Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b985b059-ea8a-3cf2-9b81-586ea2093363.roa
File:                     b985b059-ea8a-3cf2-9b81-586ea2093363.roa (raw, json)
Hash identifier:          2NNF4uZqTnNs32O8LKeNKTvLzMQpawQL2x+XdCc8SU0=
Subject key identifier:   42:00:95:A2:32:10:DC:4B:7B:8D:3E:CE:66:08:7E:45:96:18:BC:D8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848D9A37C74CB0F0E52419F5E00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b985b059-ea8a-3cf2-9b81-586ea2093363.roa
Signing time:             Tue 11 Feb 2025 19:06:42 +0000
ROA not before:           Tue 11 Feb 2025 19:06:42 +0000
ROA not after:            Mon 12 May 2025 18:06:42 +0000
asID:                     401152
IP address blocks:        205.186.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d9:a3:7c:74:cb:0f:0e:52:41:9f:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 11 19:06:42 2025 GMT
            Not After : May 12 18:06:42 2025 GMT
        Subject: CN=d461e013-76fa-4933-945c-186e0068f0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d5:6a:53:17:8b:e8:5a:37:08:fd:77:c5:58:
                    aa:ae:57:49:f3:a3:63:1e:46:a4:05:72:9d:bc:7d:
                    96:8d:31:72:46:44:50:2c:42:94:73:08:fa:cc:64:
                    6e:b9:f4:77:a5:76:c1:4d:b0:61:2b:e5:86:f2:8f:
                    84:1e:0c:af:eb:fe:6c:cb:6c:a8:90:80:03:6a:c6:
                    05:ca:b5:7d:87:c7:e4:4d:44:f4:58:cd:20:08:22:
                    d1:a1:f7:07:25:df:44:36:a2:8e:b7:7b:64:b7:7f:
                    65:f8:99:f2:b9:fa:c3:ec:cd:a2:08:c3:c0:5a:a1:
                    35:27:48:ef:ae:77:bf:05:11:62:e7:63:d6:02:a3:
                    86:4f:02:ce:7f:eb:f9:aa:c8:41:29:6c:93:17:e4:
                    8d:aa:99:41:40:81:14:f3:ed:83:13:b1:36:ef:15:
                    3d:1c:87:79:17:fc:90:c3:0b:c7:57:53:a6:8b:03:
                    da:fe:46:58:5c:eb:51:11:00:20:b2:a8:09:d3:39:
                    27:f8:ab:94:23:41:a5:de:4c:d4:bb:db:2b:f3:2c:
                    15:88:22:18:74:27:7c:5e:96:a5:bc:aa:46:93:de:
                    3f:c9:29:dc:71:94:d4:87:13:23:11:8a:bb:9e:1d:
                    59:a6:e9:b4:bb:84:ec:c0:9d:07:7c:0b:bf:5a:b7:
                    a9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:00:95:A2:32:10:DC:4B:7B:8D:3E:CE:66:08:7E:45:96:18:BC:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b985b059-ea8a-3cf2-9b81-586ea2093363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.186.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:6a:72:4f:28:40:fa:ec:80:4a:b7:80:5b:5b:e8:50:d7:2a:
         3e:66:a5:cc:e4:14:8e:77:a6:78:52:40:ad:a3:03:db:e9:75:
         7e:eb:d0:f5:c5:d1:01:ec:42:cd:98:af:68:e5:87:de:29:0a:
         a9:df:cf:94:c4:f1:67:4c:a4:09:d6:3a:24:a7:8b:11:63:ef:
         cc:86:42:4e:75:e8:82:bc:6a:00:5b:e3:10:f8:48:4c:8f:70:
         ce:2f:d2:68:0d:2e:90:d1:e9:2f:32:27:68:bf:6c:38:e5:00:
         93:55:2c:88:fe:9a:cc:62:1e:14:bf:66:5c:9b:82:59:6f:cf:
         c0:79:ae:0c:53:14:ff:14:41:72:64:da:e1:24:a4:38:d6:01:
         2f:2f:5e:0c:95:1a:ea:21:56:53:0b:57:86:43:51:93:31:3b:
         57:af:0d:3c:5e:c9:84:cc:6f:7b:f8:5a:21:99:9c:73:86:ff:
         99:4b:5b:af:87:20:84:cf:f8:c3:69:77:90:47:16:1d:80:87:
         95:04:e6:d0:7b:38:fc:be:1e:2c:dc:42:0b:e4:3d:e9:a8:d4:
         10:ae:d3:0d:ab:51:97:be:bd:96:a7:ea:d7:d7:c5:bd:77:7c:
         fa:61:1b:50:21:fd:e9:62:03:a6:a3:a6:21:14:55:8a:87:d7:
         cc:a6:d4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:47:08 2025 by rpki-client