Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/9d688ed2-92b7-3eaa-b132-1e329c47161d.roa
File:                     9d688ed2-92b7-3eaa-b132-1e329c47161d.roa (raw, json)
Hash identifier:          b7RsH8Jt46pVauuj5ixX+MkvTDik+fWhWL6nHt29nfU=
Subject key identifier:   58:83:A0:15:07:0D:12:6C:49:20:C6:85:A7:17:B4:77:A7:B4:90:58
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584908819520A65124376A5FF900
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/9d688ed2-92b7-3eaa-b132-1e329c47161d.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     0
IP address blocks:        169.145.113.0/24 maxlen: 24
                          169.145.114.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:95:20:a6:51:24:37:6a:5f:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=a1a31d4a-2228-4b4e-8e8d-d0a1d136b93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:07:27:52:bf:b8:2f:16:b5:a5:fc:69:8a:af:
                    7b:9c:c2:99:44:e3:3b:50:f8:3a:27:94:a0:a7:33:
                    1e:6e:ed:de:e7:9c:61:42:bf:a3:d8:2d:8f:6b:b0:
                    aa:e3:8c:d4:83:de:34:fc:27:94:38:47:5b:3b:26:
                    98:2d:29:aa:00:78:4a:ec:34:36:6d:b4:70:99:3e:
                    0e:53:eb:d7:96:91:8c:ee:95:0f:86:7e:5d:4c:2e:
                    35:6a:7b:72:5a:77:13:0e:6c:fa:ac:d5:cb:a3:d8:
                    3d:04:41:ce:7d:5c:1a:8b:77:6d:27:e9:ac:b3:8f:
                    2b:a9:00:65:90:08:26:d1:d6:45:0a:eb:40:4b:d4:
                    74:7e:6d:80:70:fc:5b:03:87:cf:b3:b3:45:0b:21:
                    5c:ee:9d:b2:50:d1:06:09:25:55:27:26:35:1d:38:
                    75:18:17:87:59:b9:61:36:24:4c:8d:b8:a1:09:3b:
                    74:77:d9:24:d6:a0:ee:62:e6:4c:c2:a9:0d:78:71:
                    78:a1:94:b6:b0:48:57:5a:63:34:28:64:da:f5:62:
                    16:6d:09:27:fe:9d:f8:b3:ce:95:0a:23:87:74:3d:
                    8b:57:23:f8:40:28:5e:93:6a:b3:c2:f2:52:14:0b:
                    cb:03:ec:53:e0:fe:bc:5b:fd:ee:22:fc:fb:a8:27:
                    0b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:83:A0:15:07:0D:12:6C:49:20:C6:85:A7:17:B4:77:A7:B4:90:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/9d688ed2-92b7-3eaa-b132-1e329c47161d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.113.0-169.145.115.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ff:86:7d:02:63:4a:ba:1b:4a:99:9b:43:06:97:cb:26:f7:
         f2:ef:c1:95:a3:21:01:ba:5f:34:ed:5f:6e:17:d9:f5:0b:f5:
         23:94:b6:1c:0f:f4:30:64:16:f9:71:28:e5:65:c0:ae:15:bf:
         7d:14:ee:12:07:64:cd:e4:8b:69:37:41:1c:59:04:3b:ea:2c:
         69:36:00:19:78:cf:d3:ac:48:57:f6:27:64:b1:ab:4b:f0:ac:
         0f:63:0e:1c:2d:ce:59:98:ea:3e:1d:5a:67:4a:76:2a:69:05:
         bb:3b:6b:13:7e:9b:7e:0e:a8:cf:4e:3c:53:ae:2c:f7:ad:a9:
         f3:19:f0:b2:c9:00:9d:5b:70:f1:b6:18:12:40:0e:88:09:3a:
         f0:e1:93:7f:07:66:86:c0:8f:6c:bf:b2:e8:72:99:ee:8b:96:
         4e:be:20:7d:e1:29:94:74:e0:bf:51:a4:bd:a9:55:2e:7f:ea:
         ed:af:12:78:61:cc:7a:94:43:f3:b7:34:74:aa:3f:e5:cb:16:
         5f:ba:b5:05:8b:69:a6:51:20:d3:6c:ef:02:7f:cb:48:41:a9:
         55:6d:c3:42:be:88:d7:60:01:b9:36:df:0d:33:82:14:dd:7e:
         a2:94:40:53:69:f2:24:47:3b:03:9d:04:ca:80:1b:6b:16:83:
         93:1f:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:27 2025 by rpki-client