Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/cf92c81d-a910-339e-84d5-3f8c6baa3900.roa
File:                     cf92c81d-a910-339e-84d5-3f8c6baa3900.roa (raw, json)
Hash identifier:          CUIiVsSUhunofMuMT3k4DJ7hz8OihezzxD4fLzmOG4Y=
Subject key identifier:   18:85:F3:C6:FF:B8:2E:E6:14:6D:15:E3:2C:AB:A9:E5:85:91:62:26
Certificate issuer:       /CN=83220b5e-8104-4c4e-bbce-305b174b684a
Certificate serial:       010D0C9F43285848C580F77F9F66B5862D78A180
Authority key identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/cf92c81d-a910-339e-84d5-3f8c6baa3900.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     12233
IP address blocks:        172.82.0.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:f7:7f:9f:66:b5:86:2d:78:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83220b5e-8104-4c4e-bbce-305b174b684a
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=91d95d70-f0e5-467c-b883-c97c6ed4cb80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:d7:1f:18:e3:58:ec:21:c5:5b:96:81:ab:
                    77:11:85:af:1d:10:26:d4:63:04:d9:ff:4c:63:02:
                    6c:14:35:cd:9e:31:7b:54:84:78:a9:db:1f:df:95:
                    56:99:47:4c:6d:ad:9a:80:e1:69:16:99:06:3a:26:
                    78:8f:43:ec:fb:2d:84:eb:03:0f:8b:11:ec:db:ed:
                    dd:70:f2:29:a0:3b:1a:9f:dc:94:ec:03:7a:59:49:
                    0b:b4:e9:f6:7a:98:ac:ec:64:25:ed:b1:0d:e8:7a:
                    59:25:54:cf:8a:da:73:af:96:50:b8:a5:53:4b:46:
                    7d:e0:9a:0d:7b:f1:cd:a8:37:ea:7c:8e:99:d1:48:
                    4e:60:6c:da:b8:61:e7:3b:71:b5:ae:0a:cc:06:b3:
                    6e:f5:0e:84:85:8c:d2:8b:fb:c5:e6:3d:7e:3a:78:
                    11:fc:c5:52:c8:9d:5f:bd:8d:ff:d6:f0:5b:9a:50:
                    91:5a:58:d4:ba:85:91:26:52:ec:6d:87:ac:f0:c1:
                    58:a1:ff:a4:28:d3:e8:e7:30:79:a8:8e:87:f0:12:
                    84:54:37:1d:8b:df:bb:30:01:d8:bc:96:9c:70:fb:
                    2c:7c:37:a1:1f:07:4e:9c:03:ef:3e:1c:4d:28:29:
                    8a:f2:7c:f6:06:96:61:f0:a9:7e:6e:db:e6:f1:cc:
                    85:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:85:F3:C6:FF:B8:2E:E6:14:6D:15:E3:2C:AB:A9:E5:85:91:62:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/cf92c81d-a910-339e-84d5-3f8c6baa3900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:18:43:71:3e:25:72:e8:8a:2b:9c:19:64:69:96:e5:92:97:
         ed:52:89:6d:e8:5b:6d:c2:cb:ed:e2:e7:2f:4e:16:76:84:81:
         c9:14:32:c5:5e:56:3c:3f:79:37:94:70:8f:4e:18:72:ac:c3:
         f5:d4:ad:94:00:44:4d:66:9a:a3:32:ad:42:92:3e:e2:a1:28:
         2f:94:37:9e:51:71:96:e1:45:24:0a:0e:34:df:83:cd:87:e9:
         8a:27:86:fb:27:90:12:67:a0:50:22:50:10:11:2d:d4:22:c7:
         a6:1a:e0:e0:32:de:9b:ac:df:24:bb:70:84:11:c1:b5:69:e1:
         6c:11:4f:53:9c:68:1e:4b:b2:56:40:e9:42:f1:2f:18:12:3c:
         ce:94:1a:bc:2e:80:08:a7:86:58:8b:19:aa:8c:9d:1c:cf:37:
         68:47:57:31:85:bc:45:73:35:e0:80:4e:04:02:f9:96:5b:2d:
         e4:af:4f:51:73:be:c8:0d:15:47:b8:ab:be:b0:9c:b0:bf:cd:
         ce:4c:bc:42:6a:d6:f1:bc:08:49:77:9c:e5:15:2a:d0:77:c0:
         25:8d:56:63:0e:42:48:ac:bb:1b:7e:2b:40:cf:01:81:a5:5a:
         5e:89:63:87:d1:0e:3a:f8:d5:91:fb:3b:82:b6:5c:73:12:9a:
         17:aa:33:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:17 2025 by rpki-client