Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c5d46f39-383b-37a4-9645-d0c89a15ea43.roa
File:                     c5d46f39-383b-37a4-9645-d0c89a15ea43.roa (raw, json)
Hash identifier:          9zYaXov8xYWnSfXvNm34eS69dPhwM4gR7vKZ9K/ir8c=
Subject key identifier:   93:22:EB:5E:D5:8B:2E:A0:A5:64:12:1D:44:44:89:D2:60:46:77:19
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858488F82C443EC77BF31920956A0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c5d46f39-383b-37a4-9645-d0c89a15ea43.roa
Signing time:             Thu 16 Jan 2025 05:50:58 +0000
ROA not before:           Thu 16 Jan 2025 05:50:58 +0000
ROA not after:            Wed 16 Apr 2025 04:50:58 +0000
asID:                     329007
IP address blocks:        172.94.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8f:82:c4:43:ec:77:bf:31:92:09:56:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jan 16 05:50:58 2025 GMT
            Not After : Apr 16 04:50:58 2025 GMT
        Subject: CN=e3fb65e0-d933-4f56-8937-a6f362126760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:77:06:b9:de:98:d2:07:50:71:45:a6:6a:c2:
                    99:69:f7:e2:6f:a2:2c:b9:d3:db:f8:60:88:66:de:
                    6a:19:43:77:b5:01:da:1d:e5:8c:cf:6c:21:ef:cb:
                    bd:ca:ed:5c:32:22:d4:f9:6e:99:55:0f:c0:8e:9a:
                    f7:e4:c9:0f:83:05:89:28:ec:2f:4d:3a:3f:d0:33:
                    56:f0:13:1d:b3:14:8c:ee:a3:b0:fb:2c:37:04:72:
                    22:1e:66:a1:ee:f1:bf:d3:24:3a:45:90:ea:65:37:
                    88:c0:12:f6:d4:43:ee:52:82:57:10:7b:0c:75:2e:
                    fc:93:48:87:69:44:4d:e2:ca:eb:d0:fc:ef:f7:e9:
                    44:53:01:8f:6c:15:cf:d5:b0:d1:d1:56:0a:68:72:
                    61:e4:a9:af:7b:a8:28:81:93:d1:9a:7e:4d:f7:5a:
                    84:97:f2:89:9e:80:38:6d:48:f4:7d:0a:a9:85:0f:
                    5d:2d:57:60:9b:56:6a:05:52:0a:df:84:ab:3f:61:
                    88:0c:8c:24:27:56:bc:61:26:26:9b:82:43:e9:c0:
                    42:d8:2a:14:eb:af:07:64:39:ec:74:a0:ee:d5:26:
                    ce:88:53:d2:37:35:2b:4f:c7:af:e6:c3:40:83:74:
                    79:4c:3d:4b:c0:19:ef:d7:25:18:8b:69:1b:23:b3:
                    53:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:22:EB:5E:D5:8B:2E:A0:A5:64:12:1D:44:44:89:D2:60:46:77:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c5d46f39-383b-37a4-9645-d0c89a15ea43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:92:81:27:fa:c4:8b:aa:3b:fa:9f:01:99:6e:ab:8b:bc:6d:
         6b:62:7d:48:ca:8a:c2:12:5b:c2:ad:90:9e:f9:39:e9:7c:9c:
         46:41:a5:7c:d3:f5:8e:60:85:57:dd:84:0c:f3:dd:5a:e5:58:
         82:62:d2:06:86:5c:e9:1d:af:1c:67:b4:21:86:bd:25:5f:f7:
         0e:aa:be:4d:25:db:36:6e:06:0c:8c:d1:f9:18:ba:bc:6c:50:
         a7:3f:30:47:45:1d:34:7e:fb:84:c4:6a:59:cc:e4:cd:d2:1f:
         eb:d1:0a:16:5d:52:11:14:d7:07:83:ca:ee:78:cd:47:b8:ec:
         d2:b4:15:b0:b7:2d:db:76:9d:58:ec:5c:c3:63:20:83:b8:c6:
         e3:ef:f6:a6:ad:d3:f2:f5:e6:08:39:bc:8d:15:9b:ee:3a:0c:
         8b:7c:1e:fe:16:5f:eb:31:9d:99:6f:4b:6d:dd:95:1d:c1:0d:
         75:54:37:11:aa:55:75:bc:ad:d4:8a:43:fe:e1:5b:05:49:4f:
         61:21:cd:0c:96:b8:63:40:ad:af:a6:eb:2b:10:9c:ce:67:e1:
         15:85:31:31:59:68:9b:62:c1:15:cd:00:3a:5e:83:a8:83:c9:
         89:20:93:c3:19:ae:cf:df:c4:b5:a7:df:14:96:1e:57:bf:50:
         09:ff:be:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:07 2025 by rpki-client