Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/27c96c9b-787d-3d46-a672-ba275b1e9911.roa
File:                     27c96c9b-787d-3d46-a672-ba275b1e9911.roa (raw, json)
Hash identifier:          9cBcZHOd4XguCMJ4pi7frAV8qMw5rASwiVBGA3PpIYI=
Subject key identifier:   45:20:73:1D:CC:70:7C:FF:44:01:F8:D5:75:4C:12:F5:CA:F3:12:74
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D298ACE7C20954DB9E05418
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/27c96c9b-787d-3d46-a672-ba275b1e9911.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        184.151.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:29:8a:ce:7c:20:95:4d:b9:e0:54:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=d1198fdc-f128-40d5-9391-84b85d3e9831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:78:63:5f:44:f0:11:c2:a0:1e:db:eb:4f:8a:
                    0a:fe:99:bc:06:cf:7a:6a:f3:b8:42:dd:56:37:81:
                    6d:50:5e:2a:ee:04:5e:f6:e8:29:26:d2:b4:1e:d5:
                    f1:eb:6d:2a:94:74:6c:ce:a1:50:ae:af:a0:b6:bd:
                    ee:90:37:e9:bb:1c:6a:fc:df:72:e6:f0:0c:c0:e5:
                    f4:fc:37:1d:9a:9e:05:20:30:2c:3c:64:69:c0:63:
                    46:3e:b9:65:22:00:2d:f4:4f:e7:79:1f:33:26:19:
                    8d:93:81:80:8a:25:ce:0f:07:2e:fa:b9:3e:fc:af:
                    af:50:71:ca:90:6e:ca:22:d5:8d:b6:10:e8:61:6d:
                    3e:6c:08:31:6d:b5:81:b5:9c:5d:5a:36:4e:08:0d:
                    dd:17:db:59:c2:f5:ea:d5:3b:b0:66:c9:8a:e9:67:
                    4e:4d:8b:25:02:28:c3:a6:8b:5d:53:6e:a0:16:88:
                    e7:22:64:f8:a7:62:2e:1e:1d:f5:44:40:b8:88:18:
                    fa:c8:44:24:22:45:75:36:ee:db:31:ce:7a:e1:89:
                    33:9f:2a:87:56:8d:63:b5:ae:6f:da:9b:b9:81:8c:
                    8f:09:69:32:72:f5:a3:4a:55:1b:be:2d:f6:ba:69:
                    5b:33:5a:8a:d4:ba:99:2e:c6:b2:7d:b6:24:b9:f4:
                    71:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:20:73:1D:CC:70:7C:FF:44:01:F8:D5:75:4C:12:F5:CA:F3:12:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/27c96c9b-787d-3d46-a672-ba275b1e9911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:46:67:6b:15:ea:b7:1d:4b:e2:d3:78:21:3a:c6:82:ce:a4:
         bb:b8:62:38:f0:12:98:f0:53:2a:8c:5e:48:1e:98:6a:c0:06:
         9f:98:80:d1:c1:6b:46:4c:2c:33:f2:e5:66:15:5e:4f:ac:7e:
         cd:99:38:ed:bb:fa:ac:39:ce:8d:d4:9d:1b:b3:80:18:89:bb:
         89:9b:12:14:0b:eb:10:45:d3:e2:c6:fc:00:e2:c2:cf:2e:15:
         b8:8e:10:ef:a4:02:19:87:38:de:86:f9:3a:2c:3a:f0:af:4b:
         90:3f:40:e3:6c:73:3c:0d:60:ff:7a:52:50:ab:e3:18:de:02:
         3f:fe:a1:0c:12:32:88:9b:74:3d:a4:bc:0d:81:ff:b1:71:4a:
         97:44:c0:25:52:68:3b:57:14:33:35:ce:9b:3b:b1:ed:6a:ed:
         f8:59:62:1e:0c:8a:90:c3:8d:4c:14:64:2f:a0:de:65:46:f8:
         5f:71:4c:f8:bd:b9:4d:c8:49:8e:1b:a9:13:18:8c:11:17:c0:
         de:a1:2d:0b:9f:21:f0:83:d7:3f:6e:65:95:23:37:34:11:0e:
         a8:a5:e0:d7:07:b5:01:5f:c3:7f:31:f8:9a:05:5f:9d:1a:09:
         2f:07:75:55:c5:4a:b7:0b:9e:35:b5:2d:3c:55:7a:b1:d4:b6:
         cd:38:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:07 2025 by rpki-client