Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/288c4520-4d43-370b-a67f-041cfda55568.roa
File:                     288c4520-4d43-370b-a67f-041cfda55568.roa (raw, json)
Hash identifier:          VaH6KIRCJXrDfTfagX+w+vv1ow8q05yE5JOdqv9avMk=
Subject key identifier:   2D:A5:16:7B:3C:DD:6C:9B:91:65:1F:57:F5:B7:66:FB:1F:49:29:DA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424B196DBFD5D3C036ED5800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/288c4520-4d43-370b-a67f-041cfda55568.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        2001:4888:8050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:19:6d:bf:d5:d3:c0:36:ed:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=2021aa00-e5a3-4953-96e9-668017bf3216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fe:ba:de:cd:dc:74:b6:6a:80:10:81:d0:e5:
                    68:9d:c1:8a:51:98:c7:67:33:da:48:6c:e0:bc:07:
                    81:28:2b:20:8f:53:e6:5f:6f:6b:c9:49:e4:c2:62:
                    7b:d7:80:38:ad:59:61:dd:df:d9:88:20:60:5a:bb:
                    65:35:6b:a6:1d:7b:80:46:39:30:51:1d:d8:e3:6f:
                    6d:a9:5e:9b:b8:6d:80:fa:7d:93:16:e4:34:7d:c6:
                    2d:aa:62:25:4d:78:05:e2:67:3d:6c:c6:87:ee:f9:
                    db:37:66:0d:31:1c:68:a9:76:07:db:5d:cd:6e:2a:
                    1f:5f:cc:4f:9f:3e:98:ed:58:da:ec:43:3c:5b:ea:
                    bd:74:24:c9:ef:65:87:26:02:33:9d:25:b8:bd:64:
                    74:c5:5f:5f:de:46:33:7b:5d:d4:e3:23:b2:76:22:
                    93:00:f4:c3:06:98:83:ab:69:29:5f:73:54:7a:b6:
                    da:7f:6a:be:db:f9:c6:1a:29:62:66:b4:79:dc:2a:
                    52:9b:c9:38:5b:f8:87:35:ed:02:02:50:e8:e5:59:
                    67:88:30:aa:d3:cd:c6:ac:27:1f:fa:b9:86:d9:a7:
                    45:dd:1d:f6:c7:6f:2f:18:56:94:04:15:1d:7a:f3:
                    84:72:32:49:9b:ac:fb:11:2a:d7:a9:98:e7:74:75:
                    ca:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A5:16:7B:3C:DD:6C:9B:91:65:1F:57:F5:B7:66:FB:1F:49:29:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/288c4520-4d43-370b-a67f-041cfda55568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:fd:09:f6:cd:6e:a9:92:5f:f5:f3:9d:fe:06:88:20:10:e3:
         da:fd:aa:45:7e:2a:44:cc:6e:44:77:4c:af:60:c6:23:ed:38:
         eb:61:a5:13:d2:d1:de:4a:cc:e6:c5:dc:d0:3c:b2:b5:66:cd:
         bd:b5:b5:64:94:0d:0e:94:d6:ed:2d:39:11:32:d9:78:e1:be:
         db:42:9a:1e:b7:a0:6d:a0:f9:0e:78:5b:63:55:0f:f2:52:29:
         4b:b8:4b:77:96:e9:5e:a4:96:7b:47:9a:4c:d6:23:ab:45:01:
         7a:a9:17:48:a5:5b:fa:11:55:97:6d:c9:82:9f:e8:05:7c:52:
         fa:a8:d0:49:95:7a:c3:11:32:23:07:45:ec:90:66:76:02:13:
         42:67:a5:64:1b:a6:d1:c4:0c:69:fc:76:6b:1d:f0:03:61:37:
         6b:d8:99:56:0f:76:74:91:2a:29:83:75:95:fc:2e:36:13:e8:
         90:25:a0:75:17:64:b8:c5:2d:20:6b:d5:65:7b:2f:d8:99:29:
         00:4f:aa:ad:90:15:1f:dc:d3:ee:8c:b1:1a:3d:9d:de:18:4a:
         57:39:62:32:01:1c:84:f1:3e:ec:3e:21:da:2e:0a:db:91:54:
         5d:26:66:70:2d:1f:19:59:ac:9f:3a:92:6b:4a:52:4d:a1:4a:
         f4:6f:ab:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:43:28 2025 by rpki-client