Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/5d60047d-0af6-35dc-8295-da5eac8d1d49.roa
File:                     5d60047d-0af6-35dc-8295-da5eac8d1d49.roa (raw, json)
Hash identifier:          +nxLng7E1+sL4Fq/W0PvoDub/RvnjC/EB4b+Tyrf4Bs=
Subject key identifier:   FA:03:DA:59:21:D7:15:42:BB:6E:88:67:3E:A0:AD:03:3E:E3:B9:3E
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F432858487A2087FF90E905C936377F80
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/5d60047d-0af6-35dc-8295-da5eac8d1d49.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     7992
IP address blocks:        192.171.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:87:ff:90:e9:05:c9:36:37:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=8d754aed-74d4-47c8-9b0a-f5b78fa8e6c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:e2:70:bd:05:89:dd:36:26:83:34:a3:7c:
                    a8:23:f3:c6:91:c2:39:bb:61:ef:c8:ca:23:41:c2:
                    d4:dd:4c:58:f4:db:b3:79:d4:74:fc:f0:cb:44:58:
                    7e:ed:89:55:01:11:54:49:71:ac:b3:45:41:9f:f4:
                    c1:75:c8:f2:51:47:9f:5a:d1:37:fe:41:a1:c7:a9:
                    11:7f:44:39:f1:e5:25:b8:0c:7a:e3:93:15:e3:e6:
                    52:99:1e:1b:83:c9:fe:51:cd:38:13:9f:42:2c:86:
                    65:ca:2b:3b:f2:98:c9:e1:ce:b6:af:fa:ed:5e:90:
                    5e:39:3e:68:1d:84:75:1a:79:3a:2c:d8:bc:cf:82:
                    c9:b1:19:ca:e7:f3:46:4d:40:92:58:c6:31:4e:66:
                    ec:f9:82:4e:f0:4e:0f:0d:5a:c9:18:45:95:ed:9b:
                    14:24:b7:ba:4d:6a:84:80:32:66:6d:52:5c:c5:a8:
                    7a:9a:fc:e9:5f:81:e7:44:db:42:37:35:4f:e6:48:
                    9c:99:89:14:20:38:5f:4d:e7:a5:f4:44:08:a1:6b:
                    42:f0:9b:c9:4a:6d:e3:d8:22:dc:49:88:c7:c9:df:
                    e6:de:a6:ee:0d:8e:13:c0:51:28:9c:ad:98:89:6d:
                    d2:a2:7f:05:12:dc:6f:d9:97:bf:a1:fb:32:b4:65:
                    b8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:03:DA:59:21:D7:15:42:BB:6E:88:67:3E:A0:AD:03:3E:E3:B9:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/5d60047d-0af6-35dc-8295-da5eac8d1d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:46:7a:6c:cb:da:2d:9f:18:2c:83:d2:12:9c:7a:70:84:53:
         fc:f7:87:63:87:86:01:d3:14:73:8a:b0:18:98:32:56:7f:96:
         83:ee:ef:fb:3f:4a:1d:42:e5:d5:bb:a1:08:b3:22:2e:58:b7:
         85:db:78:9f:72:93:fd:e2:9a:0c:06:9a:4f:82:4e:2a:48:75:
         31:aa:b4:4a:62:86:a4:8e:34:9f:09:1a:f9:b0:fb:52:d9:58:
         b1:d5:80:a5:3d:f7:f3:fb:1d:86:29:a1:0c:41:11:f7:ee:1b:
         40:64:30:7c:fe:2b:4b:7a:be:df:aa:91:00:1e:b3:16:bb:ca:
         8c:8f:4d:7b:bd:0f:57:6e:43:80:c2:17:46:a2:c0:8a:f4:ca:
         fa:d2:5b:72:dd:08:38:8e:cf:60:ea:38:9d:27:71:fd:c4:e0:
         84:1a:21:92:ac:ac:8f:ed:c2:f2:a2:3d:07:27:87:72:67:95:
         6d:4c:0c:ec:ac:f6:29:91:b5:1d:f0:33:49:0a:ca:f3:f4:51:
         5c:41:ab:43:b7:1d:7b:df:db:fb:8d:a2:16:ec:a7:0d:51:f0:
         08:cb:96:7d:0e:cb:b1:0a:e3:6d:ea:66:a2:4f:9b:9b:fa:fb:
         e9:94:74:a8:46:5c:c0:37:78:b6:71:94:a3:8b:f6:39:be:94:
         c3:bc:4e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:37 2025 by rpki-client