Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/fabf3601-9013-3293-992e-9ad0a2c04846.roa
File:                     fabf3601-9013-3293-992e-9ad0a2c04846.roa (raw, json)
Hash identifier:          727a8+ohgjpljz/N0yclnQenK20WxpbmcMggjuDZCSY=
Subject key identifier:   B2:81:4D:38:B2:07:EA:70:53:54:6A:AC:31:E8:AC:47:8F:64:61:68
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F43285848B35B6F3C92BF2CACF8021BF0
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/fabf3601-9013-3293-992e-9ad0a2c04846.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     19886
IP address blocks:        171.162.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:6f:3c:92:bf:2c:ac:f8:02:1b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=ea348024-1c06-4d43-ab1d-9b24e46cfa74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:83:78:eb:ad:61:a5:b1:6d:bc:ea:95:bc:23:
                    93:53:a2:0f:ef:46:16:02:92:16:ca:5b:0c:62:70:
                    54:2e:20:93:45:ff:e9:3f:90:64:7a:ce:f3:58:49:
                    ac:77:b2:7d:de:67:9f:2b:a8:41:a3:22:8f:5e:72:
                    e4:ca:36:5f:24:64:0f:24:7d:5d:3f:5d:83:f9:94:
                    60:88:aa:8c:8a:6c:35:cb:1f:60:0e:8f:eb:85:11:
                    21:b5:d4:7c:58:9f:07:79:fb:07:0a:1b:5a:80:df:
                    55:f6:e4:87:e6:2f:91:f8:04:ff:78:8a:b9:b4:db:
                    b0:2a:dc:b1:76:6b:33:2e:9d:45:9c:38:b4:25:6c:
                    f6:96:4d:59:2d:10:da:ca:e3:65:aa:1e:ae:61:2b:
                    fa:f2:c5:0a:23:64:3c:8e:ba:b7:73:a1:28:cc:74:
                    c9:f3:d1:e0:55:8a:21:c8:62:c3:d9:d6:76:60:ba:
                    1f:41:fc:c2:f5:c2:e5:ed:e0:08:e4:c8:aa:a7:99:
                    82:a7:48:9d:19:94:da:86:52:ed:49:ca:d9:21:06:
                    5b:a2:15:97:8c:c7:6b:50:7b:27:d7:27:00:28:dd:
                    21:be:df:8e:d8:a5:9c:71:b9:c2:68:55:68:b9:47:
                    b0:09:af:8a:82:a1:06:9e:15:6f:5f:a4:97:4f:30:
                    28:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:81:4D:38:B2:07:EA:70:53:54:6A:AC:31:E8:AC:47:8F:64:61:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/fabf3601-9013-3293-992e-9ad0a2c04846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:4c:e1:b3:3d:56:5f:d4:d7:a3:4e:8f:e9:51:10:74:b9:af:
         36:c7:97:23:e7:82:48:dd:9e:45:c5:94:58:3f:a1:19:1c:45:
         97:e5:39:01:c5:51:b2:d9:10:3e:6d:f2:8a:7f:39:65:e7:3d:
         ab:36:7f:55:34:8a:15:78:96:36:0d:53:7e:6a:4f:9d:12:ab:
         0f:88:d1:cc:35:32:84:0f:a2:08:de:6e:2e:c6:8d:d1:9b:71:
         48:d1:2f:46:c7:15:39:4f:7f:3e:87:04:d2:f0:55:8e:e5:0d:
         42:1f:88:8d:f8:ba:64:ac:68:3f:1b:2b:4c:8d:2a:f9:16:34:
         83:a5:c7:9a:3c:78:c6:36:1f:89:9e:d9:25:e3:ae:b5:3b:e9:
         bd:dd:77:ac:a5:bc:61:0f:00:24:6c:4d:2f:af:7c:03:15:03:
         6c:a5:dc:39:99:ef:a1:88:8f:ab:0b:0d:0e:54:61:1f:3e:3e:
         41:29:2d:73:e7:37:b5:28:e7:7d:53:21:76:b8:8f:db:ce:46:
         19:b4:19:04:e2:f7:bd:d4:1e:cf:6b:63:d9:af:86:05:0b:1f:
         ce:d6:87:cb:6e:ff:73:3e:19:0a:1d:25:94:55:7d:18:5a:82:
         7d:6a:4d:f1:2e:ab:5d:19:f5:4e:20:d6:04:0f:9f:00:2f:c1:
         61:27:97:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:16 2025 by rpki-client