Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c324e3a-0404-3c74-b6e4-73e5c82cfc7f.roa
File:                     4c324e3a-0404-3c74-b6e4-73e5c82cfc7f.roa (raw, json)
Hash identifier:          a2m3kMWfUxol/mglAap0UZqZajHbFsXsWHfzsa8987g=
Subject key identifier:   C0:58:07:AB:D8:FF:48:8C:3F:6E:03:BF:83:D0:5C:DF:5D:66:4C:93
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424B1861674A25172CA10700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c324e3a-0404-3c74-b6e4-73e5c82cfc7f.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        2001:4888:8022::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:18:61:67:4a:25:17:2c:a1:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=6285e0da-665b-4a02-b1f4-cfa02b61ac72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:60:eb:91:76:08:4c:55:86:45:b7:26:3f:7a:
                    aa:40:a2:4f:5d:9c:40:73:5e:4a:3f:cd:d9:61:9d:
                    7b:ee:ed:57:5e:0e:a5:4f:a7:33:8c:5c:71:37:8b:
                    54:56:e9:da:05:18:78:dc:18:28:78:93:a2:f3:cb:
                    82:0d:30:d4:67:1b:dd:46:ec:09:19:c0:8a:d5:78:
                    cd:fb:a9:81:c1:b0:67:38:dc:4a:ac:c9:57:87:69:
                    b7:a6:2d:b1:95:55:d4:03:a9:a1:69:19:ad:05:67:
                    6f:8d:47:97:33:27:fc:d8:2a:d5:b1:78:5c:6d:3b:
                    5b:9e:85:3d:29:01:8c:3b:bb:f0:22:59:60:92:a1:
                    38:93:1a:df:f9:1b:c0:76:9d:8d:0d:66:4e:79:07:
                    85:32:ee:c0:0f:08:b3:dc:54:d5:a0:64:fe:f9:37:
                    0f:1c:30:04:f7:a6:6f:0a:1d:2e:4b:59:dd:fc:b4:
                    ec:3c:1f:62:eb:42:49:93:ff:ba:fb:0d:04:f1:cb:
                    b3:2c:c1:47:71:a1:4c:f2:35:5c:e7:76:c3:62:60:
                    57:bb:ba:07:2c:4c:3e:f1:bc:85:2a:c0:53:a9:20:
                    80:2d:fa:4b:0a:02:dd:22:45:e3:36:54:f0:96:ea:
                    8c:fe:7f:9e:d5:ec:71:66:75:a7:16:17:90:bd:26:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:58:07:AB:D8:FF:48:8C:3F:6E:03:BF:83:D0:5C:DF:5D:66:4C:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c324e3a-0404-3c74-b6e4-73e5c82cfc7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8022::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:cb:11:29:1c:55:5c:85:ae:ec:41:30:21:f7:95:61:ed:ee:
         9a:14:2f:80:91:46:97:0a:a8:03:e5:ef:2c:e6:b1:0d:89:8f:
         ba:26:b6:26:08:70:90:5e:1f:6a:fe:a2:9c:0d:87:ed:33:5f:
         e5:99:29:c6:1f:6d:62:fd:90:70:1c:17:da:ae:79:89:06:e0:
         54:bd:51:b7:a3:7e:f5:da:f6:05:ac:c4:c0:e2:5d:71:9f:af:
         6a:35:91:26:d7:10:c3:5c:fd:96:ac:b1:35:2f:26:b1:68:4b:
         3e:4b:d2:5e:22:f7:41:e2:96:40:f9:7b:5e:91:df:91:b5:3b:
         72:56:5a:11:18:e5:2a:ca:72:fb:7f:90:a7:ad:11:4d:60:d4:
         89:82:82:74:d9:f4:fa:7b:f8:f9:4a:06:81:dc:1d:c6:55:f8:
         b8:1c:10:d0:35:b8:61:4d:91:2e:95:8f:d0:b2:fc:09:79:46:
         d0:45:e1:12:9a:a8:5d:d3:cd:61:de:8f:f0:54:83:9e:74:14:
         f5:b7:61:f0:d7:a7:a5:48:9e:95:96:8e:28:9f:6a:3d:b2:64:
         08:ee:ba:ba:93:ff:83:2b:ee:c9:31:cb:cd:45:22:65:f0:c8:
         2b:b0:b2:56:1b:68:a0:f2:70:3d:38:65:79:1d:3d:3f:06:28:
         74:af:46:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:01 2025 by rpki-client