Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/c031494b-b640-34ed-acb0-5dd20f5c3374.roa
File:                     c031494b-b640-34ed-acb0-5dd20f5c3374.roa (raw, json)
Hash identifier:          mZlICxkZHEfDBfMjGjR6Rp+HmPe9x2E6YfZa01RI6Vo=
Subject key identifier:   17:F4:67:C7:03:29:2D:EB:5C:CE:2D:F5:A1:6B:64:D3:31:91:95:C5
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F43285848E2D119883E995B21D0635D80
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/c031494b-b640-34ed-acb0-5dd20f5c3374.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     397041
IP address blocks:        134.195.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:19:88:3e:99:5b:21:d0:63:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=0b7a6d95-8b16-4d68-98a5-af4648239a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b5:bf:fa:a2:45:f8:34:4a:22:f8:31:6b:5f:
                    f6:7d:49:e7:20:d3:7b:c2:09:2f:bc:2d:74:38:ac:
                    d0:47:31:2b:d9:a3:da:ae:73:5b:99:1d:e7:4a:59:
                    95:74:89:20:09:79:fb:f3:86:ba:a2:e4:b5:d8:79:
                    14:0e:ca:88:98:96:bb:26:36:3f:1c:78:59:6d:c7:
                    09:6a:26:e2:bf:9e:50:f2:31:3b:47:ec:73:1f:07:
                    89:6b:a9:85:3e:0e:7c:a3:59:5d:a2:61:75:16:9f:
                    52:ac:28:4a:57:72:d9:5b:5c:31:71:97:44:10:63:
                    b2:3a:40:93:0b:e3:f0:12:f1:a4:26:00:e2:6d:10:
                    a7:54:71:cd:86:47:e5:70:20:8c:05:d2:06:71:6d:
                    2c:c6:65:ed:df:3a:87:bd:51:51:56:ea:8b:05:10:
                    c1:ca:45:91:4f:11:4a:a7:0d:16:70:b4:85:95:74:
                    d8:3d:b6:08:76:80:8a:3b:ba:c1:95:3f:6c:01:1d:
                    f7:da:31:74:48:4c:3c:f0:17:39:35:bb:f4:98:d6:
                    b5:ad:96:15:16:33:ba:d0:06:4c:bd:56:f7:42:e0:
                    c3:76:5f:3b:00:75:13:6c:11:7b:8c:88:5f:30:85:
                    f7:bb:ce:af:56:e7:6d:2f:b2:2b:88:41:f5:82:47:
                    82:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F4:67:C7:03:29:2D:EB:5C:CE:2D:F5:A1:6B:64:D3:31:91:95:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/c031494b-b640-34ed-acb0-5dd20f5c3374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:0c:42:b2:7a:37:1d:b7:6a:8a:c1:9e:07:9d:20:bf:35:2d:
         f2:df:89:a0:8d:b1:1e:48:c1:12:70:1b:34:49:b9:8a:9a:39:
         a4:00:6d:4f:de:09:34:cd:7b:be:df:37:a0:57:21:f9:f9:dd:
         21:20:c4:59:94:0e:ab:49:8f:fc:bf:a9:66:10:33:ee:0a:83:
         99:90:bc:33:9b:8c:e6:73:6a:2a:b5:1d:99:7a:0f:8f:33:b6:
         d3:1d:0c:2a:a8:79:7a:31:82:a4:a2:d0:3e:bc:7b:ff:6d:e8:
         cd:32:ab:a0:b3:d0:ea:d0:42:f0:3b:da:38:75:74:1b:96:62:
         a0:be:f8:b9:42:85:bb:04:d1:76:31:d2:fb:58:fc:13:86:b6:
         0e:43:ac:29:28:a9:c4:f6:ad:d7:1a:1c:73:d0:c7:38:1b:f3:
         7f:8b:cc:de:76:6c:d1:81:d1:e2:a0:75:00:5b:8f:b3:a2:eb:
         14:33:99:53:c0:f5:4d:67:c2:44:dd:a5:80:1a:c2:ac:c8:85:
         dc:dd:b2:41:43:f1:7b:eb:c7:4f:f2:32:6a:3e:08:59:ba:48:
         a5:50:64:ba:77:27:fd:06:23:e8:8b:1e:79:3e:86:a3:62:88:
         61:d6:44:6c:a7:2b:28:00:4c:e1:74:9d:e7:12:98:23:42:5f:
         f4:bb:69:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:30 2025 by rpki-client