Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/a284dc5d-b0a6-306e-8411-ba55fc93ed6f.roa
File:                     a284dc5d-b0a6-306e-8411-ba55fc93ed6f.roa (raw, json)
Hash identifier:          67Co87wa1W1h3Mf+NDQ6L7duRSuFhvD4RAEWZRAoIBA=
Subject key identifier:   91:9C:19:97:7C:E7:C5:E9:A3:F9:D5:11:CD:55:B3:3F:71:78:91:A3
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584908817451DF173CDD99705480
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/a284dc5d-b0a6-306e-8411-ba55fc93ed6f.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     10753
IP address blocks:        63.161.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:74:51:df:17:3c:dd:99:70:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=c586478a-aff1-43ad-8d99-d79789a3055c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ef:eb:58:25:ac:e9:13:ca:f9:bb:58:b6:d8:
                    34:ee:16:ed:a6:1b:9f:e4:d0:cc:11:80:f4:a9:37:
                    1b:e5:d2:82:bb:73:6c:00:04:a4:00:83:8d:fe:8c:
                    93:7a:e4:46:38:a2:b9:ea:5a:5f:db:1d:0e:b2:03:
                    86:01:70:ef:50:3c:64:20:69:5d:dc:a9:43:7a:e1:
                    d7:58:6b:8b:02:df:bb:7c:50:2f:e5:09:d3:7d:3b:
                    68:3c:b3:22:40:0d:13:0b:8d:ec:f1:8a:7f:b4:52:
                    26:cc:1a:6c:08:eb:e3:ee:22:5e:56:61:cf:b2:03:
                    25:9e:12:89:05:4a:c8:be:31:69:5c:f3:71:20:56:
                    e6:3f:fe:5f:af:93:1a:68:3f:d8:62:60:f7:e1:6b:
                    6b:9a:5a:e2:0d:f3:c3:46:66:17:d8:65:ba:b9:f4:
                    f7:a5:6f:f1:0a:2f:6c:1f:93:80:0b:f2:a0:c3:86:
                    9c:0f:19:9a:fd:77:ad:93:6d:e1:5b:51:ee:b6:0b:
                    5a:0c:aa:cc:44:56:de:c1:a6:88:83:a8:11:f1:91:
                    e6:70:ea:31:25:a9:aa:67:0c:dd:10:16:38:91:de:
                    2a:9a:c7:d4:c4:c9:54:3b:d5:bc:bb:8a:09:9b:21:
                    61:04:86:6f:53:9a:74:1e:77:45:21:54:19:39:ed:
                    80:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9C:19:97:7C:E7:C5:E9:A3:F9:D5:11:CD:55:B3:3F:71:78:91:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/a284dc5d-b0a6-306e-8411-ba55fc93ed6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.161.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:0d:81:65:e6:92:5a:e1:30:63:a7:11:f3:a6:6a:9b:9f:8c:
         07:92:96:f2:1f:42:c4:a3:3d:69:ef:e7:84:7e:fa:4e:21:d2:
         d8:60:63:a3:f0:36:16:7a:46:d3:95:e2:a6:8d:c8:4c:46:71:
         31:e5:8f:6c:72:07:a8:d0:41:b1:6f:57:b7:1a:bf:82:4a:13:
         eb:5a:2f:f3:01:88:33:9c:b1:25:e0:ef:d4:cb:18:f4:66:2d:
         16:27:21:07:8a:76:26:54:7b:80:0a:89:ab:7b:5d:56:48:d6:
         ff:fa:2f:ce:94:67:ac:f6:91:2d:62:ab:eb:9d:77:f5:ec:e9:
         d6:f2:0e:d6:5c:0a:c2:f4:15:8a:97:26:8e:b7:ed:bc:66:a9:
         1a:87:69:d3:25:51:83:59:42:f6:4a:77:30:df:6f:bb:44:a3:
         15:62:ed:43:db:21:bd:c2:79:1f:01:2a:81:91:bb:8c:97:ea:
         46:85:84:dd:f9:af:c0:c6:f5:22:a8:37:62:a9:f6:87:6b:55:
         a1:0e:e5:aa:c7:53:12:1d:55:6f:2e:c0:3f:8e:c3:0e:b7:f7:
         78:98:d4:ec:5f:3b:e4:a1:f3:4c:08:ec:78:8e:a9:18:42:60:
         b6:64:14:28:67:ad:7c:24:22:36:2a:45:ef:32:a7:99:e4:d4:
         bc:28:9b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:19:31 2025 by rpki-client