Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/0aca10d1-6d54-3e58-9c39-60203235636a.roa
File:                     0aca10d1-6d54-3e58-9c39-60203235636a.roa (raw, json)
Hash identifier:          5pS2sQS0/SNs1cgJ+s56UFC4XPFuyv4I8cOWCgAUDGk=
Subject key identifier:   E5:70:17:DA:E8:59:7A:42:3A:9D:FA:4B:88:69:30:46:A0:49:21:82
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F43285848EF6163BB20D6B2A5B22E3EC0
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/0aca10d1-6d54-3e58-9c39-60203235636a.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        170.176.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:63:bb:20:d6:b2:a5:b2:2e:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=f743477c-dcf4-465f-a731-9bf00cc8257f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:52:e0:c0:2c:61:fa:96:87:bc:f5:f0:77:
                    05:d6:04:39:c2:92:f1:2a:50:52:bd:b6:15:fb:05:
                    67:10:f2:d1:68:0b:64:4e:92:14:17:f3:82:c3:c6:
                    25:25:77:ed:45:58:d2:d5:10:47:45:7f:b3:30:ad:
                    5e:8e:4d:4f:36:fb:e6:7c:bf:02:f8:48:b6:3b:90:
                    51:9f:26:ee:f7:b3:b0:e8:5b:c5:d5:b6:98:85:51:
                    b8:ac:06:c9:e8:0e:71:1c:81:f6:ac:7b:8e:e8:71:
                    39:fe:94:a4:73:09:64:cc:b2:c6:19:a0:e0:e2:52:
                    d7:74:96:dd:f4:0c:a3:cd:89:fe:a2:81:a4:85:3f:
                    6d:ef:da:a3:1c:f2:a5:95:22:0a:b6:6f:d3:8d:4d:
                    44:a2:5f:e4:33:33:f4:69:91:6d:f3:6f:56:84:7b:
                    9c:3d:7a:76:e0:d9:f2:4d:c4:43:74:b5:dd:69:69:
                    07:3a:94:ef:5a:33:36:d6:aa:d0:6d:58:63:00:35:
                    a3:87:b6:bb:41:f8:39:59:26:8c:cd:25:12:ae:e4:
                    4d:02:54:36:78:80:73:16:9b:6e:2a:aa:e9:90:6a:
                    07:8d:d4:c8:13:ea:c7:3c:f8:83:2d:93:53:06:2a:
                    26:53:57:dc:60:d2:d8:10:d0:70:dd:bf:27:24:bd:
                    bf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:70:17:DA:E8:59:7A:42:3A:9D:FA:4B:88:69:30:46:A0:49:21:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/0aca10d1-6d54-3e58-9c39-60203235636a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:03:da:63:56:50:74:fe:4f:c0:fc:79:7e:12:b3:28:47:ba:
         87:58:ba:f5:9c:cf:61:86:c6:37:1e:01:bc:30:f3:1f:85:d3:
         a0:9c:39:1e:cd:37:27:67:91:d4:74:da:eb:f7:be:5a:72:e4:
         64:fe:32:2e:58:a7:ad:cd:40:08:a5:be:07:b8:28:19:43:dd:
         cf:fa:d7:e3:74:45:9e:43:0e:6c:c0:5e:dc:f0:91:28:f0:ba:
         b7:9f:74:15:54:28:c6:2b:6a:f1:7f:ac:e4:0f:dc:86:e6:ae:
         de:6a:47:39:ff:ff:22:7d:3b:89:ce:60:50:cc:a9:17:9b:17:
         07:c2:50:4b:f7:10:09:7c:6e:69:d9:aa:bf:be:f9:20:da:fe:
         69:d3:bb:9a:6c:ee:70:08:3e:55:3f:09:d5:69:04:dd:f1:77:
         cc:e4:6a:52:6e:21:e0:7f:4c:db:3b:e9:71:44:9c:28:1b:9b:
         22:1b:b9:da:68:b8:61:3d:f4:b6:31:72:db:4a:46:13:49:72:
         45:4a:52:13:ce:07:98:e0:e6:7c:b5:43:53:11:97:73:4a:12:
         c3:9a:81:5b:f6:19:a7:af:c1:db:2a:9f:59:46:6c:62:7a:94:
         6b:62:6e:84:a3:a9:a9:da:c9:a6:58:27:2e:06:86:68:ae:9f:
         c9:ee:4b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:20 2025 by rpki-client