Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/889cc827-bb4c-3ebb-8e71-2f18eeb4720a.roa
File:                     889cc827-bb4c-3ebb-8e71-2f18eeb4720a.roa (raw, json)
Hash identifier:          /9JJ4SwQtl3YQFdZsvZMLOTstQkvQOEqp4/VTgKJku0=
Subject key identifier:   14:D3:23:B5:61:C2:C3:C3:5D:08:3E:EF:2C:EC:6C:90:9A:54:BD:AE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2BB55D8E3E8B07EBA4D3C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/889cc827-bb4c-3ebb-8e71-2f18eeb4720a.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     855
IP address blocks:        2001:4c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:b5:5d:8e:3e:8b:07:eb:a4:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=e8641707-2698-4317-a142-7499ca123aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:62:98:d1:02:b0:74:93:e3:fe:f7:3e:fc:c1:
                    d7:cd:88:00:40:31:44:93:3b:29:0e:1f:d1:c9:e4:
                    db:26:bc:b9:c1:0c:fb:39:64:7b:9a:8e:e0:25:48:
                    cf:1c:5f:10:a0:0b:29:b3:45:bb:69:91:e6:79:62:
                    58:ff:f8:3f:f6:a4:58:17:93:ff:10:57:97:7f:76:
                    8b:11:bc:a8:2b:fb:aa:f9:bd:35:4d:c1:f9:05:f2:
                    a4:58:ff:67:81:23:99:1f:39:7a:e0:8f:11:fe:72:
                    05:5f:da:03:80:05:a2:b9:9a:cc:a4:7f:fb:02:40:
                    be:bb:62:cf:5d:2a:4a:28:cc:ce:c6:8f:39:f7:26:
                    6a:2c:74:e9:73:23:5e:d2:73:66:d1:46:ac:c4:9e:
                    d7:5f:14:19:92:e0:23:71:7d:92:af:66:32:69:7d:
                    47:2c:b3:f0:a3:4e:5c:7b:83:e9:eb:fb:a0:f0:b7:
                    7a:52:e4:d0:49:98:8e:db:1b:97:b9:7b:09:8c:ce:
                    e7:ac:47:30:21:0d:90:b5:14:10:e3:5e:c8:87:d9:
                    e5:e7:63:c7:62:d1:e5:44:f7:e0:81:84:75:20:0f:
                    d8:5b:6f:cc:5a:05:e1:04:71:52:55:cb:9d:8e:73:
                    2d:93:81:f3:0b:d0:8a:4c:fa:02:69:97:48:ed:4f:
                    25:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D3:23:B5:61:C2:C3:C3:5D:08:3E:EF:2C:EC:6C:90:9A:54:BD:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/889cc827-bb4c-3ebb-8e71-2f18eeb4720a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:7a:9a:ec:f7:8c:59:ba:d6:6f:ff:55:aa:e7:e9:59:fb:a9:
         de:63:22:6d:c0:0a:01:4e:aa:57:ac:0d:e5:87:4f:e7:da:24:
         f1:39:ed:d4:29:0d:bc:f3:97:2a:fe:f4:3f:96:9d:cd:ed:c2:
         57:6f:49:14:53:cb:4c:46:ef:d8:a3:07:61:99:31:54:8e:40:
         5b:c1:fc:02:00:6b:ba:7d:50:c6:1d:f5:ff:81:d7:14:cd:94:
         de:eb:74:cb:06:fa:7d:de:a0:41:aa:05:d6:a4:87:a4:c8:8a:
         7a:c7:c4:ca:ac:c2:c2:f3:14:7e:5c:4d:79:a0:d3:c0:3d:1e:
         86:3c:51:39:75:ab:58:c2:64:34:71:a7:0c:f6:5b:5e:3f:8b:
         4c:bd:0d:e9:70:50:c5:b8:07:b8:3a:1f:61:5b:d5:70:71:b1:
         c2:7f:60:9c:ef:87:16:c6:56:7a:89:2f:cb:c1:ac:e5:b4:8f:
         32:87:59:20:94:4b:a1:f0:9d:4f:98:4f:04:1e:fa:da:32:09:
         0e:de:fe:4a:95:b0:36:e2:cf:23:84:39:16:54:19:c4:e2:59:
         79:50:8f:0c:3a:ef:93:b2:be:aa:7a:44:c8:df:48:3b:5c:4b:
         fa:4c:c1:38:04:07:f9:ea:38:aa:71:3e:e4:9a:f9:6f:a2:cf:
         1f:c9:0f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:41:28 2025 by rpki-client