Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa
File:                     1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa (raw, json)
Hash identifier:          wqib87f3AoQYoWfsrJcqqcmcnhxrObmUxFIbsQeUx1o=
Subject key identifier:   4E:FE:3A:09:A1:D1:B9:26:5C:3F:E6:86:34:E8:79:CA:FC:6C:A6:77
Certificate issuer:       /CN=ef063323-5439-49a9-aad0-9dd33bb50925
Certificate serial:       010D0C9F43285849244E6D23B231DE32533CA400
Authority key identifier: 3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        165.109.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:6d:23:b2:31:de:32:53:3c:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef063323-5439-49a9-aad0-9dd33bb50925
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=809643f1-0051-496c-adae-aa62eff8c0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:d4:59:2f:c2:8d:42:80:40:10:6c:9c:c0:
                    49:f1:9e:31:a5:dc:aa:f2:84:c4:32:7b:93:0f:f4:
                    ad:fe:e8:ab:a8:e5:f0:6e:8e:e8:a9:1b:fb:18:9b:
                    6f:bf:14:50:6b:28:7b:62:d3:10:57:c5:0f:57:a0:
                    f0:97:4c:78:32:44:3a:dc:bb:91:0f:1d:ab:2c:7d:
                    82:2c:d1:c1:da:5c:4d:5f:fa:54:1d:01:d0:46:b3:
                    f6:22:e6:9c:c7:67:04:68:f2:81:b2:46:7a:b2:27:
                    3a:5b:6a:d7:eb:98:43:1e:b4:98:39:55:c0:79:7d:
                    45:f1:93:db:c2:ec:fc:5a:da:94:2b:2e:8e:dd:7c:
                    b6:13:96:66:23:b3:c0:33:5c:93:3e:29:3f:f2:d8:
                    52:42:98:14:c6:cd:87:51:73:bc:2d:70:06:99:64:
                    db:d1:a1:d1:c5:5b:75:79:6c:5d:cc:bd:66:74:9c:
                    cb:23:b4:01:5f:72:ba:45:15:b3:96:fc:43:0b:8d:
                    cb:74:18:09:0c:41:a7:0c:f3:89:03:82:43:00:ad:
                    b7:d7:7a:8c:9e:d5:b0:af:e3:8b:bb:bc:c8:73:a6:
                    51:54:37:1f:ae:a8:fb:19:f0:d7:44:41:21:5c:61:
                    6f:7a:6a:2f:9f:50:8e:3d:7d:1f:76:18:5e:29:28:
                    87:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FE:3A:09:A1:D1:B9:26:5C:3F:E6:86:34:E8:79:CA:FC:6C:A6:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.109.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8c:2d:ce:d5:64:09:f2:cb:70:69:3c:99:ff:59:69:b1:d7:
         8e:74:c7:d8:f7:fd:08:56:e1:d9:11:c9:f3:a4:dd:83:64:c1:
         e9:0a:84:86:18:3b:b8:95:0c:33:e0:52:ff:2b:09:ea:7a:b8:
         06:81:33:0c:6f:1f:47:47:21:cd:4a:c6:14:9f:18:b7:cb:0f:
         3f:78:79:2e:c4:71:d9:38:d8:cd:d4:42:3c:11:8a:65:27:be:
         54:d6:d4:6b:12:22:8b:ca:5c:00:5f:12:1b:7d:1f:15:8a:fb:
         d0:cc:b7:49:19:a2:03:1e:e5:8a:4c:9b:1a:18:28:62:5a:6b:
         7c:1a:d2:86:03:2e:a1:cc:45:0e:d5:9c:42:91:7b:0a:b2:d2:
         30:9f:63:43:d1:93:2e:b0:d5:45:32:d2:a3:8b:cc:52:21:03:
         97:ab:8b:84:21:24:21:eb:3d:a1:c8:f8:9d:b3:ff:18:f1:d8:
         ef:14:cc:00:fb:3f:40:22:57:4b:80:bd:46:53:a4:f8:5c:ca:
         7e:82:d1:8e:13:64:81:f7:06:cc:13:bd:a3:22:28:31:81:5f:
         fd:3c:58:d3:a1:20:1e:51:ee:aa:1d:04:09:9d:1b:2d:d3:2d:
         9b:77:a5:22:97:3d:f5:d1:66:79:18:52:3e:42:46:a5:5f:17:
         03:b9:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:37 2025 by rpki-client