Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43ef84b5-43ee-3a7e-b429-fc9e009ae826.roa
File:                     43ef84b5-43ee-3a7e-b429-fc9e009ae826.roa (raw, json)
Hash identifier:          VfMDsf/ORWqms8ZNas9emSvXnTEOIml3LU/aiC6/cpc=
Subject key identifier:   50:CF:99:9C:B0:68:76:76:86:9E:6F:52:DD:AB:6C:CA:88:ED:64:67
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424B1870927D2A7A400E9640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43ef84b5-43ee-3a7e-b429-fc9e009ae826.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        2001:4888:8024::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:18:70:92:7d:2a:7a:40:0e:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=8b3c23df-7e44-4e3b-b61f-e5d768afebc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cb:0a:e9:a2:23:dd:02:90:9b:f6:50:d7:98:
                    b4:ea:cb:40:45:e8:53:9d:db:5b:1d:d9:dc:99:41:
                    1a:ea:34:a8:f4:fc:2a:49:ba:9b:9d:b4:3b:db:cc:
                    41:26:91:d5:39:91:30:87:2f:86:de:81:d2:6f:b4:
                    61:46:78:2d:ac:e6:45:ea:2b:af:ea:f2:a0:7a:1f:
                    0c:c5:93:9d:1b:97:bc:9a:de:d8:cb:dd:34:c7:e9:
                    d3:b9:58:75:e0:93:b0:41:64:0a:5d:6c:a0:d3:51:
                    f6:20:3a:a6:d4:62:8f:e1:a7:28:35:4a:74:6c:53:
                    a6:14:f5:ef:ed:dc:bb:a4:2d:22:2b:36:9d:5e:ef:
                    e5:f5:80:a2:03:f7:2a:d7:37:60:42:ff:32:30:75:
                    bf:43:64:ca:e2:3a:3d:f8:7e:5a:5b:f6:ed:41:7e:
                    90:84:16:7f:1b:1b:20:b3:64:bc:b6:d6:4b:4b:60:
                    c6:40:35:bc:4e:0a:27:ad:04:dd:cf:c2:eb:b0:1b:
                    40:50:85:0c:13:7b:f9:09:cb:2b:80:71:16:c3:0f:
                    ec:b7:c6:0a:91:9b:68:60:fc:05:5b:e3:dd:7a:4f:
                    d2:82:bc:b9:d3:b8:80:d4:c9:40:1a:97:a6:7f:4a:
                    42:86:20:11:11:b2:e4:22:ac:90:79:d3:36:2b:e9:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CF:99:9C:B0:68:76:76:86:9E:6F:52:DD:AB:6C:CA:88:ED:64:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43ef84b5-43ee-3a7e-b429-fc9e009ae826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8024::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:4a:a3:35:ea:9e:eb:8c:ab:bd:41:e7:21:d7:50:38:a0:20:
         7a:95:57:1c:9d:3c:96:18:78:4f:a8:31:74:1e:c0:0c:f8:53:
         fc:52:8f:6a:5c:d1:79:1d:a2:16:42:53:e6:c0:ec:85:10:1b:
         6c:eb:7e:75:3e:59:4f:f5:65:ca:e6:ba:67:12:56:5d:bc:ff:
         70:56:d8:71:f6:34:5e:b5:f9:5a:74:44:18:b2:d3:d1:d2:06:
         83:e9:b9:d6:98:9b:fe:c5:b6:4b:5d:ea:0a:c8:30:c8:d4:1b:
         fb:a9:00:b1:c2:e2:5b:02:67:3a:2d:08:4e:09:89:e1:d7:b5:
         83:a6:95:42:6f:16:3a:d6:ae:e0:70:27:12:30:3d:27:54:d5:
         93:74:fc:fc:77:57:6a:06:db:b0:41:e5:ef:55:16:f4:32:b3:
         cc:23:42:72:ed:1f:a8:60:f2:df:f9:d8:8b:aa:59:50:43:74:
         b0:a6:d8:83:50:3f:51:d4:ca:89:a9:65:ae:e0:19:a2:bb:0c:
         4d:a0:81:26:c5:d8:35:96:e3:50:6a:c2:c7:40:34:a7:62:c3:
         76:dc:b6:09:0e:20:d1:48:e8:9a:9b:b9:04:ed:57:8e:24:bb:
         8b:29:5f:15:ae:db:e1:84:aa:c8:f3:21:92:04:51:42:2a:00:
         d5:d3:09:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:53:13 2025 by rpki-client