Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/6cfc4b7f-42d4-362c-98f2-32caa153320a.roa
File:                     6cfc4b7f-42d4-362c-98f2-32caa153320a.roa (raw, json)
Hash identifier:          oI68T5qzrovl7VQ6ZaPYHfvSGlNlXSByvRmbXuApnY0=
Subject key identifier:   48:24:78:F5:E1:C6:AC:39:FD:88:CA:B2:AB:7B:56:2A:AE:F1:7F:C5
Certificate issuer:       /CN=e97da778-a1f6-4dad-9d0a-d3a070010373
Certificate serial:       010D0C9F43285848E2D10D515D1BDEFBF2A74EB4
Authority key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/6cfc4b7f-42d4-362c-98f2-32caa153320a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     21538
IP address blocks:        192.131.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:0d:51:5d:1b:de:fb:f2:a7:4e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97da778-a1f6-4dad-9d0a-d3a070010373
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=1f5b13a5-722f-4c06-837b-790ab4f497c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0b:5e:8f:26:6c:e6:1e:5a:d5:19:91:8a:59:
                    bc:a9:1a:c9:f9:ba:c1:8d:2c:55:bf:fe:cc:37:15:
                    e4:da:32:f8:f6:c9:fd:72:07:8f:bd:f3:38:93:a1:
                    86:51:32:18:5a:00:a3:ca:ba:f2:a2:76:bb:05:37:
                    33:70:11:1a:81:e3:42:19:a8:36:de:90:39:75:a4:
                    cc:bb:24:5f:a5:45:ae:fc:f9:08:a6:38:be:21:0f:
                    3d:d3:60:99:75:99:3c:19:cf:5d:90:05:de:86:bd:
                    92:60:33:40:d8:96:c2:5b:e3:e2:d0:eb:3e:6d:34:
                    09:a6:83:53:09:74:b3:71:19:b3:d8:b2:92:b0:7b:
                    59:f6:65:d2:c3:3d:07:8d:d8:e7:22:9f:da:97:02:
                    c6:26:c7:f0:6c:3f:13:58:9e:07:cc:d1:04:a1:8a:
                    a7:2a:7e:96:23:1c:2d:90:73:3f:18:96:e2:9a:1c:
                    0c:d6:c5:e8:56:3c:28:42:f7:5d:0a:00:6d:e6:a2:
                    7c:70:df:a8:6f:a4:e2:dd:ff:b3:b8:a9:bf:c3:7e:
                    2a:19:0a:14:5d:df:10:da:0c:8f:8d:6e:f4:0e:3d:
                    7c:c3:06:8d:58:8e:a1:6a:d8:ec:8a:45:19:aa:80:
                    2d:c4:1b:7b:9a:f3:ef:f2:e3:d4:a0:ae:c8:dd:16:
                    07:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:24:78:F5:E1:C6:AC:39:FD:88:CA:B2:AB:7B:56:2A:AE:F1:7F:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/6cfc4b7f-42d4-362c-98f2-32caa153320a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl

            X509v3 Authority Key Identifier:
                keyid:32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:36:9f:ab:a7:d9:b9:77:92:14:fb:1c:4f:8a:c4:6a:59:d1:
         7c:d7:16:29:b1:4a:fc:c2:48:d6:7e:1c:dd:92:04:ee:1f:bd:
         7e:f3:06:11:77:7f:bd:a5:86:db:e9:c4:30:eb:19:65:85:c7:
         55:81:62:3e:28:cb:a2:3d:cb:0b:47:78:42:61:33:fd:04:90:
         2f:8f:ae:70:8a:d6:ba:6a:e8:e3:29:02:35:8b:f7:90:20:ae:
         4e:2d:03:de:67:71:4a:2f:d6:6d:14:88:dc:9f:90:82:d4:91:
         bc:95:d1:5f:10:e1:5a:6e:e3:f0:fd:ee:9c:d7:f8:bd:34:87:
         c4:32:53:13:d6:0f:1a:c2:97:84:87:7c:83:a5:4b:5c:25:65:
         fd:fd:db:ec:aa:4d:a7:f6:e8:c5:43:e4:dd:75:5a:ec:cd:8a:
         89:cb:dd:67:ff:eb:e9:83:de:ab:05:06:cf:c1:62:1c:d3:43:
         2c:71:fa:98:8b:eb:6d:79:f3:27:07:e7:c0:5d:63:0d:f4:fe:
         bb:59:46:3e:dc:a6:c7:80:41:e5:a2:89:d7:e2:90:05:e2:7f:
         87:bc:0d:26:d8:76:00:1a:d9:26:5a:14:8c:b0:72:11:14:0a:
         9d:08:3b:17:95:9a:c4:29:fd:b2:e3:2f:63:04:b2:a2:56:a1:
         81:16:97:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:27 2025 by rpki-client