Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/635e2dc6-3ba4-3acf-b302-b79f320bc000.roa
File:                     635e2dc6-3ba4-3acf-b302-b79f320bc000.roa (raw, json)
Hash identifier:          6e5u7I2JmlQhndoJr9WamYnvUpTl0qe0kBm4M40LPhE=
Subject key identifier:   CA:FD:B6:7F:51:78:9C:B2:19:1C:49:FB:B6:54:B8:12:47:D1:C2:CE
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F43285848F4F972B6D40C2865E94A08A0
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/635e2dc6-3ba4-3acf-b302-b79f320bc000.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     8075
IP address blocks:        161.195.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:72:b6:d4:0c:28:65:e9:4a:08:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=7693b1a1-7b42-4be9-b64a-ed51ebc65dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:87:3e:9f:84:df:f9:41:fd:f4:66:a6:7f:7d:
                    9b:6e:7f:e1:0a:0c:fa:11:e2:16:50:22:16:81:fe:
                    13:b8:23:c6:db:e4:5e:58:45:b9:61:09:2e:26:8f:
                    50:d4:22:a7:80:70:0e:3f:eb:b9:ce:c0:39:f1:5c:
                    25:1f:7f:aa:57:25:93:1c:0b:67:0e:d7:ec:5e:c0:
                    77:a5:f3:bd:c8:b1:d3:38:09:47:aa:9c:e2:96:4a:
                    38:59:bd:58:ac:ef:55:6c:44:20:93:5a:cb:19:c2:
                    20:48:be:cb:fb:42:82:7e:7f:1f:9e:a8:b3:ce:03:
                    b3:1c:fc:e1:b9:7a:ea:e6:45:31:d6:63:fb:cb:14:
                    e1:6e:c1:4a:aa:6b:6e:9e:4a:22:e9:e8:79:b5:47:
                    fe:b6:a0:0b:7f:e9:7d:af:dc:d7:0e:e8:23:2c:9d:
                    30:04:4f:2f:1e:60:73:dc:8b:6c:ce:7f:ae:3b:1a:
                    13:29:93:b8:5b:62:4f:52:7a:43:66:1d:66:90:9a:
                    70:5c:76:f6:70:60:34:89:fd:ac:c1:f3:c8:34:02:
                    98:b1:c7:b7:6c:13:b2:5d:61:7e:9d:7a:cd:f1:db:
                    60:8a:ea:de:2c:3e:1e:3d:b8:03:7a:60:56:0d:db:
                    55:f2:d2:58:82:57:bd:32:7f:36:0e:a8:d9:38:04:
                    df:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FD:B6:7F:51:78:9C:B2:19:1C:49:FB:B6:54:B8:12:47:D1:C2:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/635e2dc6-3ba4-3acf-b302-b79f320bc000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:7a:ae:6d:d1:83:ac:37:cd:fe:fc:cf:f6:65:b5:f3:3a:44:
         d6:41:99:4b:40:21:5c:20:ef:32:b9:45:b2:7c:9c:0a:ce:f4:
         8e:36:6b:fd:33:78:b5:17:0d:98:c8:2c:4e:93:27:0f:37:84:
         1a:d5:5a:d5:d3:04:5a:41:9d:09:7b:f9:42:65:77:31:50:7e:
         93:e1:8a:21:a7:0b:52:fb:fc:c9:4b:17:25:f3:ca:7f:c2:ce:
         f8:23:d3:dd:54:b3:73:30:40:82:53:5e:44:a7:fb:25:87:cd:
         e8:c0:28:d8:88:03:04:c8:55:fd:cb:7d:75:72:78:e1:10:40:
         80:67:5a:89:55:e7:a6:98:24:d9:67:93:b9:49:61:03:46:e3:
         b1:12:76:3a:c3:22:70:c5:9d:b9:f5:1a:5c:69:66:ed:f0:23:
         26:ce:28:c9:57:16:d7:08:99:89:c7:2e:ff:d9:84:5d:fb:aa:
         e6:cc:d2:8d:a5:8b:8d:20:ca:d5:11:23:bd:e8:9f:22:ee:c9:
         dd:ee:56:4a:41:12:13:39:57:9c:be:1c:63:fc:7d:c0:47:55:
         dd:cd:fa:f3:33:91:7b:40:59:ab:6d:69:3d:55:60:aa:f4:52:
         f9:1a:cc:d2:04:59:3f:6a:84:c9:b4:95:a6:4d:29:9e:f4:4a:
         c8:89:e9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:11 2025 by rpki-client