Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/5925a732-37e4-38f1-b869-f45e205b206d.roa
File:                     5925a732-37e4-38f1-b869-f45e205b206d.roa (raw, json)
Hash identifier:          k1HBggBqj+OEM/LosInpLQQmhFr7SD4L0YB7AjdyAVY=
Subject key identifier:   1B:1A:9C:DF:50:27:7A:81:84:F6:46:5D:38:61:15:66:DD:8E:25:4F
Certificate issuer:       /CN=2ff822df-fd2d-4fdf-8320-3c5a61d09369
Certificate serial:       010D0C9F43285848A99634A1B1CE6E6AF576BA00
Authority key identifier: 12:BB:91:00:0A:6C:5E:97:61:21:EF:C3:80:BB:27:03:11:47:ED:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/5925a732-37e4-38f1-b869-f45e205b206d.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     27370
IP address blocks:        192.80.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:34:a1:b1:ce:6e:6a:f5:76:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff822df-fd2d-4fdf-8320-3c5a61d09369
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=464b3726-5977-42cf-92a2-f373f5ec6e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:73:9b:f0:bb:d4:b1:44:b7:20:53:85:94:
                    1a:f1:86:e1:51:3d:2d:ee:eb:9c:85:8e:3a:22:5a:
                    9c:98:cd:2b:c1:6f:b1:b6:ff:37:81:c9:35:b3:ee:
                    ae:9b:3e:ce:08:f3:62:28:a6:89:d9:8e:22:a8:87:
                    50:0e:e8:66:f3:6a:51:c0:14:c0:1a:2f:34:a8:8d:
                    e9:35:91:1c:f0:45:47:50:50:83:b1:e5:05:e4:50:
                    ea:32:ab:17:1d:fa:31:32:cf:7a:6c:0f:3a:93:5b:
                    8c:7e:4f:60:56:00:64:04:41:a9:9d:3d:83:a4:fb:
                    dc:06:ce:73:23:3a:49:cb:82:ed:8e:8b:bd:18:f8:
                    31:a2:7c:48:b4:78:93:56:aa:b6:fc:e3:e4:a4:2a:
                    11:3b:ff:27:cf:54:fc:2c:69:03:d3:f2:5d:74:8b:
                    a4:27:3b:ac:4e:5e:ca:fa:b0:a0:23:9d:fa:8d:65:
                    1f:77:5e:0c:27:65:07:4a:81:31:91:86:29:f1:3f:
                    eb:53:97:cb:5f:c8:e2:f2:77:8f:ea:c2:d7:5c:cb:
                    85:69:28:92:54:1e:53:3e:36:e3:1e:31:ef:26:79:
                    64:27:a9:b1:8a:cc:cb:49:76:ad:e5:f9:14:d8:c4:
                    3a:fc:85:3f:9a:11:a2:87:03:2d:dc:88:cb:55:c5:
                    c6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1A:9C:DF:50:27:7A:81:84:F6:46:5D:38:61:15:66:DD:8E:25:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/5925a732-37e4-38f1-b869-f45e205b206d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/2ff822df-fd2d-4fdf-8320-3c5a61d09369.crl

            X509v3 Authority Key Identifier:
                keyid:12:BB:91:00:0A:6C:5E:97:61:21:EF:C3:80:BB:27:03:11:47:ED:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b4:7b:c2:8f:2f:7c:9b:ba:36:c8:67:57:b6:65:50:39:64:
         00:88:18:25:be:5f:5b:81:ab:32:03:54:89:46:bd:c9:a0:89:
         fb:07:97:df:f2:cf:4e:fd:9e:a3:72:ab:02:1a:4d:c4:a9:3e:
         3a:bb:80:c0:28:f9:17:02:c1:9a:52:45:d4:60:39:f1:77:25:
         76:d2:f1:4d:6a:e0:a3:88:28:57:fc:13:49:5c:f8:4f:fb:cf:
         ad:c2:cb:18:82:f0:84:e1:8d:21:21:e6:33:f1:09:76:ac:3c:
         ab:01:bb:08:ae:e3:b2:84:cf:e9:2f:0c:7a:8f:9e:64:19:b0:
         56:bc:68:37:b1:56:c0:eb:9e:95:78:6d:97:13:30:59:b1:5d:
         86:3b:f3:43:7a:de:58:60:97:e1:28:a7:99:bc:89:6d:87:bf:
         02:ce:26:99:d0:b4:71:d1:33:d1:a5:65:4a:81:65:ef:c7:eb:
         0f:45:6c:15:aa:88:3e:f8:80:3d:29:d5:f3:5c:af:d1:d7:2d:
         e4:88:8a:55:4f:3d:36:b9:43:ca:89:47:8d:4c:9d:f5:52:a9:
         1c:9f:af:cc:d7:dc:03:48:f9:1f:12:59:59:7b:41:09:3e:7a:
         da:bf:ff:67:a9:10:89:2d:ca:a1:01:84:4c:e1:e2:3d:6b:24:
         b9:ec:43:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:24 2025 by rpki-client