Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95245983-7b7f-3b56-b89f-0d87a9605245.roa
File:                     95245983-7b7f-3b56-b89f-0d87a9605245.roa (raw, json)
Hash identifier:          3e+/XxCJdAHvknjDwYG/W02Gt3hq8P2yNPxDQ+FBQ7w=
Subject key identifier:   A1:5B:95:11:05:34:E9:E0:F4:6B:61:C5:9C:A6:75:B3:70:51:7E:91
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848D9A377B9C681F353BAB69300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95245983-7b7f-3b56-b89f-0d87a9605245.roa
Signing time:             Tue 11 Feb 2025 19:06:40 +0000
ROA not before:           Tue 11 Feb 2025 19:06:40 +0000
ROA not after:            Mon 12 May 2025 18:06:40 +0000
asID:                     401152
IP address blocks:        96.126.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d9:a3:77:b9:c6:81:f3:53:ba:b6:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 11 19:06:40 2025 GMT
            Not After : May 12 18:06:40 2025 GMT
        Subject: CN=efaea800-7cd1-4c47-8ffc-250a7c424c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:91:07:a7:0f:3f:27:b1:46:4a:b5:10:e8:
                    2c:fd:1e:80:43:37:85:48:a7:8c:3e:ea:d6:73:ac:
                    3c:7b:36:b7:a7:61:c1:0c:2f:f3:97:9e:6b:59:d4:
                    58:cf:08:60:1e:d7:9b:f7:12:8c:77:ee:c2:9f:f6:
                    ab:86:2c:0b:68:95:87:67:6b:ae:d2:b1:75:17:17:
                    9c:23:14:4c:0c:0f:22:71:e5:14:f8:2f:40:f9:61:
                    08:ad:dc:94:9b:eb:96:91:72:7e:e3:b0:62:70:65:
                    cf:42:92:8e:2a:d1:c6:d0:3c:9e:34:ee:98:dd:cb:
                    18:ae:0e:f1:f3:80:4e:e3:02:d1:6c:02:cd:72:42:
                    ef:fd:7b:fe:28:5b:16:b0:07:f9:b9:aa:ef:b3:bf:
                    cc:b7:78:fe:dc:42:9f:23:17:43:1f:e8:46:34:67:
                    c0:00:c1:5e:2c:0e:1a:04:db:96:c2:9b:ca:ed:83:
                    21:49:45:77:31:31:32:48:71:90:e9:c6:3d:1c:36:
                    66:00:ad:88:5e:3b:7d:85:43:0b:b7:1b:08:7f:88:
                    7d:14:2b:6c:c8:05:0e:16:d8:ff:5f:b2:f7:64:46:
                    c7:83:86:d9:89:b1:f4:6a:3a:3e:53:a7:c9:30:1d:
                    10:92:b7:33:ad:39:ed:9b:8f:e5:e1:b0:18:45:80:
                    bd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5B:95:11:05:34:E9:E0:F4:6B:61:C5:9C:A6:75:B3:70:51:7E:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95245983-7b7f-3b56-b89f-0d87a9605245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:2f:6f:3e:8f:d2:f0:6b:b2:49:35:0e:f8:8c:54:41:7e:35:
         e4:49:ad:54:2c:47:f7:bf:03:17:84:bf:db:cb:91:66:2b:ba:
         0c:1d:f5:75:2a:50:48:48:7e:7c:2f:75:92:5d:48:3e:42:5f:
         c7:88:72:b1:5c:1f:1f:d6:94:0e:56:7e:7b:78:41:ca:01:b5:
         52:b8:b4:4a:dd:a4:9a:81:c1:73:26:bb:10:5e:61:69:94:3b:
         c6:c0:ab:25:ed:15:55:10:bb:10:67:68:bc:04:5e:be:60:65:
         1c:a1:fb:e6:9a:9e:29:8c:f0:b9:ef:8f:08:3f:e8:96:45:fe:
         28:2c:ac:22:ca:62:c1:73:0a:6d:97:cb:9d:f7:55:84:ad:05:
         7f:b0:59:f0:b4:0b:0e:9f:0c:2c:0a:f6:8a:03:92:9b:e2:96:
         07:c2:9e:81:69:48:74:87:5e:71:6a:54:49:a7:31:2e:dd:11:
         d2:c8:84:f5:60:2d:5a:77:ec:4d:82:36:4e:67:ba:87:31:2c:
         ea:b2:26:5a:d2:3f:77:2c:e6:53:b6:39:00:8d:ba:8c:e7:14:
         49:7d:fd:98:69:1a:5e:67:43:ba:a4:53:de:4d:aa:e9:70:be:
         1d:28:be:26:82:51:92:90:71:d5:0f:cb:b4:1e:d9:51:9a:4e:
         18:0e:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:12:50 2025 by rpki-client