Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS219001.roa
File:                     AS219001.roa (raw, json)
Hash identifier:          kDE46kSznpRub/8n4IWviuVHGe9wln5RxA7o6cWus0Y=
Subject key identifier:   9F:14:A4:60:F8:14:34:24:5D:14:E5:6F:25:6C:10:D1:9C:DA:24:06
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       5874E6053996F900BC4FF2E59CA495E6D40E1D27
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS219001.roa
Signing time:             Mon 02 Nov 2026 18:34:42 +0000
ROA not before:           Mon 02 Nov 2026 18:29:42 +0000
ROA not after:            Mon 01 Nov 2027 18:34:42 +0000
asID:                     219001
IP address blocks:        216.75.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:74:e6:05:39:96:f9:00:bc:4f:f2:e5:9c:a4:95:e6:d4:0e:1d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Nov  2 18:29:42 2026 GMT
            Not After : Nov  1 18:34:42 2027 GMT
        Subject: CN=9F14A460F81434245D14E56F256C10D19CDA2406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:75:e6:5f:83:f4:56:ff:e6:9a:6f:9e:99:e9:
                    c0:90:1c:32:4e:6a:3a:78:39:0d:e8:b5:e1:ff:39:
                    fe:fa:0d:65:bf:5b:cd:9b:5b:16:e1:6a:af:75:60:
                    16:2e:02:42:8e:89:29:3d:9b:44:7a:6d:62:28:37:
                    cf:95:d7:6a:25:14:9a:ae:5f:97:4c:20:df:7e:4a:
                    18:f0:f0:6f:00:18:47:9b:72:e8:10:e9:91:16:a8:
                    2c:42:a0:d7:38:89:e7:9a:2f:48:58:4f:1b:ca:03:
                    72:01:02:78:7b:4c:a5:7f:fd:41:ba:a3:d1:e2:9c:
                    04:03:21:ff:fd:6d:25:02:84:3f:76:b7:20:67:e2:
                    08:8d:1f:04:71:e5:9c:4a:01:d9:d9:83:ce:54:b4:
                    55:f1:ae:e3:66:ba:c1:e3:e4:d8:d2:ec:c9:51:25:
                    ba:02:08:06:45:0a:96:3a:8d:1b:ed:91:65:fc:56:
                    d4:7f:15:bd:da:be:3e:ca:7b:b6:1f:37:c3:b9:65:
                    38:0b:28:5b:17:c3:62:e8:eb:f0:4a:bb:f2:d2:e9:
                    8e:33:28:b8:87:03:83:e5:36:90:57:b6:1b:f0:33:
                    9e:11:5a:08:9c:cc:31:20:de:ce:49:30:66:25:cd:
                    3e:a3:a6:67:98:7d:04:ab:5e:2a:84:e8:96:ce:df:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:14:A4:60:F8:14:34:24:5D:14:E5:6F:25:6C:10:D1:9C:DA:24:06
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS219001.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:72:6b:7e:c8:58:d4:09:36:43:4f:49:77:6d:bb:7e:0e:34:
         e8:64:77:b6:a0:59:6e:31:f6:3a:53:9a:7b:e1:83:6d:31:b1:
         d2:c2:1d:9a:9e:d7:aa:f5:32:a3:9c:e5:6d:95:3e:0d:04:2f:
         26:c1:30:6a:b6:d7:fa:04:a7:84:f4:d4:7a:9c:8e:67:7d:eb:
         37:76:43:c5:35:e6:c8:56:18:b3:5c:20:4d:d2:19:bf:53:1c:
         ae:30:3b:31:d4:18:ea:06:5b:cf:49:2a:a3:2a:cf:b7:40:b3:
         32:4f:e8:44:f0:a4:6c:fd:54:25:64:f7:5c:ef:83:ae:df:9e:
         cc:19:d9:91:25:e3:9f:9f:8f:1d:41:2d:51:36:a4:1b:9e:3d:
         99:61:eb:0b:ac:e9:0a:db:e3:4e:19:db:0f:d2:e7:5d:fa:f3:
         92:eb:6a:22:d8:24:93:c6:d6:fd:59:ea:1e:e9:84:cf:eb:4d:
         4e:9f:93:7a:cb:8a:0d:7c:1e:83:50:30:a0:4a:1b:29:02:a3:
         40:8c:c2:a3:4c:79:2b:4e:c4:ae:be:b4:3d:aa:25:8c:2f:97:
         7a:67:61:cb:a9:45:52:58:44:6b:85:5c:5b:50:ca:57:74:6e:
         d7:02:1e:c7:bf:c5:41:e9:8f:50:0c:4a:a4:b4:27:6b:68:0b:
         1b:b9:a1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----