Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a28fbf16-70b6-3f7a-85cd-a5a6c122d881.roa
File:                     a28fbf16-70b6-3f7a-85cd-a5a6c122d881.roa (raw, json)
Hash identifier:          a+sHL2Ruzrix1UmKqGyAj9nfIRXWrE1kCIzJKyHfw9E=
Subject key identifier:   B3:5F:7C:C8:7B:F7:DE:4A:44:6E:CA:76:56:82:62:4C:D1:B1:99:BA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848F00C49D0A4AA322B98EDF880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a28fbf16-70b6-3f7a-85cd-a5a6c122d881.roa
Signing time:             Wed 19 Feb 2025 19:45:39 +0000
ROA not before:           Wed 19 Feb 2025 19:45:39 +0000
ROA not after:            Tue 20 May 2025 18:45:39 +0000
asID:                     204957
IP address blocks:        142.111.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:0c:49:d0:a4:aa:32:2b:98:ed:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 19 19:45:39 2025 GMT
            Not After : May 20 18:45:39 2025 GMT
        Subject: CN=35dfd503-8953-49b5-a27f-df3ee6bcae43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:f6:e9:cc:7b:2f:a7:96:91:bd:10:b8:50:
                    a4:7d:31:a8:b2:af:38:70:9e:2b:7e:d6:2b:06:ff:
                    e1:88:a1:66:f0:f9:25:17:24:b6:74:e5:1d:8c:e3:
                    ec:ef:9b:d2:ef:de:21:31:88:7e:f6:8b:59:74:b5:
                    10:59:70:46:5d:78:83:b0:c7:d7:4e:12:8e:a9:64:
                    3e:4c:16:00:81:e9:ba:f2:dc:2a:b7:15:0d:70:9c:
                    2a:36:5a:58:0c:64:64:f5:76:be:10:b1:34:de:9a:
                    01:c1:8a:dc:58:ea:09:ed:4c:fa:1c:03:22:20:55:
                    dd:a1:af:11:88:63:bf:13:e0:c8:05:59:27:fa:dc:
                    3e:c1:55:68:6c:3d:60:71:14:b2:74:23:a9:8e:7a:
                    f8:3c:98:e7:e7:04:f0:b7:72:03:af:95:1d:01:77:
                    12:47:51:42:cd:30:1c:d1:f3:29:9d:24:b3:2a:59:
                    94:40:5e:a5:b4:6c:4a:25:15:aa:87:e6:6c:7a:3e:
                    5a:61:1a:2f:e2:f3:8b:61:e4:77:a0:a6:2e:d0:a4:
                    8a:2e:d2:70:16:7c:c6:8f:3b:32:35:19:59:99:dd:
                    f7:6d:33:44:7c:22:15:b1:3e:4a:31:81:99:46:7a:
                    82:0a:47:e1:ed:28:35:1e:90:6f:de:49:b4:78:99:
                    10:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5F:7C:C8:7B:F7:DE:4A:44:6E:CA:76:56:82:62:4C:D1:B1:99:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a28fbf16-70b6-3f7a-85cd-a5a6c122d881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:18:af:77:10:48:24:12:50:c3:b0:f6:a8:57:4a:17:41:2c:
         9e:d2:dd:d4:50:c1:12:b9:04:c6:8d:05:b6:49:66:03:93:10:
         15:d3:be:5a:80:6e:01:c4:1a:99:57:ff:c1:e8:f6:ba:fc:e5:
         52:e5:cf:60:6f:d0:20:4f:d4:a5:91:f8:86:e9:4f:76:ac:5c:
         84:1e:66:ba:f7:ce:8f:42:4e:1f:ac:83:f3:14:5f:f2:84:bd:
         f0:6a:39:28:64:80:9e:1d:92:b8:d7:1b:f3:20:42:76:1e:6b:
         dd:56:f2:1c:de:55:25:a9:e8:7a:28:75:48:48:aa:a9:86:47:
         fb:a1:9b:07:f3:8d:c3:5f:75:bc:bc:2c:73:b4:e4:24:f7:30:
         56:b2:db:c1:14:cc:61:c2:3d:31:35:38:74:9d:2c:60:f5:08:
         01:6a:75:58:6f:a4:da:42:17:cf:7f:88:a2:47:94:c2:01:a9:
         3b:25:8c:10:6b:55:6b:dc:e4:ba:d2:da:c6:1a:23:3e:2a:08:
         ad:48:56:f0:10:95:34:19:c2:c5:c0:37:49:df:c8:9b:a4:58:
         4e:69:d5:d2:59:76:1d:62:45:fb:af:12:0f:ec:62:c0:c5:38:
         ce:c6:a2:74:04:30:41:73:90:71:77:ac:c9:9a:3a:86:e8:7a:
         56:8e:7e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:55:09 2025 by rpki-client