Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/271b73a2-5654-30f3-90e4-b8df177121ff.roa
File:                     271b73a2-5654-30f3-90e4-b8df177121ff.roa (raw, json)
Hash identifier:          cKNaTC+QldUKAPY/HqEEH/IAKlOyOBKUbhPQK9KytnQ=
Subject key identifier:   BC:D6:E8:F1:B8:9E:04:BD:C1:1F:E7:F4:51:3F:BA:70:37:1D:2E:CB
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848FD0C5A3274FCC29C2F8F0700
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/271b73a2-5654-30f3-90e4-b8df177121ff.roa
Signing time:             Mon 24 Feb 2025 11:31:17 +0000
ROA not before:           Mon 24 Feb 2025 11:31:17 +0000
ROA not after:            Sun 25 May 2025 10:31:17 +0000
asID:                     329007
IP address blocks:        172.111.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:0c:5a:32:74:fc:c2:9c:2f:8f:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 24 11:31:17 2025 GMT
            Not After : May 25 10:31:17 2025 GMT
        Subject: CN=83d745d2-4857-465c-b941-fabaa82a7183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5b:bf:4e:be:8b:73:1c:0d:95:46:ac:b7:df:
                    09:e1:34:bb:dc:7e:3d:70:0d:a5:64:39:d0:aa:eb:
                    48:14:0f:43:8d:39:b2:81:cd:48:d6:e0:16:56:cf:
                    42:dc:41:9c:49:a7:0d:53:36:c3:4c:77:26:94:52:
                    86:8d:d3:d3:a8:a7:5f:c0:35:62:8c:25:47:11:85:
                    7e:4b:d2:9e:6e:3e:49:69:7d:65:5b:cf:39:80:66:
                    0e:7a:9d:34:24:8b:67:87:ad:4b:47:f7:07:e7:74:
                    71:f0:fa:11:b3:81:55:4d:f6:e7:d9:6b:a0:6d:12:
                    51:17:76:29:7d:59:8c:13:b5:73:eb:c0:9a:06:b2:
                    fc:5c:09:3b:30:b4:79:50:57:e1:44:15:98:d3:ec:
                    9c:71:f7:6a:97:4c:bb:64:57:c2:a7:64:56:2a:76:
                    40:2d:51:dd:29:9e:1a:5a:26:dc:44:26:f7:6b:f5:
                    8b:8a:88:21:2f:46:63:a2:20:67:84:4d:fb:e5:e5:
                    6d:de:6e:c1:49:7f:fd:ce:81:ca:01:01:e6:34:83:
                    d5:96:08:33:4f:0f:b2:f5:d3:03:87:11:ab:c8:b6:
                    6d:2f:a2:b6:f5:e0:d6:a2:2f:f8:34:41:f6:71:92:
                    ab:fd:c1:8d:e7:ae:eb:c1:c1:c9:f1:51:4d:ac:a7:
                    5f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D6:E8:F1:B8:9E:04:BD:C1:1F:E7:F4:51:3F:BA:70:37:1D:2E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/271b73a2-5654-30f3-90e4-b8df177121ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:32:55:53:94:f2:82:51:38:80:4b:96:00:97:f9:13:cf:25:
         67:d6:fc:00:45:dc:3f:25:e8:ba:ab:96:1a:cf:6d:0a:ff:bd:
         24:50:e0:6e:8a:9c:08:a5:e8:75:96:2e:2a:d6:b9:82:40:1b:
         24:7a:d6:03:cb:b9:f4:53:dc:d0:23:e1:a1:d4:f8:23:a4:6b:
         d9:41:72:c7:df:27:02:4b:0a:68:c6:c0:25:3f:52:dc:8b:9a:
         8b:5f:99:0a:6f:a5:99:04:91:48:82:c7:c8:8e:8b:77:2c:c2:
         b6:d7:bb:0b:c3:f4:bc:29:a7:54:ad:41:b6:0f:38:ca:f6:d5:
         b6:bd:5b:76:b4:06:fe:f6:45:f7:9a:36:4d:74:80:d9:69:12:
         08:61:d7:ac:21:1c:5d:b1:ca:41:22:97:e0:8b:b0:9e:96:b2:
         8f:7a:d6:f2:1c:cb:a9:4b:a7:eb:f3:5b:d3:27:da:ac:5e:6f:
         ea:f4:61:2c:fd:83:6a:ef:33:e0:4f:ae:6f:ae:09:8b:21:14:
         2e:3f:55:d1:92:86:d2:64:1e:ab:d9:54:7e:42:c9:58:7b:78:
         96:b3:07:98:76:2e:1a:de:ce:6c:37:39:94:35:4c:31:15:09:
         b7:71:2e:89:d2:54:7c:7f:67:8c:9b:a0:16:88:42:72:78:a8:
         48:81:00:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:50 2025 by rpki-client