Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa
File:                     229e29fd-2ef9-3a98-a347-d8b492c6c819.roa (raw, json)
Hash identifier:          Q2Z+nJs0t81mr0LXF86aHPNyNgFUX4nt+Yo5Atq0rRQ=
Subject key identifier:   5F:31:45:33:EE:EC:10:4C:01:AB:92:78:A1:68:B5:17:71:68:AE:11
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F43285848090FADFC3F3596F53EC17580
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     2906
IP address blocks:        198.38.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:ad:fc:3f:35:96:f5:3e:c1:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=c034c59a-782e-47ae-9233-f3af735cdebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:48:c5:f3:f9:2a:83:ce:fa:49:f0:f1:0c:
                    82:c3:e9:5a:3f:61:7d:a4:b3:2f:e7:4f:d9:76:68:
                    d9:25:21:b7:95:f8:b2:31:06:f9:79:1b:27:0a:7f:
                    97:82:b1:94:3a:bf:51:7b:eb:d7:bc:53:64:47:83:
                    63:46:f6:13:32:51:a7:7b:ba:aa:7c:33:97:7c:9c:
                    a3:0c:80:c6:5c:73:1b:b0:d9:7e:e8:d0:62:7f:2e:
                    ec:d9:b1:48:db:5c:aa:5d:5d:2d:b3:f8:9e:4b:c0:
                    5b:de:b1:a0:2d:a0:16:bc:c1:87:f3:95:81:39:a1:
                    66:a3:3d:d0:c1:d9:d5:4b:31:b3:59:81:37:ad:a2:
                    0e:91:8b:29:1e:60:b5:38:44:99:cb:89:68:fa:78:
                    9a:8b:91:76:f6:15:fa:3a:d7:6c:92:ae:4b:05:dd:
                    7e:a3:cb:b9:5b:70:23:54:93:82:a4:29:f1:16:69:
                    a9:90:31:0c:a0:95:c8:ce:61:a9:4b:c2:f8:cc:ea:
                    42:2f:9b:25:f6:c3:12:f8:91:1e:aa:33:5a:00:59:
                    b2:56:01:4f:4f:85:41:ac:a3:2d:83:55:31:cd:a1:
                    28:66:db:e8:23:55:da:d0:7b:bb:13:db:04:c9:07:
                    64:04:88:e5:02:5a:2a:4c:0b:f5:db:9c:94:04:e8:
                    ee:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:31:45:33:EE:EC:10:4C:01:AB:92:78:A1:68:B5:17:71:68:AE:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/229e29fd-2ef9-3a98-a347-d8b492c6c819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.38.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f6:69:d2:3b:ac:34:99:99:e9:39:37:6f:2e:1c:2b:ba:60:
         b8:cd:dc:4d:fe:84:ba:63:5a:56:4b:93:95:41:ac:cc:bf:c7:
         d3:75:8d:e9:4b:c6:6a:c7:17:2e:41:9b:e5:b2:8d:d8:be:fe:
         2c:1a:c1:cd:54:f3:29:7f:4a:6a:73:96:82:fd:24:f9:4b:75:
         d4:65:cb:db:7b:50:2b:99:e5:45:3c:be:36:11:5e:c9:4c:04:
         5f:49:06:7a:a4:2e:fc:fd:9c:37:4d:d8:61:94:3e:3b:81:8b:
         1b:03:17:fc:79:63:65:9a:97:f3:e1:cb:6a:69:d1:fd:fa:1d:
         d8:6b:83:22:39:10:93:a5:6b:b2:92:5f:37:7f:b7:79:1d:90:
         99:d4:20:85:de:1b:56:fb:1d:28:d6:ec:16:f6:b0:ae:05:e9:
         79:b8:9e:36:2b:1b:2b:a4:52:2a:55:9c:55:48:d2:86:3d:82:
         3d:8f:6e:7d:47:1e:4b:d2:62:65:20:7e:fc:8f:cd:96:32:46:
         3f:3d:87:27:fe:08:73:e1:10:ee:02:e3:ff:29:72:e4:c8:54:
         ac:49:df:0d:29:cb:7c:4f:27:04:76:0b:87:4a:03:55:f7:d7:
         c7:b1:6a:74:20:57:c4:fb:fe:b6:6d:cf:83:8f:0f:51:12:85:
         e3:9f:cb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:11 2025 by rpki-client