Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/dc442485-e1e1-32df-b067-e09e5cdece8f.roa
File:                     dc442485-e1e1-32df-b067-e09e5cdece8f.roa (raw, json)
Hash identifier:          pb2XAhTgA3acbATGDlqQ3ZxES71WUn2mTp2JG7K819E=
Subject key identifier:   BA:30:9C:08:B6:80:5D:CD:34:62:97:C7:6F:48:8A:24:FF:E8:D4:86
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F432858480644F8F3C6ABDF4518755F00
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/dc442485-e1e1-32df-b067-e09e5cdece8f.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     1299
IP address blocks:        199.83.232.0/23 maxlen: 23
                          199.83.232.0/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:f8:f3:c6:ab:df:45:18:75:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=c3c4c266-b00f-4ec7-b67a-57077d17a5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:4b:66:80:15:ca:8d:0e:2f:55:c6:02:64:
                    bf:76:54:d7:96:a9:a2:d3:e0:70:a4:de:a0:db:94:
                    d2:6c:59:06:f5:50:b0:04:ad:7f:52:60:8c:c3:20:
                    1d:72:25:2f:aa:f8:0c:0f:96:61:b5:eb:6e:84:81:
                    40:17:15:f5:fa:08:9a:75:39:d4:42:c0:d0:a3:ec:
                    66:e9:75:df:28:61:c4:4f:38:ee:23:60:87:0a:d4:
                    9a:d6:42:cc:ce:ac:9f:b6:f8:18:4d:1c:50:7b:e5:
                    ab:4b:ed:7b:ca:48:82:84:50:7b:84:09:02:3c:85:
                    fa:05:b0:a5:08:b8:bc:36:4d:08:ee:e6:14:02:fd:
                    68:e0:bd:10:ad:fb:f9:a6:84:82:03:81:cf:69:34:
                    02:51:41:76:6d:c7:c6:10:6d:23:f2:6d:7b:90:bd:
                    8a:85:81:85:9d:83:17:6a:3f:7e:8a:31:53:49:01:
                    a6:0e:e7:74:46:58:2a:f4:4a:cf:f3:23:65:37:b2:
                    7f:58:fb:04:d6:a5:4d:82:54:6d:49:52:09:2b:6c:
                    f5:bc:e1:22:e2:2e:98:be:38:29:8d:e2:16:41:0a:
                    fb:c2:04:1d:b7:35:4b:65:33:f9:cc:3b:aa:9d:2c:
                    a7:67:26:20:47:83:bf:80:82:5f:77:8a:01:d6:b6:
                    f2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:30:9C:08:B6:80:5D:CD:34:62:97:C7:6F:48:8A:24:FF:E8:D4:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/dc442485-e1e1-32df-b067-e09e5cdece8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:3e:2d:5d:68:6f:6b:05:68:57:f3:80:6f:c6:5b:a0:d6:17:
         6c:f1:b6:05:5f:83:07:96:b3:9e:f0:c5:84:cd:bd:da:f5:d2:
         cd:a3:91:56:fc:81:e5:a5:cf:76:1d:49:31:58:1d:80:f8:c6:
         0f:5a:ac:e9:cf:26:78:a1:86:0b:e0:19:c8:f7:c9:20:e2:f2:
         97:ac:f9:5f:77:18:63:29:17:62:e8:6a:f3:7c:01:80:7c:0d:
         af:d5:41:35:14:3a:fd:05:45:b4:b1:62:c9:6c:04:f6:91:5a:
         25:5d:af:1c:b1:2d:92:e0:65:c4:82:86:07:63:4f:e9:73:f7:
         f3:e4:eb:3f:cf:d7:e1:94:e7:e1:40:75:00:31:e6:be:b9:6a:
         99:2b:9c:5f:d8:eb:62:07:9c:ba:a3:52:63:09:f7:a6:c6:b7:
         cb:b2:8d:52:cd:f7:1b:3f:7e:92:e5:32:50:02:67:51:71:bd:
         bf:88:83:90:2a:aa:31:60:77:84:c8:10:57:b2:4e:6a:e7:09:
         0c:48:9c:f2:64:34:42:f0:4b:16:88:c3:2b:7b:45:07:40:ee:
         df:2f:b0:69:4a:4b:79:11:74:25:48:6d:fd:65:32:06:c7:44:
         48:fa:17:4e:01:91:90:3b:34:97:91:aa:68:18:9f:67:36:0c:
         b7:6e:5e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:42 2025 by rpki-client