Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f6122277-dd0a-3fa1-b472-96fba2b589b9.roa
File:                     f6122277-dd0a-3fa1-b472-96fba2b589b9.roa (raw, json)
Hash identifier:          sLbLKGSwTglCHzPktOe83d61tzfit6xcJXJ0bjShYyw=
Subject key identifier:   1B:0A:C3:87:39:E7:6E:79:CF:BA:75:AF:F9:D2:8B:CF:B8:02:12:10
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858487755D3DBDCF60B92C9F5EB80
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f6122277-dd0a-3fa1-b472-96fba2b589b9.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        208.85.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:d3:db:dc:f6:0b:92:c9:f5:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=95cb6012-7969-4e98-a858-f787d7d698b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:86:b6:98:f1:57:f6:27:1c:ff:72:6e:2e:
                    50:6b:0e:81:ec:bf:a5:07:cc:dd:06:4d:bc:29:27:
                    c3:21:79:4a:0d:f5:16:57:95:b3:20:13:25:03:c2:
                    23:24:4a:dc:74:07:36:75:60:f8:bf:31:81:e6:33:
                    c8:a9:20:59:ec:7f:68:b7:c0:82:bc:5c:4f:a2:20:
                    b8:f2:1b:d3:e1:bb:68:9e:a0:b3:36:87:9e:48:7f:
                    95:bd:3b:78:68:54:f3:f8:33:d6:55:d3:71:21:76:
                    9e:01:07:4d:2e:b7:5e:3f:6d:1f:86:f8:f1:a0:73:
                    93:20:d8:56:b6:b0:d2:ff:f9:9e:f1:4b:47:2d:6e:
                    9c:bb:fe:10:a1:5a:b0:c7:52:6c:73:38:0c:16:ce:
                    6a:e6:62:bc:33:d4:75:70:cc:24:d9:cb:3a:07:79:
                    18:6f:58:56:25:ef:a7:f5:42:17:4b:ad:d9:9c:f7:
                    17:97:29:d4:56:c1:a5:bb:5b:a4:61:86:58:98:df:
                    e5:7b:ef:98:0a:82:fa:8d:3f:80:ed:ce:52:fb:1d:
                    c6:8c:69:f5:b0:f0:d8:2a:d6:23:ae:f7:ec:8c:84:
                    02:65:6a:59:3c:06:20:46:2b:a5:ad:33:ac:1d:df:
                    d8:1d:f3:4d:b2:c7:a8:e4:66:dd:81:ce:ce:9b:55:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0A:C3:87:39:E7:6E:79:CF:BA:75:AF:F9:D2:8B:CF:B8:02:12:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f6122277-dd0a-3fa1-b472-96fba2b589b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:85:52:33:32:73:4d:e7:16:3f:50:fa:64:3a:e2:72:a0:17:
         d7:7c:fc:30:1f:39:cf:1c:20:e1:3f:44:3f:78:e7:08:64:ad:
         c6:e7:cf:0f:4d:3c:b1:80:1a:df:4d:71:3d:91:59:71:bd:b3:
         12:a2:67:c8:92:b0:b9:15:88:48:ad:34:6f:06:f5:af:b3:ef:
         25:e0:6c:47:8a:22:07:a3:6f:43:d3:63:00:ed:79:f9:8d:be:
         92:89:e2:18:a4:7a:40:50:14:7d:ad:03:4d:5c:0f:f4:9c:c8:
         0a:2d:41:a4:66:97:ad:a9:c7:6d:c7:b4:85:1c:4a:6a:f7:26:
         d2:19:31:8b:d5:a8:8c:a5:2e:0d:10:ec:cc:d3:db:3e:2a:18:
         20:81:83:fa:1f:9f:8c:dd:94:88:7d:68:ff:68:48:12:bc:85:
         55:92:3f:e1:ed:49:66:07:a7:e2:0e:16:72:3d:1a:86:41:3e:
         42:88:e9:db:46:d7:3b:06:06:9e:57:d6:22:59:31:8c:4d:d0:
         62:a6:5e:9e:70:34:c4:9b:69:6d:79:62:32:ce:cb:db:be:b7:
         eb:8f:b2:d9:fe:38:da:0c:74:86:58:4b:7e:03:89:40:57:5b:
         c5:d0:89:f8:e7:61:98:fa:aa:db:4e:cb:5a:54:54:d0:bc:27:
         57:c2:f9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:12 2025 by rpki-client