DB:58:03:E5:05:B2:F7:D7:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b28b0af2-45c3-38b2-a507-22bdaca3a869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:f8:98:d7:75:49:37:01:21:81:3e:a8:b0:09:64:46:7d:a3:
         f7:62:b0:39:9c:96:ef:6b:93:3e:5d:54:5c:e1:29:0f:c4:4a:
         b7:a9:e3:5c:8c:8e:93:63:82:e7:89:eb:85:64:b1:4c:4d:5f:
         a7:49:8c:a8:b8:cd:da:49:cc:35:ab:51:4e:16:14:f4:3d:05:
         d3:86:7d:3b:50:06:be:80:2a:26:57:d8:ba:e7:09:49:0b:c0:
         ad:6b:0d:61:f6:84:ab:41:e5:ce:09:b9:a6:cd:85:c9:60:e1:
         f0:04:25:c4:35:83:86:29:ac:59:b6:98:62:ae:24:61:ca:9e:
         fb:5e:3c:17:9e:20:02:5c:78:27:de:a4:23:91:a2:e5:cc:f0:
         0a:65:da:b2:97:6d:75:f7:39:5f:05:2a:3a:e1:87:d6:7f:bb:
         14:0b:4a:ff:af:2a:c5:d3:7f:bb:3f:01:2f:0a:0b:7d:56:c7:
         5b:e0:fc:53:08:8c:62:65:8e:cb:8f:c7:48:63:cb:2c:7d:8d:
         5c:dd:40:79:30:2a:99:4d:c4:33:82:44:73:7d:37:56:76:7f:
         12:36:29:ea:c6:a5:6b:76:ba:60:6f:8e:bb:dc:48:65:44:58:
         68:ec:60:8d:37:10:01:e8:8a:4e:ec:81:76:f5:cc:b8:f3:63:
         27:62:6d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:13:50 2025 by rpki-client