Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5fb9c6b5-07b7-3c20-bc83-056a4b39f829.roa
File:                     5fb9c6b5-07b7-3c20-bc83-056a4b39f829.roa (raw, json)
Hash identifier:          bJbgRsx6BXb6SvGVpBU+yC9E7P/hNuA3AH4x5UWNA+8=
Subject key identifier:   54:4B:E5:3E:05:CA:55:8F:2F:46:89:09:D6:50:75:F2:1D:AE:00:26
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848E8EF10A92BE62757706EB340
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5fb9c6b5-07b7-3c20-bc83-056a4b39f829.roa
Signing time:             Mon 17 Feb 2025 06:36:07 +0000
ROA not before:           Mon 17 Feb 2025 06:36:07 +0000
ROA not after:            Sun 18 May 2025 05:36:07 +0000
asID:                     213676
IP address blocks:        172.94.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:ef:10:a9:2b:e6:27:57:70:6e:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 17 06:36:07 2025 GMT
            Not After : May 18 05:36:07 2025 GMT
        Subject: CN=6543d528-1a7b-418a-9ce6-2556cc67949d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:40:82:a9:4c:ae:05:dc:30:30:57:63:eb:01:
                    fc:ca:6c:2a:ee:c7:d5:56:37:32:10:7a:ae:fd:af:
                    a3:13:f4:4b:a3:ce:e3:17:7a:79:f5:93:f6:4a:e4:
                    55:04:dc:3a:00:0d:24:c8:91:cc:4a:0f:6d:77:75:
                    48:79:63:f8:6b:7b:38:1a:cf:17:da:ad:76:b7:29:
                    b0:da:c5:b7:de:62:67:7f:68:3a:b4:17:11:6e:12:
                    34:2a:df:7f:53:53:58:fe:0e:be:16:22:ef:cb:60:
                    6f:a7:4c:ae:8d:dc:92:11:56:c4:77:b9:14:39:08:
                    af:59:4c:c0:69:41:11:f9:fc:5a:50:bb:34:8e:08:
                    df:52:4b:3c:a1:9a:91:91:79:0c:c7:52:f6:09:26:
                    42:7b:ee:54:de:b9:cf:c7:f7:53:18:7e:b7:26:5b:
                    7a:59:8e:6b:6f:79:9f:3a:38:58:0b:dd:69:15:fd:
                    f2:07:29:53:86:bc:9f:2d:58:57:fa:39:cd:47:8a:
                    65:16:8f:04:ad:f0:c4:84:db:ae:82:c7:2c:a2:3e:
                    b5:f9:4c:d1:37:10:e8:c7:96:8e:77:98:ab:68:01:
                    9d:85:9c:e3:7d:16:13:d1:41:b5:94:47:29:32:38:
                    69:34:27:90:a1:00:df:4d:62:34:f7:78:4a:f9:0e:
                    28:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4B:E5:3E:05:CA:55:8F:2F:46:89:09:D6:50:75:F2:1D:AE:00:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5fb9c6b5-07b7-3c20-bc83-056a4b39f829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:70:65:31:98:9a:07:fe:f9:d2:14:2d:96:9f:f7:6d:df:87:
         04:86:9c:4e:0e:ea:94:a5:e9:2d:cf:00:37:5e:30:3f:02:68:
         07:5d:32:83:68:b6:87:a4:9e:86:a4:7b:6a:64:0e:6f:24:6b:
         75:ca:35:f7:41:5f:9b:e8:ba:1c:3d:5f:2e:b8:0c:0d:be:44:
         56:e2:86:3c:d7:ec:dd:9a:08:47:fd:74:42:f2:54:3c:0d:bf:
         c0:a8:ff:67:7d:30:37:91:f1:d6:d7:c6:b9:f8:85:de:c5:34:
         bd:72:92:23:87:ca:89:c8:81:8e:c4:ab:35:24:0b:20:cf:c2:
         ce:02:eb:1d:03:ae:35:9a:5c:3a:3e:c5:23:31:52:1b:85:9c:
         92:2d:e1:16:ff:c5:c2:49:a8:06:74:ba:de:3e:09:88:4e:25:
         9b:04:e7:74:df:cd:df:ac:34:0a:cf:0b:19:b3:8e:20:03:ae:
         d2:ff:c4:15:f5:69:e3:b4:3b:92:ad:64:ee:1d:35:6a:a8:0b:
         6c:5c:3f:ad:ae:02:c2:32:97:9e:3f:e5:85:6d:4e:c3:d1:12:
         ac:f6:50:85:cd:4f:27:7f:c5:0d:23:9e:2c:32:38:7e:5b:40:
         ab:c4:63:c8:d9:96:3b:be:ab:27:6d:10:d0:53:ec:db:d4:08:
         f9:3c:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:25:45 2025 by rpki-client