Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/adb992f1-1226-30cc-9ac8-4a06351806b6.roa
File:                     adb992f1-1226-30cc-9ac8-4a06351806b6.roa (raw, json)
Hash identifier:          09PDxGDaApev5YBCk6TfMeMn062q47BJO7hmQKv3Tzg=
Subject key identifier:   0A:12:43:42:4C:8E:8D:D7:B9:DB:11:D4:75:DA:5D:05:8C:8A:91:CF
Certificate issuer:       /CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378
Certificate serial:       010D0C9F43285848782790F37987DFD086647A50
Authority key identifier: 19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/adb992f1-1226-30cc-9ac8-4a06351806b6.roa
Signing time:             Tue 07 Jan 2025 21:03:37 +0000
ROA not before:           Tue 07 Jan 2025 21:03:37 +0000
ROA not after:            Mon 07 Apr 2025 20:03:37 +0000
asID:                     3855
IP address blocks:        192.40.84.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:27:90:f3:79:87:df:d0:86:64:7a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378
        Validity
            Not Before: Jan  7 21:03:37 2025 GMT
            Not After : Apr  7 20:03:37 2025 GMT
        Subject: CN=29365f9e-2c69-41fb-b2b4-a1951913b4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:fa:59:84:8e:cd:61:d1:37:53:34:a7:bc:
                    64:da:dc:dd:74:ef:3b:6d:64:4f:9f:4c:d4:0d:c7:
                    4e:39:67:bf:9f:a6:b1:09:c0:5f:d0:52:83:a2:8a:
                    f4:6b:2a:46:e4:7a:3e:5c:43:26:60:34:da:6e:16:
                    8b:a2:ce:a7:ef:fa:c3:ff:70:0a:09:9c:98:19:0b:
                    9d:e9:7e:c9:ab:80:02:3f:aa:b9:c1:c8:e4:f7:84:
                    17:18:95:c3:45:ec:3c:95:fe:36:80:0a:45:ba:fc:
                    42:4c:5a:ec:e3:52:61:77:03:07:06:03:3e:7b:b0:
                    5f:b8:6f:01:a0:2b:57:25:46:e6:ad:9f:eb:03:2a:
                    fa:69:4c:8a:f4:30:34:af:b1:e4:71:89:bb:67:2b:
                    b4:ee:38:11:9f:e7:07:52:58:7c:28:40:43:5c:f4:
                    ef:2b:f3:f2:42:2f:81:20:8d:13:1c:4c:af:45:69:
                    a2:6c:ef:c0:46:f3:1e:f8:45:1b:97:76:ed:21:cd:
                    69:3f:f4:23:7e:a9:12:67:1a:cd:b3:17:b8:c1:5c:
                    a7:a0:e8:1f:2d:6c:ad:5a:04:76:4a:9a:e6:c7:1d:
                    ca:6c:bd:88:8f:ea:d2:b9:7e:2d:61:93:ae:27:79:
                    6f:87:15:d6:db:35:3d:ba:80:b8:69:f1:cb:f5:34:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:12:43:42:4C:8E:8D:D7:B9:DB:11:D4:75:DA:5D:05:8C:8A:91:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/adb992f1-1226-30cc-9ac8-4a06351806b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl

            X509v3 Authority Key Identifier:
                keyid:19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.40.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:98:b2:50:7c:1f:5b:83:03:05:7c:a8:75:84:2b:04:18:
         c9:c4:5c:c4:50:5b:20:d8:21:0d:57:a8:57:21:bc:65:a1:1c:
         8a:3e:6f:5b:80:ba:1c:39:ba:3b:17:46:fb:a5:d3:7e:c3:35:
         ab:56:c9:48:92:b4:fb:df:31:a2:84:7c:5e:19:b0:38:80:f0:
         de:7d:66:5b:1e:e3:d0:62:f7:82:58:c5:93:0f:67:79:ef:5d:
         c5:66:ca:62:3a:9d:fe:82:96:b4:6c:3e:82:15:40:e9:62:ec:
         50:ce:74:04:ed:12:af:3e:fa:1d:23:a8:1d:29:dd:eb:c6:51:
         76:52:ce:6f:01:b1:f4:a8:d4:f5:67:42:16:12:d4:18:51:b8:
         e4:ea:15:53:2c:dc:ce:a7:28:36:e2:a9:34:8d:9b:06:d9:ba:
         d2:b5:64:b3:33:aa:6f:c0:98:dd:9e:f9:79:98:e3:e9:12:38:
         a1:7e:ff:b1:83:34:ae:20:9f:dc:19:3f:2e:31:56:bb:87:01:
         4c:5c:3c:07:9c:8e:16:3a:cd:74:e0:a4:11:37:f0:53:95:f7:
         d4:18:4d:fb:30:c3:9b:96:a5:52:1e:c4:02:5e:f3:47:81:dd:
         c3:35:0d:ab:6f:3d:87:30:c3:6d:5b:cd:f6:42:c0:8c:3f:28:
         78:25:27:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:43:55 2025 by rpki-client