Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa
File:                     f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa (raw, json)
Hash identifier:          RWyewnDy0tjsRVpueH6G2HMnkh+tp8X8qHCxZWxSq9Q=
Subject key identifier:   35:11:3A:5D:20:9B:3A:2B:63:BA:03:6F:8E:72:2B:4D:2C:27:D0:73
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858487755D3849032E094DF5477C0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        192.156.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:d3:84:90:32:e0:94:df:54:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=1683ba84-15a3-45a3-bad4-4be3080d59c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:17:bd:c6:3b:81:65:c9:33:b3:af:52:61:a5:
                    11:b9:b9:a3:a4:ef:09:02:e4:76:0b:15:2f:7c:80:
                    0f:20:b2:ef:e3:42:32:f3:5e:93:f5:5e:74:6a:fb:
                    91:1c:d9:c4:f0:71:fd:5d:fb:b4:e3:e7:23:a1:b5:
                    9a:c1:b8:f2:c4:65:74:e9:a4:dd:15:ef:41:c5:66:
                    21:e8:09:88:6e:ad:98:a4:4c:6c:aa:94:06:98:4c:
                    f1:59:eb:77:c1:38:93:d2:c0:f6:84:81:31:3c:4f:
                    3f:1a:2c:2a:47:83:1a:93:5c:ee:2a:e4:cd:2f:87:
                    77:19:a3:f4:e8:8e:23:f3:18:33:73:6e:1a:20:0d:
                    20:70:67:3a:dd:52:bc:91:2b:92:78:7b:97:87:d4:
                    a1:28:0e:ac:f3:db:3c:11:a5:8c:98:a2:48:5a:96:
                    dc:41:fe:27:50:1c:55:05:1e:b5:6b:cd:3d:26:df:
                    49:98:20:c9:85:ff:c9:81:c6:a6:2e:ba:ef:d8:ed:
                    cd:f5:99:83:b5:fa:de:6a:1b:9c:53:3d:5d:0d:73:
                    cf:51:04:d9:75:a3:76:8b:8f:2e:24:b1:c7:2a:2f:
                    7b:a1:f6:4d:5e:64:2e:f4:60:b9:0c:bc:3f:52:6b:
                    96:c3:14:cf:2e:69:c3:8e:ac:bf:dc:2d:b2:86:d4:
                    28:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:11:3A:5D:20:9B:3A:2B:63:BA:03:6F:8E:72:2B:4D:2C:27:D0:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.156.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:66:7d:1a:1e:0e:45:30:86:aa:60:ea:e0:db:e0:02:b5:8d:
         bf:2b:fd:d0:60:05:3c:d8:28:e8:9c:e9:d3:af:89:57:f7:34:
         3a:f6:dd:a9:d3:18:1f:ac:a5:6e:4e:d8:84:29:17:d8:73:35:
         fc:ac:4c:55:23:3b:ae:ee:f5:de:35:95:0f:95:34:8d:53:68:
         d4:a0:54:53:41:71:97:3d:07:ca:77:ac:ff:34:0a:bb:5b:21:
         6e:99:24:32:75:ca:24:c2:26:75:c7:ee:26:1c:29:0c:3f:36:
         d9:ee:80:3a:a7:25:d9:c0:41:24:d5:cd:57:9d:75:d0:0f:ef:
         c8:ba:b3:09:5b:ab:be:e5:6a:1b:23:c2:09:00:4d:4f:c7:95:
         d4:38:a6:70:3f:cf:97:03:05:38:45:22:d9:ef:3e:c3:02:30:
         a3:56:e9:13:df:fd:c9:b9:1a:a9:b1:4d:d8:7f:67:ad:dd:7a:
         53:04:7f:76:f2:4b:ba:14:35:97:af:71:6c:ed:c3:39:3e:f6:
         cc:42:74:a5:7c:00:ee:d2:72:3d:60:62:6e:0e:a8:61:5f:e9:
         4c:82:1a:e4:7e:39:45:24:8a:8e:2c:7e:a2:0a:68:ff:48:b5:
         8d:0a:d8:39:55:f4:d2:05:95:43:c7:85:38:0d:1f:76:55:c9:
         59:0a:db:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:18 2025 by rpki-client