Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/89b5a997-3223-35c4-9454-eea1ce7afb45.roa
File:                     89b5a997-3223-35c4-9454-eea1ce7afb45.roa (raw, json)
Hash identifier:          wav5gG0WET0G5hk/A0p/f9OJAq/aSKAlkRYGYS7lASc=
Subject key identifier:   07:6A:5C:0F:79:0B:9D:81:CF:A2:E3:AD:A9:2D:B5:83:4F:10:84:1F
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F432858480BDA6D121852CE4D90916280
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/89b5a997-3223-35c4-9454-eea1ce7afb45.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     3807
IP address blocks:        207.196.200.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:6d:12:18:52:ce:4d:90:91:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=fd9d3d2a-7bc0-4e96-b0d9-2d10d022a5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:b4:e6:9b:a0:df:eb:d7:10:11:2b:b3:e2:
                    eb:c1:d1:8e:aa:c8:00:ba:7b:0e:93:de:fe:f7:5e:
                    53:1a:c6:2c:bc:89:c6:1a:61:f3:a2:ab:64:b7:6b:
                    48:6a:83:c7:d6:7f:f8:be:89:ce:ae:dc:6d:3a:7f:
                    9a:04:a7:d8:7a:e5:6a:fb:e7:9f:1b:e1:b3:90:a7:
                    00:ed:eb:98:ba:73:53:4a:2b:a0:9f:6c:11:6e:95:
                    db:14:0f:e7:3d:46:20:63:9c:b1:d1:13:26:dc:26:
                    f6:ac:8a:c0:ce:9a:72:f2:6b:94:bd:8a:82:12:ff:
                    dc:f9:87:e1:d5:d5:fe:d8:52:38:ea:29:98:af:d5:
                    96:4c:9c:15:52:b6:34:1d:f3:ff:ce:fc:9f:44:6d:
                    7a:54:cf:c0:bc:98:38:b3:1b:14:5c:7a:92:25:1f:
                    8e:5c:22:91:27:6e:0a:15:e8:ca:eb:21:c0:d1:40:
                    c4:2c:1b:33:ff:a6:b2:98:cb:47:6c:67:8a:6c:df:
                    2a:0c:9d:06:ba:a3:c5:39:a4:16:48:b4:aa:0c:e7:
                    3d:53:ae:ca:ef:c7:be:d6:e7:65:ac:71:1b:5a:79:
                    81:13:4f:45:97:c1:d8:3a:ad:48:91:45:d2:ad:dd:
                    d8:f7:d1:94:07:aa:15:e5:ac:89:67:7a:4b:62:0a:
                    02:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6A:5C:0F:79:0B:9D:81:CF:A2:E3:AD:A9:2D:B5:83:4F:10:84:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/89b5a997-3223-35c4-9454-eea1ce7afb45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:0d:13:8d:a2:e0:38:e3:ee:56:48:c9:58:f3:f9:01:ba:eb:
         bd:9c:1a:9a:15:56:d7:e4:73:b1:58:07:8a:52:3b:fc:bf:3f:
         37:5c:11:27:5b:f3:ae:8a:a2:54:dc:ab:ff:62:c4:1e:1c:bb:
         4b:68:7f:e2:58:cb:d1:91:70:a6:bf:2f:cf:bd:18:3c:c3:cc:
         b7:21:8a:ee:76:f6:cc:1f:d1:17:e1:60:cc:5e:e7:12:d0:61:
         0b:38:0c:0e:cb:13:6d:1e:51:f4:b0:b0:bd:30:5e:88:0c:8b:
         93:e6:cb:d3:18:cf:d2:ec:57:45:d5:7a:1a:53:9b:1c:c1:17:
         41:d6:96:15:8e:04:9c:5f:78:59:ff:97:e4:e0:d0:1a:46:a5:
         a7:6c:75:d5:22:d9:30:9c:cf:6e:c4:48:8f:ab:48:3f:bd:30:
         dd:03:c6:f5:28:d2:17:4e:8d:54:20:c8:60:08:26:0f:53:ae:
         d0:9a:e0:4a:be:45:26:b3:39:12:47:39:ba:56:c0:d2:2f:e4:
         6b:3f:85:6b:1c:90:31:f2:df:93:75:0a:ea:c7:c7:e2:71:a7:
         76:02:c1:54:e8:3f:ce:36:26:36:c7:0c:19:f2:67:bc:b3:33:
         95:8e:bb:e4:f8:51:0d:e5:e0:c3:8e:45:76:0c:ac:7b:dc:39:
         04:4a:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:47:28 2025 by rpki-client