Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa93113b-e6f6-3d32-a9d3-ad3f3f99748a.roa
File:                     fa93113b-e6f6-3d32-a9d3-ad3f3f99748a.roa (raw, json)
Hash identifier:          7l7II7h7tuvu/w9pVYO38wJIKuCX+LT9dSztRrZInuM=
Subject key identifier:   35:51:28:0A:84:A7:CE:43:BD:EC:E0:82:C1:7A:9F:91:12:82:0B:0C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848907601D31D226C0459CB55E0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa93113b-e6f6-3d32-a9d3-ad3f3f99748a.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     19905
IP address blocks:        199.7.67.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:76:01:d3:1d:22:6c:04:59:cb:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=ca92f030-3980-4489-bb70-173c7a8c67f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:4f:59:ed:4e:0b:c4:8f:85:86:16:16:37:
                    7c:c4:c9:c5:49:ce:bd:97:c8:35:9a:ee:f9:82:49:
                    3c:a6:83:08:43:e8:9a:2f:d8:ee:9b:a8:1c:19:cd:
                    9d:9e:a5:27:46:a2:a3:2a:cf:e5:53:b5:85:46:19:
                    84:4b:0a:04:09:6c:43:23:8e:77:3a:9d:49:f6:a1:
                    b6:41:f9:79:92:5e:0b:25:90:35:5b:74:75:0b:9b:
                    76:9d:64:7c:9f:9a:1b:a9:77:1c:a5:af:fa:ed:5b:
                    79:e4:f2:09:39:51:28:72:52:cc:1c:1c:ab:06:c9:
                    1b:c0:d1:9d:b6:f5:4b:0f:f1:83:c8:b0:93:b4:e2:
                    ad:c3:0e:4e:0c:b2:ff:2c:84:8c:22:5e:2b:97:c7:
                    c4:5b:52:a8:f6:4d:f9:50:66:b5:24:d4:a1:b4:bc:
                    51:e3:d2:6e:f6:da:7e:32:87:0d:39:2a:64:cd:5c:
                    1d:55:60:3a:f3:45:f2:1c:18:c2:3f:9b:f2:f2:91:
                    c2:71:73:7a:cb:cd:70:ad:eb:1a:c5:17:69:a3:e3:
                    24:0a:37:98:97:76:a7:a5:72:fc:62:e7:88:93:6a:
                    46:68:a9:61:8c:50:03:ac:85:13:24:6e:04:b3:79:
                    b0:ee:30:86:53:2d:68:e4:fc:12:52:f8:b0:09:11:
                    58:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:51:28:0A:84:A7:CE:43:BD:EC:E0:82:C1:7A:9F:91:12:82:0B:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa93113b-e6f6-3d32-a9d3-ad3f3f99748a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:11:b6:34:ba:ec:5d:cb:a2:7c:4b:6e:7a:d9:5b:42:dc:
         1c:11:87:ca:59:77:e7:f7:40:ce:10:19:f5:4c:c0:a4:fc:91:
         2c:af:6f:c3:c6:f9:a8:74:9b:00:b4:45:df:ea:64:75:79:d0:
         01:e9:4f:46:3f:8a:8d:ac:5a:d7:82:9f:08:1a:7a:81:84:79:
         2d:cf:92:29:29:0b:d6:39:ca:ca:08:49:42:63:b4:73:bc:08:
         0e:82:e7:40:35:8e:81:7c:37:87:b0:75:1c:67:33:6b:39:94:
         86:e1:03:47:16:89:5d:c9:f8:19:93:d1:8c:b4:8f:df:91:65:
         72:35:6b:0c:1a:c6:dc:52:64:ff:7b:6f:4b:7f:21:e7:4d:c7:
         c4:af:5a:17:39:ed:eb:16:34:af:ef:64:7f:02:85:9f:83:19:
         df:57:48:95:e2:16:39:ed:71:a3:06:8b:2c:a1:a7:c9:6f:ed:
         99:87:c3:6a:98:72:cd:d7:70:12:21:bb:9a:58:06:04:f1:29:
         ef:77:24:e6:e0:6f:bc:64:17:8c:f6:50:a0:f1:4e:86:b1:bb:
         06:92:df:a7:69:22:d6:dc:a4:76:30:c7:b4:46:32:82:32:f8:
         bb:16:d9:e4:9f:40:4b:30:70:28:19:cb:da:1c:81:58:b1:23:
         da:73:70:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:53 2025 by rpki-client