Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/0397d616-845a-3a5d-9ca7-2d7583a9f252.roa
File:                     0397d616-845a-3a5d-9ca7-2d7583a9f252.roa (raw, json)
Hash identifier:          EG2ACogHLdHnUMVX7fxE2HkvvLB9fM6nGjNduZJxMtM=
Subject key identifier:   89:EB:3C:70:A8:39:D2:9B:75:E3:F8:36:1B:F7:23:41:FB:3E:7A:7F
Certificate issuer:       /CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c
Certificate serial:       010D0C9F43285848A830AE32CE21E437A6912100
Authority key identifier: 6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/0397d616-845a-3a5d-9ca7-2d7583a9f252.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     8075
IP address blocks:        167.92.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:ae:32:ce:21:e4:37:a6:91:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=71e86488-b5e6-4674-8075-7614307f236d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:57:ab:10:01:d6:a2:eb:59:fa:87:ba:48:bf:
                    fc:7e:d7:9f:1d:ff:05:11:2e:55:b0:16:b0:b4:e2:
                    10:ab:ee:1d:7d:7e:b2:ef:03:62:db:2b:61:3e:5d:
                    03:e3:36:1d:7d:40:8b:14:49:c7:36:22:51:2c:ee:
                    29:7e:a7:72:f2:91:11:b7:99:ae:39:7e:4c:7d:8a:
                    67:2a:7a:85:7a:1e:96:04:4d:90:4a:09:66:e2:0b:
                    cc:7c:b3:63:67:27:ed:7c:df:0e:53:90:f1:98:48:
                    ed:36:95:6c:79:df:fe:53:f6:bc:b9:72:0d:05:fb:
                    58:c5:c6:62:35:7e:cb:0f:56:22:97:24:5b:9c:fd:
                    98:96:e7:26:31:55:37:cf:f1:14:b1:3e:54:ba:d0:
                    cb:53:b2:84:b8:01:27:55:53:d3:37:db:c0:2c:3c:
                    07:e5:e9:ab:17:cc:42:e5:21:47:6f:22:9d:f5:34:
                    5f:f4:f7:5e:40:21:f7:19:19:8e:d9:eb:9e:22:49:
                    12:ec:95:9b:73:0e:cb:4d:d9:0f:0c:9c:bd:7a:51:
                    6d:64:95:a8:6c:59:db:63:da:a1:49:17:de:9b:e4:
                    ce:cc:9b:cf:85:b4:9f:37:c8:cb:14:fc:d7:ab:3f:
                    5e:12:a0:bf:bd:2f:d6:d6:8d:80:f9:e4:f5:a0:a6:
                    d7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EB:3C:70:A8:39:D2:9B:75:E3:F8:36:1B:F7:23:41:FB:3E:7A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/0397d616-845a-3a5d-9ca7-2d7583a9f252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl

            X509v3 Authority Key Identifier:
                keyid:6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.92.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d7:e1:a3:ae:ee:56:9a:3a:ee:fe:d0:12:1b:89:2b:36:12:
         a4:68:ed:97:25:3d:54:e2:5f:af:63:b0:86:ff:c8:a3:17:c7:
         f7:c8:99:9a:91:72:64:44:1c:b9:18:ee:4e:bb:c2:6d:38:a3:
         7d:3a:d6:c2:ae:9c:fb:2c:b2:e2:f0:4e:7a:21:79:e2:b7:8e:
         35:73:04:7d:a1:40:2c:4d:31:18:ad:f5:8c:c9:d5:0d:29:18:
         dd:26:a0:a4:78:79:9f:6a:f1:40:4f:20:d4:49:80:a6:27:a9:
         66:e7:d8:7b:d5:cb:6e:40:dc:b4:99:f7:20:42:a2:3d:10:d9:
         6a:eb:fa:6f:d6:f4:44:6b:70:02:bb:32:80:2d:1b:e7:60:ff:
         44:5c:f9:62:7e:d8:61:ea:37:ce:84:58:60:5e:92:cb:77:7d:
         dc:f5:17:0c:bf:5d:39:56:14:26:7f:09:3b:9b:3e:9b:5c:2f:
         cc:68:39:48:cc:a4:6c:e3:88:ee:ba:9a:2e:5d:91:ce:ec:5a:
         50:8f:37:d8:20:08:56:29:76:8d:e4:29:1a:37:20:ba:ea:e1:
         cc:eb:13:fb:7e:42:7e:15:26:11:f1:cb:2a:84:33:e3:c1:33:
         49:62:6a:5c:99:7d:79:ff:58:30:e4:0a:7a:09:71:53:ce:f2:
         c7:30:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:04:29 2025 by rpki-client