Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2bdebf8d-4bb8-3fce-aa3d-a5427410a713.roa
File:                     2bdebf8d-4bb8-3fce-aa3d-a5427410a713.roa (raw, json)
Hash identifier:          neSMUtmNimyVfNah49o1DSV+UomzGJCOaYeu4+diSLM=
Subject key identifier:   0E:6D:58:AE:F4:8D:F6:10:95:FA:81:88:20:4B:AA:38:57:92:B7:09
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D29E2E18DE159687065FE04
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2bdebf8d-4bb8-3fce-aa3d-a5427410a713.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     2568
IP address blocks:        204.101.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:29:e2:e1:8d:e1:59:68:70:65:fe:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=443f18a6-6ab0-4dc6-a1b5-9c178db13222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1e:f1:ad:7e:a9:8d:d3:25:62:b3:14:54:03:
                    27:2f:0c:bb:73:2f:70:83:ff:80:b2:c6:13:3f:67:
                    c7:f9:9b:84:7a:9e:51:59:5c:36:f0:e6:19:5f:b8:
                    2b:c9:57:36:9b:6e:6e:3c:86:bf:d8:f8:3d:f9:3c:
                    4e:2b:32:1f:14:b3:72:bf:3b:ac:22:2a:77:a1:9e:
                    05:03:58:97:89:a9:7f:6b:25:3e:84:28:62:6b:82:
                    9f:bc:e5:3e:b8:40:d9:90:af:61:49:13:7b:4d:d9:
                    c6:10:ae:58:65:af:fa:90:9d:7c:b9:18:7c:4c:3f:
                    52:1f:d0:a7:2d:7e:9a:b0:dc:3d:6f:cb:45:29:d5:
                    9c:ee:c6:ea:c3:7d:fa:d1:a5:bc:d0:74:1c:95:95:
                    6a:b8:37:1b:2c:75:dc:c1:9f:d3:f6:c4:7c:4b:a7:
                    76:27:a9:8d:93:c4:8b:dd:f7:91:92:9e:a9:c1:0c:
                    39:b8:bc:ee:54:ad:07:0f:fc:dc:d1:2c:f5:d8:c9:
                    2a:8c:36:43:70:63:02:9c:a7:91:88:e0:75:7a:9d:
                    79:75:a1:b6:7b:9a:63:c9:b4:26:44:8c:d8:ec:b8:
                    4f:91:51:9e:07:fe:ed:75:71:1f:9b:5f:5e:15:22:
                    16:14:7d:25:ae:49:fd:df:e5:6d:1a:2e:a8:67:10:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6D:58:AE:F4:8D:F6:10:95:FA:81:88:20:4B:AA:38:57:92:B7:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2bdebf8d-4bb8-3fce-aa3d-a5427410a713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:4c:bd:7d:f4:1c:8a:13:e9:ca:d5:1f:14:31:d5:f2:74:43:
         6a:55:61:90:45:9b:b4:e1:a1:39:b8:41:97:8f:44:1f:d1:bf:
         bc:64:69:36:70:53:5d:c4:48:54:d7:97:82:c0:6b:92:9e:c1:
         f2:98:af:45:14:77:0d:5c:19:eb:3b:f7:63:21:a4:5e:fc:9d:
         00:50:64:d8:1c:8a:c1:39:50:01:cf:a9:72:73:a9:8b:9c:b2:
         89:7b:e0:71:62:d5:0b:8f:91:64:5e:9e:1d:31:18:55:d6:45:
         7d:71:55:ec:13:04:04:77:b7:19:44:0f:f7:26:71:97:21:81:
         80:b3:9e:60:6a:f8:f1:14:60:65:52:39:66:ea:ec:8b:93:40:
         3e:8b:2f:ce:9d:fd:61:03:55:2a:9a:a7:49:02:cc:9e:58:d5:
         5d:80:7b:98:18:c4:0d:c3:76:2a:e3:a3:33:b6:cb:b7:db:87:
         ed:41:fd:ed:0e:2a:e1:c1:3c:56:35:b8:ff:a9:37:6c:c0:57:
         5d:38:f7:6c:46:7c:b1:32:10:ac:3b:b1:08:92:8b:ff:74:65:
         bd:e7:e7:25:86:f6:76:49:66:15:15:1c:fd:69:09:c0:88:8e:
         f7:9c:f3:7e:46:02:2b:af:20:82:a4:8f:43:07:29:a7:b6:6b:
         ea:59:08:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:28 2025 by rpki-client