Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b8017ef1-8235-3c7d-97e2-acd300e7600f.roa
File:                     b8017ef1-8235-3c7d-97e2-acd300e7600f.roa (raw, json)
Hash identifier:          bLAX97nCZ+G/4Iw1gZC5HxYDY633bC2vh5rz7cDc8ck=
Subject key identifier:   BA:04:88:3B:8F:CB:3A:D1:AD:D6:C7:37:7F:1C:2B:98:18:6B:03:0A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848FDF7046E67BDD8C06A15A780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b8017ef1-8235-3c7d-97e2-acd300e7600f.roa
Signing time:             Mon 24 Feb 2025 19:24:07 +0000
ROA not before:           Mon 24 Feb 2025 19:24:07 +0000
ROA not after:            Sun 25 May 2025 18:24:07 +0000
asID:                     401152
IP address blocks:        96.126.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:f7:04:6e:67:bd:d8:c0:6a:15:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 24 19:24:07 2025 GMT
            Not After : May 25 18:24:07 2025 GMT
        Subject: CN=bf78e7e3-ffba-40c7-8e56-798af70884d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:63:e3:7f:da:cc:cf:8c:a0:eb:ee:7f:5e:
                    ba:c6:83:7f:1d:75:d1:5e:33:d4:38:2a:6b:e2:58:
                    90:00:3e:62:6c:4e:1c:cd:99:94:ac:53:9a:b8:64:
                    64:51:33:46:a8:41:bb:3e:18:76:b9:9c:ff:79:1f:
                    ae:26:93:9a:16:c7:4f:cc:80:30:cb:69:12:8b:13:
                    c2:b1:5a:7f:f0:5e:00:ae:25:fc:09:e3:54:0c:81:
                    78:93:2e:70:e3:dd:29:4c:00:74:b3:ba:d3:cb:61:
                    09:82:91:77:64:c8:2a:89:22:ab:68:f8:b2:39:3f:
                    e6:2c:80:ab:df:52:58:c8:67:6e:07:38:31:df:fb:
                    35:4c:c9:7e:dc:2b:e3:cd:3a:7b:7c:62:3e:b0:45:
                    12:b2:bb:ba:2c:bb:e1:5d:0a:cb:de:33:cb:b5:b2:
                    6b:11:57:0f:77:6b:74:33:64:d9:04:5f:a9:c0:2c:
                    88:4e:a8:94:a2:cd:cb:6f:ae:06:c5:9d:73:74:df:
                    4b:90:40:93:75:8a:39:05:57:54:a3:6f:b0:ee:b4:
                    35:0c:99:67:49:59:42:34:fd:9c:26:d8:c2:17:83:
                    a7:8e:c3:d7:6f:a3:40:9b:77:c0:36:6b:8a:74:d5:
                    3a:85:b1:09:ba:17:8e:5f:50:69:ed:60:45:82:93:
                    d9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:04:88:3B:8F:CB:3A:D1:AD:D6:C7:37:7F:1C:2B:98:18:6B:03:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b8017ef1-8235-3c7d-97e2-acd300e7600f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:78:51:37:9b:f7:08:24:93:bc:7a:61:e7:38:5a:7e:b7:00:
         4b:d7:64:66:99:29:e8:cb:3a:fd:a9:bf:9a:be:46:e3:2a:92:
         1d:63:9a:df:58:5d:c4:c5:66:66:77:0e:b8:fb:98:29:9e:b1:
         d3:bc:29:c8:77:ad:1d:0d:4b:fd:dd:e0:57:13:69:1e:bc:96:
         1f:d0:d2:0b:dc:e0:7d:e6:79:06:fd:16:c6:87:ff:4a:eb:62:
         68:03:9b:3f:94:74:90:9d:69:6c:c4:1e:03:df:6d:35:14:0e:
         4e:1a:71:c3:f3:59:8b:f0:99:f1:53:a0:7b:e6:b3:b5:f6:ab:
         1d:af:65:68:77:06:8f:75:15:31:0d:c2:74:5a:1b:e6:52:bc:
         d5:2f:20:2a:ae:81:2b:44:c7:0b:67:a0:c6:45:97:f0:39:18:
         ca:c0:f3:61:5e:82:38:ea:ee:6b:a3:8c:cd:b5:95:cf:e8:ad:
         20:28:fb:e5:27:e2:fb:5b:46:b5:9d:2e:f1:0e:ff:1d:a6:57:
         d1:05:25:45:ab:ad:80:ce:f6:13:79:af:22:19:8a:df:5f:b7:
         ee:e0:36:e5:39:b7:ed:a9:7b:89:40:e8:34:9a:a8:48:0c:d2:
         51:88:07:e5:10:d6:ef:3d:43:2c:25:5b:f1:bb:71:69:3b:72:
         d4:eb:b7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:36:51 2025 by rpki-client