Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa
File:                     c9a346b1-e60d-3223-91d4-e14b1326a280.roa (raw, json)
Hash identifier:          5kVKwBTb4n8eOMa73tM/PbzH6u/iQHSU13s8divFzQA=
Subject key identifier:   F1:A2:F5:4A:15:35:80:8D:1A:BC:CB:5F:50:E3:EC:6F:AF:CC:F9:BF
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584930DE7451A70299DAC753D180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     212238
IP address blocks:        172.111.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:74:51:a7:02:99:da:c7:53:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=16bf8a63-f8f1-434e-a27a-4d503c8a6fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:0b:ed:c1:42:fa:ac:04:2d:82:82:1d:57:
                    27:f5:3a:50:e6:78:39:06:0f:35:5d:aa:88:ca:df:
                    c1:26:bf:1f:46:fa:1a:e0:d0:ed:35:5a:98:a2:de:
                    9e:0f:9e:c9:7a:ec:bf:91:19:0e:f9:21:19:19:9e:
                    f5:74:c3:25:03:ed:90:d7:db:c1:00:df:a7:d6:9b:
                    2f:43:d0:00:e8:21:8a:80:50:e1:d6:ce:0d:10:a6:
                    47:36:56:7d:5e:0b:5a:b8:48:7b:09:6e:a7:2d:57:
                    69:ca:80:43:38:f2:d0:1f:7d:3b:19:08:84:10:30:
                    3e:16:d4:84:47:bc:82:8b:63:bd:62:6f:ed:ee:7e:
                    dc:0e:e4:30:d0:78:ee:a3:1f:cf:98:c4:6c:68:c9:
                    2a:84:da:03:f1:37:1b:df:8a:b2:75:39:79:bb:7a:
                    72:a8:23:99:b0:3f:be:ae:5b:52:11:f5:fb:db:c7:
                    1e:da:7b:2b:ca:25:11:34:c6:d8:2f:d4:1e:7d:8a:
                    8b:36:27:8d:9d:9b:07:99:3f:c4:b4:89:cf:ec:7d:
                    5d:a8:e9:6e:62:da:b7:19:a2:d5:89:36:0b:04:df:
                    3c:ca:2e:76:a7:bf:54:b1:4a:1a:0e:9c:22:98:ee:
                    a6:b5:94:28:5c:62:d5:24:f7:ab:30:a2:bd:07:8b:
                    fd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A2:F5:4A:15:35:80:8D:1A:BC:CB:5F:50:E3:EC:6F:AF:CC:F9:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:41:a1:49:b2:fc:41:1e:00:3d:84:73:17:fb:2f:a2:39:a9:
         2d:de:b0:d3:2b:6d:c4:6d:3f:d4:de:c1:2c:71:e5:21:93:c3:
         aa:5c:ee:7c:26:6e:90:68:ad:9e:0d:62:b1:30:f3:ca:3b:9f:
         0e:e9:56:bb:64:c1:26:7e:23:39:43:eb:22:94:38:33:b6:ab:
         81:9d:21:bd:f7:d6:2e:45:8c:13:bc:a0:77:1b:fc:c7:dd:93:
         91:74:0c:1a:f0:b0:ed:d9:1d:d7:f2:5c:b4:84:90:16:d4:82:
         d8:d6:12:a7:33:ec:92:a1:30:6f:c6:11:9a:3f:df:62:a1:90:
         c9:74:4d:88:81:5e:20:10:2a:00:99:9e:e4:db:04:2f:ce:53:
         0d:e0:22:43:dc:21:f6:a5:6c:fe:ae:ab:92:25:5d:49:65:bf:
         ed:26:58:a0:8e:52:21:fc:bd:ba:e9:6b:25:a1:09:72:8f:e5:
         18:2b:45:50:df:b2:2d:c6:33:26:25:66:7d:51:40:29:0d:1a:
         5d:35:48:07:a8:36:21:9c:7b:3d:06:3b:3f:cf:e9:1e:4e:3a:
         02:08:fb:c3:33:14:db:fd:e8:db:cf:37:8e:08:32:b8:e6:20:
         a1:d7:73:9d:b4:05:25:9d:15:16:da:df:79:ee:b2:80:15:b8:
         44:ab:af:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:54 2025 by rpki-client