Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/eef7c31a-87b2-3d58-93c6-c57ee5a0ff37.roa
File:                     eef7c31a-87b2-3d58-93c6-c57ee5a0ff37.roa (raw, json)
Hash identifier:          XFTgkLQNpDcMdeIKSrDtk5EgwqAMg2gVZjfvmKBzq6I=
Subject key identifier:   58:F1:2E:EB:7C:95:A1:13:8F:0E:51:13:D0:E3:D1:EF:C7:C4:38:69
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848D376557A65706C445F337100
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/eef7c31a-87b2-3d58-93c6-c57ee5a0ff37.roa
Signing time:             Sun 09 Feb 2025 14:00:51 +0000
ROA not before:           Sun 09 Feb 2025 14:00:51 +0000
ROA not after:            Sat 10 May 2025 13:00:51 +0000
asID:                     9009
IP address blocks:        172.94.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d3:76:55:7a:65:70:6c:44:5f:33:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb  9 14:00:51 2025 GMT
            Not After : May 10 13:00:51 2025 GMT
        Subject: CN=e6f248f5-736c-4607-b18e-c6c728167e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:c8:b5:b6:25:3b:c9:d6:e9:99:ab:61:9a:
                    26:93:2c:a7:16:17:f4:7d:87:99:cd:65:1e:33:3b:
                    ed:b3:d8:de:1c:ed:15:2f:af:0a:5a:dd:06:11:79:
                    e9:e3:64:d1:37:5f:75:cf:fb:04:12:62:43:80:b9:
                    63:f4:b9:7d:55:4f:78:34:b6:1e:b3:50:dc:f1:0f:
                    dc:5c:18:39:1f:98:5a:4c:70:65:0e:d3:4e:3d:9c:
                    92:21:39:e9:9f:7d:35:ef:36:ea:1e:e1:5b:2c:bc:
                    6c:be:3d:6d:c3:97:aa:a2:3b:a3:ab:bb:b9:f4:71:
                    cd:18:97:92:91:35:38:1d:2a:7f:9e:0c:79:fc:70:
                    2a:fc:fc:bc:83:90:e2:95:62:b4:fb:9f:f9:b4:79:
                    0c:2c:a1:46:8f:9c:f5:b7:db:3d:d5:86:a7:06:ba:
                    87:14:a1:ea:90:85:22:07:6c:f2:f2:50:a2:14:9f:
                    38:09:a9:55:3c:3d:14:2a:36:0b:3e:5f:ac:72:78:
                    b8:e2:1d:5d:89:01:31:73:73:e7:61:30:37:85:9f:
                    04:bd:35:ac:cd:bd:65:2f:63:6c:48:ae:3d:76:5d:
                    96:50:68:3c:48:93:55:6c:3b:49:af:7b:37:27:56:
                    5e:2c:58:b6:51:90:c0:2f:97:25:7e:8d:06:bc:5a:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F1:2E:EB:7C:95:A1:13:8F:0E:51:13:D0:E3:D1:EF:C7:C4:38:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/eef7c31a-87b2-3d58-93c6-c57ee5a0ff37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:01:bf:d6:e0:18:ab:13:c0:ca:2f:a2:03:3b:75:06:7f:7f:
         37:5a:b2:95:53:15:78:85:6b:08:d8:d3:6f:c2:d8:d6:07:e1:
         82:76:d7:61:34:e3:70:16:5f:0b:4f:fc:79:2b:ad:e2:c3:c1:
         01:d4:70:9f:cc:45:19:81:aa:d0:86:37:9e:67:69:88:91:32:
         8e:79:36:b3:73:12:1f:83:fa:7a:59:5e:a4:6c:29:b4:cd:9e:
         7d:84:8f:df:ae:5b:27:e9:51:7f:fc:ea:b5:14:5a:51:57:26:
         49:10:e1:25:b2:6b:73:9d:a6:79:2d:34:4f:98:c8:2f:99:94:
         71:06:c2:77:1e:c2:50:dc:ae:36:b7:0c:46:b1:ed:55:5d:19:
         2e:ae:a7:11:80:36:6c:29:6f:1b:e0:fc:85:89:cd:1f:0e:63:
         53:31:5c:18:47:23:22:cf:fc:fd:ee:cc:5c:af:c1:a2:77:43:
         01:c4:05:bb:e0:71:05:c4:61:f6:20:fd:0e:2f:07:25:23:b5:
         1c:4f:72:87:bb:1a:03:02:86:6f:fe:15:52:ee:81:a6:90:34:
         60:6b:1d:f1:f3:9b:7c:75:fa:63:28:ba:ba:3d:9c:40:08:81:
         9e:5a:85:7a:ab:39:74:e8:7f:36:80:68:99:2c:58:02:8f:49:
         a1:23:31:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:27 2025 by rpki-client