Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/81854c96-0146-35f5-8ade-af6f90586b91.roa
File:                     81854c96-0146-35f5-8ade-af6f90586b91.roa (raw, json)
Hash identifier:          Jv2CBC8BM6ASXaNYLnx1RAF9ohxIyHMK6CxVYcxlPZQ=
Subject key identifier:   23:7C:8E:FB:F8:E6:FA:91:3F:D1:C7:4D:A5:14:EA:E3:72:D0:C6:17
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584910068D0D6D39193CA3FC97D0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/81854c96-0146-35f5-8ade-af6f90586b91.roa
Signing time:             Mon 03 Mar 2025 06:39:57 +0000
ROA not before:           Mon 03 Mar 2025 06:39:57 +0000
ROA not after:            Sun 01 Jun 2025 05:39:57 +0000
asID:                     329007
IP address blocks:        172.94.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:06:8d:0d:6d:39:19:3c:a3:fc:97:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar  3 06:39:57 2025 GMT
            Not After : Jun  1 05:39:57 2025 GMT
        Subject: CN=bd4f227b-e3c7-4a49-a9ca-d482bf32d6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d4:4a:40:c4:98:94:66:2f:7e:8c:55:dc:48:
                    9e:26:21:50:73:5c:b5:b1:e7:99:6b:81:d0:77:88:
                    d1:8f:f7:5a:fa:ba:ea:b3:65:a1:7e:e6:0c:38:a9:
                    23:4d:5b:cf:c7:77:97:3a:51:dd:46:60:93:01:25:
                    6b:39:72:d8:d1:a9:e0:a3:7c:bb:d3:a6:ea:2b:0a:
                    78:f1:94:53:ca:f9:8b:6f:79:ed:ab:3a:9a:00:da:
                    04:1d:05:d5:41:b5:ce:c5:90:16:41:68:f1:c9:71:
                    f2:e7:75:ea:11:3f:83:1f:ca:6d:31:4c:94:83:30:
                    0f:63:da:0d:b3:aa:c5:69:d8:24:d4:86:28:53:e6:
                    69:aa:ed:e4:7f:c9:04:6b:34:36:48:98:92:c4:cb:
                    b1:6a:58:99:88:d7:3f:b9:c4:6a:71:e4:05:a0:e7:
                    00:ec:d3:08:16:b2:5e:e2:9f:84:1f:73:66:eb:bd:
                    76:ef:4a:7e:23:60:05:e3:2a:ab:f6:77:4f:6a:11:
                    ce:12:d8:c1:8f:af:91:77:09:6a:01:15:29:97:34:
                    cc:20:fd:03:b0:69:03:73:70:cf:ae:13:b2:81:a4:
                    ed:e4:a1:98:dc:8c:17:9e:8b:a8:42:b3:f3:c9:b1:
                    1c:0a:df:1b:bf:48:fd:95:2f:76:52:30:6f:49:e1:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7C:8E:FB:F8:E6:FA:91:3F:D1:C7:4D:A5:14:EA:E3:72:D0:C6:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/81854c96-0146-35f5-8ade-af6f90586b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:6b:10:59:39:92:ca:3c:95:e0:3a:0a:74:94:6a:4f:de:9b:
         da:0e:30:b8:d0:b2:e4:04:2e:45:d7:12:ba:ac:22:d6:4c:83:
         9a:ba:b7:20:3a:60:21:ea:0d:3a:e3:fd:82:1a:35:d4:73:c4:
         b9:14:f5:79:7c:59:fb:9d:83:54:d7:2e:37:21:00:f4:95:46:
         af:a7:c7:55:00:a9:a8:09:b0:03:47:f4:2b:ea:16:4e:57:e9:
         35:2c:0e:d2:db:f3:f5:cf:41:70:ff:2d:e3:d6:d3:5c:2a:1b:
         4b:e5:36:ea:6e:7c:9e:17:37:79:ef:25:8f:e7:36:a2:2c:a2:
         b5:a1:d0:96:7b:1c:a8:60:5d:19:65:e5:7e:4e:1e:48:02:0a:
         08:8b:b9:31:90:3a:d6:24:8c:42:95:2b:c8:61:c2:f1:fd:39:
         e7:90:a6:d2:2a:94:93:33:71:9a:34:1f:77:11:ba:58:06:3d:
         f8:c2:df:ba:29:43:67:1a:44:cd:11:7e:72:45:7c:8c:cc:74:
         db:52:19:34:53:58:55:7d:d7:35:c0:75:2d:52:55:c9:a4:7c:
         1b:0b:fd:57:ae:c7:18:57:00:be:88:14:b8:34:89:89:37:3f:
         3d:b5:dc:5d:7f:93:ae:72:a4:b0:05:99:22:0b:c6:a5:20:8e:
         de:dd:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:46 2025 by rpki-client