Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84e8476a-6e98-3b16-a2b9-99b5ce183fd0.roa
File:                     84e8476a-6e98-3b16-a2b9-99b5ce183fd0.roa (raw, json)
Hash identifier:          EU5J7SpjbVG62NIiaDmDKsJoILT5rO+cusDd46nei6w=
Subject key identifier:   78:CC:33:CB:7D:0E:44:F3:D7:D9:E1:89:00:DB:7D:EC:66:D7:BD:C1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848DA710051CEF4E0CC11D960A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84e8476a-6e98-3b16-a2b9-99b5ce183fd0.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        161.184.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:71:00:51:ce:f4:e0:cc:11:d9:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=7eb7df4e-d49d-4343-b46d-f1efbf1651fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:62:19:1a:91:c0:7b:43:ba:87:f0:f5:c0:58:
                    0b:43:a9:56:9b:98:47:aa:77:52:16:ca:11:97:1d:
                    d5:a4:3d:2f:62:55:ab:15:4b:a0:47:5e:20:31:60:
                    c7:9b:86:5a:5b:9c:a8:3d:73:49:89:1f:7d:b8:2e:
                    46:1c:3e:bc:01:9f:ae:2e:92:bf:f8:71:27:10:4e:
                    64:7e:b1:10:ec:d5:ee:ed:d5:22:17:f3:31:08:c5:
                    df:48:7d:64:3c:ba:65:b5:b9:01:8f:ff:1d:fc:1e:
                    2f:91:fb:69:9d:f6:df:c8:75:4b:8a:2e:6b:4b:24:
                    a7:8b:70:14:9e:44:c6:6c:10:e9:d2:63:95:48:ef:
                    2e:aa:5f:0a:00:86:92:48:59:fd:e8:00:24:2b:51:
                    51:cf:ec:6e:5f:a3:34:4a:ae:33:2d:e0:2a:32:e0:
                    b5:97:4f:ba:fd:e0:09:d7:93:d0:d4:d1:21:77:96:
                    2c:b1:5e:dc:6b:e4:80:b4:48:9d:34:de:58:36:f1:
                    b5:ed:01:4a:79:84:df:8f:95:4c:f6:df:08:7d:3a:
                    2c:d0:27:16:17:16:32:fb:51:b3:75:b6:4b:e3:ac:
                    5b:68:02:cc:56:a4:07:13:29:e2:bb:3b:20:32:39:
                    f9:14:3b:9c:c3:8c:3c:56:3a:0c:42:d9:67:69:5c:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CC:33:CB:7D:0E:44:F3:D7:D9:E1:89:00:DB:7D:EC:66:D7:BD:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84e8476a-6e98-3b16-a2b9-99b5ce183fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.184.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:37:b2:67:c9:06:39:2e:24:6e:6c:0e:74:c1:b6:7d:07:73:
         02:0a:97:1a:d7:2f:5b:5f:29:c5:ec:39:aa:e1:0f:85:97:86:
         6b:53:06:44:bb:16:b7:2d:be:32:3e:58:2b:0e:ff:16:45:99:
         ec:6c:f0:64:ed:77:ce:21:9f:9a:e5:0e:01:d9:37:51:70:f7:
         61:af:b9:b5:c5:63:94:12:c3:c0:6b:c0:6b:ad:fb:de:48:bf:
         77:c7:b5:9c:ba:e4:fd:60:c7:36:48:df:0f:4c:a7:da:10:60:
         12:ef:1f:db:4d:04:96:36:6c:bc:c5:c5:5e:a9:68:f4:4b:38:
         ae:2f:c6:78:b9:fb:fc:75:d4:a8:20:78:15:ee:3d:42:5c:a3:
         53:52:f6:6e:58:a2:6b:e5:bd:93:46:7c:ee:01:e1:d7:9f:a2:
         41:e3:bb:7d:03:91:e3:bd:c5:1f:a8:08:33:1c:48:a0:2a:ee:
         68:f6:fa:3b:1e:76:e9:4a:d8:39:76:88:7d:a6:86:5c:a7:82:
         0f:80:12:90:5e:6c:8c:92:b1:b7:58:06:f3:ff:ea:56:1a:7b:
         bb:d8:c4:94:f0:42:44:ef:13:16:01:43:02:08:ac:04:7f:35:
         a2:25:91:85:e2:1f:06:08:bc:72:ff:fb:8c:f7:ec:8b:a3:78:
         98:e0:93:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:50 2025 by rpki-client