Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/8b472c8f-3acb-39ff-b78d-e2404adbd15f.roa
File:                     8b472c8f-3acb-39ff-b78d-e2404adbd15f.roa (raw, json)
Hash identifier:          N75eYdD/xUlIbxyO89Smk9kr9XswjLFfCp5KLIQ9Rdw=
Subject key identifier:   52:D0:7B:5A:A0:A5:D8:5F:EB:3B:19:BB:6C:9A:C0:C5:FC:A8:4A:AC
Certificate issuer:       /CN=98fa46f5-eef1-4569-9795-c233e7e74658
Certificate serial:       010D0C9F43285847F84F7739B92BECCF87608AD8
Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/8b472c8f-3acb-39ff-b78d-e2404adbd15f.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     55244
IP address blocks:        192.16.76.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:77:39:b9:2b:ec:cf:87:60:8a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=003fc1e7-b96c-4391-8470-949c4bd99c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a6:be:ac:22:af:86:57:7d:a7:04:95:d2:1f:
                    61:98:04:95:9c:e1:7c:62:a5:44:50:c7:38:e5:b6:
                    8e:f8:43:f3:c2:29:14:f6:cc:a5:0c:95:2b:d2:b0:
                    b8:63:5b:71:e8:4a:72:bd:83:c9:19:f5:26:7f:61:
                    cb:97:13:01:fc:4c:44:a2:24:47:67:a1:9b:34:0d:
                    d3:f5:06:1c:98:1e:be:fd:a5:b1:95:93:8c:dc:54:
                    7b:22:22:3e:ed:a8:25:e7:80:b4:2a:00:6e:5a:ab:
                    db:69:a4:38:43:3b:8b:7e:11:76:45:7e:60:7e:e0:
                    9d:35:09:12:8d:b3:57:3f:67:4d:c4:1a:a7:76:d5:
                    ae:40:73:c5:e5:5b:2b:42:d3:69:49:49:cf:b3:00:
                    c2:a4:e3:fd:b2:a6:72:7f:10:ef:f2:d0:fc:6b:21:
                    86:df:49:b2:cc:1d:a9:ad:40:5a:c5:41:bc:19:05:
                    03:fb:97:3d:5d:15:1e:2b:c8:ab:64:25:b0:eb:7e:
                    b6:18:c6:f1:a2:7c:27:fc:1d:46:99:00:7d:22:5e:
                    d0:66:41:53:93:8e:34:2e:41:8c:f0:bb:55:14:03:
                    f0:94:4c:9d:89:28:80:5a:28:6e:ca:5e:2d:3f:5f:
                    8f:dc:ca:90:6c:67:c7:c2:02:8c:fe:60:55:37:c4:
                    e9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D0:7B:5A:A0:A5:D8:5F:EB:3B:19:BB:6C:9A:C0:C5:FC:A8:4A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/8b472c8f-3acb-39ff-b78d-e2404adbd15f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl

            X509v3 Authority Key Identifier:
                keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:64:17:f9:5a:ed:f6:1d:7f:8c:d3:eb:19:1c:24:e8:40:03:
         ab:9b:0f:94:07:39:4e:2e:26:ea:7f:11:33:ea:84:1b:ef:04:
         97:7d:48:0f:87:7b:bf:2f:af:c1:de:9b:d2:0c:d0:15:fa:5e:
         9b:92:b0:88:74:b0:62:ae:48:46:d1:0c:ca:82:cf:6f:44:79:
         ea:b6:80:b4:62:fd:92:25:53:d2:cd:bd:f1:55:52:0b:fb:f4:
         9f:87:00:27:62:77:eb:52:c2:86:f1:07:57:78:c1:a2:4e:81:
         22:96:2b:28:64:34:33:9d:01:bb:ea:11:a7:03:47:14:fb:49:
         f1:9d:74:0b:54:49:49:ce:88:b1:b6:89:30:ca:43:4b:12:5e:
         61:f0:67:31:95:6b:83:e7:8a:bf:bc:48:af:e6:d5:c2:13:0b:
         98:5b:4d:15:a5:6b:3f:d3:5e:d8:a5:be:a8:da:0d:53:15:62:
         33:50:71:34:5d:03:08:2c:3b:94:fc:7e:a1:1f:27:78:dc:ec:
         06:6f:9a:db:0b:01:fd:e7:73:30:56:c5:57:5c:01:ac:f5:f9:
         26:bc:55:d4:f8:50:94:35:7d:a4:4c:5f:57:1a:cb:4d:be:5f:
         b1:25:5a:ad:a9:7d:f5:87:74:5a:55:cf:e7:53:99:60:b7:90:
         88:0e:a6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:44:56 2025 by rpki-client