Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/17be15b4-588f-36fa-95d8-a9d1e9c26bb3.roa
File:                     17be15b4-588f-36fa-95d8-a9d1e9c26bb3.roa (raw, json)
Hash identifier:          M7S+fSgpHU9wik8R3t/+9GKFNwVAwmO3kJt/Kq0HYM8=
Subject key identifier:   F8:05:2C:39:B8:D6:03:E5:67:C1:60:B7:8E:43:D2:F3:D7:20:C6:3C
Certificate issuer:       /CN=aae4f0de-2296-435c-b411-b16981804498
Certificate serial:       010D0C9F43285848622785D42B1637B9B6F309C0
Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/17be15b4-588f-36fa-95d8-a9d1e9c26bb3.roa
Signing time:             Mon 30 Dec 2024 23:55:44 +0000
ROA not before:           Mon 30 Dec 2024 23:55:44 +0000
ROA not after:            Sun 30 Mar 2025 22:55:44 +0000
asID:                     834
IP address blocks:        199.58.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:62:27:85:d4:2b:16:37:b9:b6:f3:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae4f0de-2296-435c-b411-b16981804498
        Validity
            Not Before: Dec 30 23:55:44 2024 GMT
            Not After : Mar 30 22:55:44 2025 GMT
        Subject: CN=35e0dbf8-7968-4743-ab04-0d2aa896ac74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:90:bb:be:f9:00:df:1a:38:aa:03:d4:17:ae:
                    a1:f6:6f:67:01:b0:ec:33:93:dc:a8:c8:ed:aa:ab:
                    5a:42:c4:c4:9d:42:2e:cd:03:21:79:f4:f9:74:36:
                    74:49:57:d9:64:15:3a:7e:7d:aa:15:b3:a7:ae:09:
                    81:cc:db:06:d3:46:47:17:51:ea:82:b4:77:b5:96:
                    cd:63:84:51:13:fa:d6:24:e6:b5:da:5b:59:dc:a1:
                    c1:e7:6c:13:f5:33:89:da:f9:29:50:b1:4b:a6:ca:
                    24:ef:ec:53:2a:93:1a:38:3f:1b:19:67:3f:e0:c9:
                    20:75:33:c7:4f:f9:48:75:0b:ca:25:6e:3d:09:3b:
                    0b:11:c0:13:75:94:53:86:3c:52:56:c7:61:28:bd:
                    18:72:16:87:25:41:d0:aa:38:c8:c9:bb:6e:a1:e7:
                    42:49:e3:2a:4b:9f:99:c7:3b:eb:57:ad:65:97:52:
                    4d:02:41:46:13:28:8f:d3:67:f2:c0:cc:a4:cb:ec:
                    a6:9f:09:2c:d8:50:67:c7:b1:94:4c:4c:67:87:86:
                    c2:9a:2b:f7:4c:28:33:f6:81:7e:8a:d6:68:53:52:
                    ef:f2:f5:f2:9f:1b:8e:25:8c:05:40:f6:ff:79:1d:
                    ca:5a:14:0d:d7:bb:5e:98:ce:11:ff:62:b5:21:03:
                    1f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:05:2C:39:B8:D6:03:E5:67:C1:60:B7:8E:43:D2:F3:D7:20:C6:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/17be15b4-588f-36fa-95d8-a9d1e9c26bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl

            X509v3 Authority Key Identifier:
                keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:59:15:a0:16:da:2d:99:78:8a:d1:dd:f5:58:62:d8:89:c7:
         ab:94:38:08:36:0f:8f:bb:be:ed:c2:0a:d8:ad:fe:ff:d9:a0:
         b8:4d:c0:ff:91:1e:7d:96:8e:c2:0c:d8:55:44:e3:73:bf:f9:
         71:8c:cd:44:1b:fc:c0:f3:61:63:79:4f:65:ea:5e:04:3e:c4:
         48:0b:26:ae:61:f6:b5:e5:b7:f5:de:72:f6:03:35:b3:e0:10:
         e2:73:94:9b:a1:ac:57:ad:aa:53:fb:3f:b7:38:3f:ca:61:8b:
         b7:ce:55:cb:87:80:8b:a4:0b:cd:8d:4f:1f:f0:16:e0:f4:d8:
         62:6b:2d:1c:73:e0:2a:21:54:7b:39:41:83:6b:c9:17:44:88:
         d9:be:70:78:62:d5:e8:0a:5c:88:3a:52:eb:bd:c1:52:7b:69:
         be:08:a9:ab:c2:03:51:1a:cc:07:01:64:63:04:7a:ba:55:f2:
         c4:89:ce:23:1a:64:c4:2a:7a:36:4b:69:6c:04:d6:71:0a:f5:
         d2:47:f4:37:20:a6:42:76:89:ce:33:89:f5:c0:de:a2:ef:ad:
         86:10:67:03:44:27:44:67:4a:dc:f9:c5:53:ae:6f:a1:9f:96:
         c3:d2:22:1e:79:fd:1b:2e:5d:2c:34:c4:ac:ba:7e:28:a8:e5:
         37:78:56:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:51:45 2025 by rpki-client