Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a3276dfe-b080-343d-8d44-317e56e9018e.roa
File:                     a3276dfe-b080-343d-8d44-317e56e9018e.roa (raw, json)
Hash identifier:          YQKaA09PsXVKY4Alm67KvrV9HuHulQRe4YifLLMUtGE=
Subject key identifier:   CD:A8:35:D2:A8:C6:F6:8B:29:D7:92:24:6A:9A:CA:B5:D6:DE:90:4B
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F432858480BDA63F4D883B99F541FCCF0
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a3276dfe-b080-343d-8d44-317e56e9018e.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        198.176.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:63:f4:d8:83:b9:9f:54:1f:cc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=6f0c56f1-199a-4be2-abba-0c3460327b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:99:9a:19:06:bc:1b:13:ee:d3:6c:7b:95:
                    b5:f9:70:8a:56:0a:60:b4:36:a9:28:1d:93:ea:d9:
                    18:fa:a6:be:4e:f1:71:e5:1d:29:95:fe:5d:81:da:
                    ea:6c:03:6d:d4:bb:2b:5a:59:f3:3c:29:14:40:68:
                    73:7a:54:c3:9e:4a:6a:4f:8c:48:3e:63:7f:93:9f:
                    a0:73:0c:49:da:5c:6f:f9:01:42:60:07:2d:85:4a:
                    a0:cf:5d:68:bf:37:04:7c:e6:08:6e:dc:d2:cc:31:
                    17:47:a4:07:1f:26:99:32:5a:47:07:8f:8f:32:f6:
                    07:05:15:cd:69:b1:d5:e6:4c:46:27:91:c6:c6:40:
                    70:5e:45:19:e4:5b:7a:23:08:fb:fb:d3:c5:f6:70:
                    10:11:43:70:f0:6f:17:0b:40:7b:b5:a0:89:8c:86:
                    23:50:3b:51:03:fe:fd:e7:98:97:9c:31:ee:50:b7:
                    c8:f8:23:71:51:81:42:8a:d8:f3:c2:0b:eb:e4:31:
                    a4:b4:3b:09:15:02:33:11:74:57:72:f8:de:1f:b1:
                    43:1a:b3:66:d3:08:1a:65:42:6c:88:c0:08:65:78:
                    b1:32:46:f8:05:42:49:ab:77:f5:40:1e:03:2e:18:
                    2c:48:96:31:5c:cf:d8:8f:a6:dc:6e:3b:74:8b:35:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A8:35:D2:A8:C6:F6:8B:29:D7:92:24:6A:9A:CA:B5:D6:DE:90:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a3276dfe-b080-343d-8d44-317e56e9018e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:26:57:b3:81:53:9a:a1:9d:3b:ed:00:5a:c5:f8:31:e4:aa:
         09:c1:43:1b:d2:35:28:ef:0c:e3:5c:99:51:b2:82:49:64:1e:
         45:b8:39:a7:0b:cd:10:1f:fd:8b:f1:b6:11:9e:83:e3:4b:03:
         d1:75:a7:45:2d:66:1a:a7:85:99:91:19:e5:f2:5a:ee:46:4f:
         ac:84:98:f9:33:b7:3d:ef:29:d9:28:28:84:a6:14:c4:b2:d6:
         68:11:62:44:dd:80:6a:65:fe:25:cf:05:fd:80:2d:df:15:ef:
         ae:1d:39:8b:cb:5f:39:72:72:63:af:a8:4d:0f:1a:ae:42:8d:
         0d:61:d2:4c:ef:91:07:7e:ae:f3:5e:49:a0:7d:a2:4b:86:01:
         67:92:5c:49:c8:e3:f1:9d:97:05:6b:f1:9a:56:26:1a:69:d4:
         2a:6a:d7:24:6a:f0:b8:2e:12:52:fb:5f:ca:17:5a:4c:2b:84:
         e8:68:13:90:f8:69:2f:ce:45:db:5a:c1:d2:b0:02:bd:aa:2f:
         25:9f:9f:cb:d3:34:e2:27:11:4d:17:68:15:c3:21:94:0a:69:
         c9:f4:bf:dd:71:ea:17:20:fe:dd:c4:9c:2f:c8:3a:e8:59:73:
         18:a5:fc:fe:4d:ea:bf:d6:dd:25:78:e3:f2:64:4e:56:d5:33:
         a8:d3:0c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:04 2025 by rpki-client