Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/f353e550-1fe3-37c8-92c1-79496d835aff.roa
File:                     f353e550-1fe3-37c8-92c1-79496d835aff.roa (raw, json)
Hash identifier:          P72lv91ODdTUniJzznRZLb9uPWTQrB5VxiI/HNqLLns=
Subject key identifier:   04:E9:54:5D:20:CC:FB:AB:48:80:66:F8:C9:6B:CB:85:33:05:5B:2A
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F432858488280909560846D3CC8A75700
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/f353e550-1fe3-37c8-92c1-79496d835aff.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     12083
IP address blocks:        24.214.74.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:90:95:60:84:6d:3c:c8:a7:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=7288617f-f88c-4206-8c1e-227b223846c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d2:1a:57:88:d7:ed:c3:fe:3b:3b:fb:3a:a4:
                    40:1c:f7:dc:14:cc:60:54:1e:ff:37:be:e3:d6:3d:
                    48:3b:f1:9e:c8:b0:77:22:3c:08:83:88:06:b4:fb:
                    e4:95:ce:71:97:0d:be:5a:94:3c:55:73:dc:3b:64:
                    a7:dd:96:7c:e0:4c:44:39:ed:87:73:37:bc:d0:94:
                    6b:36:81:4d:48:98:af:ca:b3:76:c7:7a:67:cd:f5:
                    cc:4a:a6:98:6a:cf:91:32:4b:8d:8a:73:b1:58:4c:
                    73:45:99:35:1a:53:20:c7:a1:04:62:c2:ab:ca:d4:
                    04:4f:2d:38:ac:bf:b3:e7:eb:c2:40:7e:28:7c:fe:
                    af:dd:80:fe:76:e7:c1:b3:58:bd:45:94:66:6a:10:
                    f8:1d:56:97:42:c3:24:c6:fb:cb:c4:d0:b9:bd:75:
                    3f:d9:9a:2a:c0:7d:77:45:74:41:7c:38:30:80:4c:
                    3b:e3:24:54:61:6b:c2:e5:93:b8:71:95:b6:50:b3:
                    86:7e:19:f9:f8:dc:86:31:a7:d4:2a:61:07:fe:e3:
                    1e:7f:31:0b:8c:d0:f9:46:93:ea:a2:7e:19:fc:6c:
                    2b:b8:27:c9:89:4a:c5:be:52:6a:6a:f9:91:12:1d:
                    22:c3:3a:c1:ef:a9:ab:80:99:86:f7:33:4c:b5:28:
                    35:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E9:54:5D:20:CC:FB:AB:48:80:66:F8:C9:6B:CB:85:33:05:5B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/f353e550-1fe3-37c8-92c1-79496d835aff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.214.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:eb:b1:33:bb:01:dc:ea:34:4b:49:83:db:9a:da:a6:38:ad:
         57:f5:f8:29:1e:db:3d:94:b4:0b:6c:5f:41:7c:4e:ad:6b:4c:
         0d:fe:f1:a7:9f:14:e8:81:31:c0:23:a7:f5:b4:98:64:cf:a0:
         92:f8:d9:37:79:de:09:d6:30:1e:17:f5:5d:14:c0:80:1c:bd:
         2a:71:26:f2:a3:61:09:00:50:00:7f:05:50:01:aa:44:48:49:
         a2:ad:95:a1:51:81:b2:93:93:dd:d6:c6:f8:3c:72:16:1b:af:
         a1:7b:d8:f7:e8:0a:0b:b9:40:2e:f4:6e:25:7d:85:71:a7:11:
         0d:d4:f1:ac:eb:21:2c:23:aa:e7:be:ee:47:7e:e6:37:1b:0c:
         ad:18:a6:48:43:7f:0b:0a:be:6a:45:06:3f:ab:be:1e:07:a5:
         52:18:3f:b7:11:64:97:ad:38:68:1e:7a:5d:50:13:81:d1:c2:
         fa:3c:05:f2:39:0c:13:67:c6:66:b6:78:f9:04:31:5a:11:eb:
         3c:32:75:fe:35:c1:b4:6a:7b:c4:19:9b:08:2c:2c:33:e8:00:
         b7:2d:e0:7d:79:75:41:7a:ec:6d:98:f1:76:e3:d2:2f:00:89:
         5a:c5:2c:65:d6:c7:9a:2b:37:9e:de:ff:82:20:85:7b:b0:eb:
         6d:c4:a5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:36 2025 by rpki-client