Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/a7cb085c-6dbf-3737-a0ed-3bdf67160a17.roa
File:                     a7cb085c-6dbf-3737-a0ed-3bdf67160a17.roa (raw, json)
Hash identifier:          BR+BgsNXSOXXoO3yiulSEJkmm1B6ZE0f+JsHxjG5yQQ=
Subject key identifier:   E5:15:14:C4:71:43:99:8A:7D:EA:D6:45:05:24:29:A0:5F:2C:66:E7
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F432858487FB5E05B7D593495E0909C80
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/a7cb085c-6dbf-3737-a0ed-3bdf67160a17.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     62571
IP address blocks:        192.230.75.0/24 maxlen: 24
                          192.230.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:e0:5b:7d:59:34:95:e0:90:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=1d68bc97-0014-4ecc-a473-9e1a45bfd66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:93:d9:65:f6:a0:58:0c:01:ea:a1:2f:99:
                    3f:3c:27:48:d7:0a:67:6f:7a:61:7b:44:02:82:ce:
                    01:7e:39:42:69:74:b6:63:4d:ec:fb:cc:9c:3b:35:
                    26:1f:15:59:b9:13:28:9a:5e:03:6b:ed:70:d8:43:
                    64:db:e4:a7:da:17:13:45:be:f4:11:0f:39:96:27:
                    5a:34:a3:a5:6b:88:92:5f:59:a8:ba:6e:d1:24:f3:
                    ad:fb:74:f5:d7:03:ce:eb:5d:f0:01:b3:90:b5:82:
                    27:a7:2e:6e:34:45:4f:ea:ef:de:09:87:b9:3e:ae:
                    02:55:b2:e5:46:32:83:7c:8b:51:54:d9:8c:ae:fe:
                    00:e0:f9:eb:ba:de:ef:9b:e3:85:ba:9b:17:8e:d7:
                    a8:77:6c:b6:9e:4c:fc:d7:8e:ec:a3:0d:a9:7e:66:
                    e7:20:e9:6a:ab:f5:db:fc:b6:e4:a5:f0:47:57:f2:
                    dc:e6:70:76:dc:4a:78:6a:63:3c:bf:0a:73:dc:08:
                    dc:2d:d1:72:85:c9:66:c2:7d:66:7f:31:ba:23:a4:
                    07:0d:2d:0f:36:4b:27:64:cb:64:ea:79:d9:41:64:
                    ca:e1:6a:5f:bd:de:83:4c:5b:20:4d:d1:e1:b7:27:
                    49:24:58:9b:ed:d0:30:e2:f0:c1:bb:0a:35:26:fb:
                    9b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:15:14:C4:71:43:99:8A:7D:EA:D6:45:05:24:29:A0:5F:2C:66:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/a7cb085c-6dbf-3737-a0ed-3bdf67160a17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.75.0-192.230.76.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c3:a2:62:b5:a3:0f:e4:f0:81:73:3c:24:1b:5b:7a:8f:72:
         e6:a5:d0:ca:fe:32:13:5e:13:72:a6:4b:fb:10:ae:1e:66:02:
         15:39:61:dd:23:26:6e:fc:9b:00:08:de:ae:33:60:8f:db:b8:
         95:08:11:9a:d9:7a:e6:a6:ac:e0:1b:25:41:8d:36:6d:32:68:
         ce:94:5c:e1:22:8d:12:a4:3f:c1:56:49:66:94:ef:31:4e:d8:
         69:d9:d4:34:c3:d3:51:4e:65:48:76:f0:59:c6:ea:7e:2d:03:
         ad:1c:0a:44:a1:a5:52:16:6f:c9:4f:c4:83:ee:b0:19:c0:ac:
         73:2a:fa:20:ed:d2:9c:97:3d:8b:09:3b:76:9b:d4:7e:7c:0c:
         e3:5d:e1:6b:c3:5a:38:5c:4e:62:de:e9:03:3c:bb:bc:71:d1:
         6e:e8:51:4b:f3:22:39:b7:36:58:46:71:c2:18:72:42:a7:7d:
         d4:2a:20:aa:d6:56:a7:b7:8b:62:9f:9b:6d:b8:f2:86:65:75:
         df:85:e5:7f:aa:39:b3:c4:28:07:94:a4:67:63:87:36:cb:2e:
         1e:ae:d1:21:08:04:12:15:21:a1:15:01:3a:a0:3a:f9:32:7a:
         1b:1a:10:64:ed:98:e1:22:28:22:d9:8c:c0:86:ea:62:74:10:
         89:d2:25:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:27 2025 by rpki-client