Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/86ec9619-2868-36f8-b49d-03305645f65d.roa
File:                     86ec9619-2868-36f8-b49d-03305645f65d.roa (raw, json)
Hash identifier:          pWm8qTpipUhsrxKEyW6e7WzTa25Yq2dZFYK8u0aovzU=
Subject key identifier:   DD:06:45:14:3A:E6:BF:F6:59:1C:4C:85:E9:7F:0E:E3:A4:73:8B:FA
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285848EF6152F8EE91B23F943E0D80
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/86ec9619-2868-36f8-b49d-03305645f65d.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     33164
IP address blocks:        209.58.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:52:f8:ee:91:b2:3f:94:3e:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=43ccdafb-53aa-40de-83c5-31cf1d88f6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:55:5d:fb:0c:38:10:26:cb:5f:dd:08:a9:31:
                    a2:a6:95:e3:a1:7c:56:75:95:3f:70:20:98:3d:f8:
                    3b:cb:2d:54:17:04:6b:1d:0a:10:9c:d9:4d:32:72:
                    54:01:e2:b9:ee:ff:e2:a6:1f:8e:92:c8:82:f4:83:
                    36:d1:48:ec:11:03:3e:70:ac:df:bf:cb:36:c6:b6:
                    97:e5:2f:77:c6:6c:58:aa:cf:a1:ce:2b:46:00:0d:
                    b6:31:f9:fc:d1:87:2b:b6:fa:d3:db:ad:e9:c1:ac:
                    81:9d:94:1b:4b:d7:bf:32:c5:32:35:6c:28:bc:fb:
                    c3:23:34:ee:a7:c3:b7:a6:a3:a8:45:9a:63:7a:19:
                    76:ed:0a:86:f1:d5:37:58:63:40:42:5c:e4:29:6f:
                    3c:5a:01:24:c5:47:7a:95:10:8b:81:50:5f:c0:b3:
                    f5:aa:e4:3d:74:c9:aa:1b:7a:06:e6:27:8b:0c:0c:
                    5e:cd:66:5a:e9:ed:b4:24:2d:2f:7b:6b:54:b8:a4:
                    37:7b:1d:ea:ee:55:d4:b8:16:26:66:44:59:10:f0:
                    52:34:80:17:4f:f2:db:d2:e4:0f:93:d1:a0:02:00:
                    cb:66:a0:ac:94:6c:17:fb:49:c0:e6:e6:f8:c3:cf:
                    7c:03:8d:55:fc:9b:a5:38:d0:51:cb:59:6e:b1:cd:
                    06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:06:45:14:3A:E6:BF:F6:59:1C:4C:85:E9:7F:0E:E3:A4:73:8B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/86ec9619-2868-36f8-b49d-03305645f65d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.58.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:9b:dd:1a:fb:f3:f0:00:8d:36:b9:7f:c9:84:a0:97:fa:d4:
         a3:f8:10:e6:36:d8:52:07:56:06:26:09:80:8b:68:ca:e1:76:
         65:5f:c5:06:88:62:2a:ad:28:8f:db:67:9f:bd:24:c6:ca:62:
         c3:37:6c:b3:e4:df:83:7d:54:42:33:e1:98:40:67:4a:37:35:
         02:04:97:ce:45:9f:3b:84:c6:a9:80:c6:f3:10:d5:c9:c2:da:
         cb:3a:3b:07:b0:62:28:a1:e3:5f:16:37:18:a4:a9:c0:5f:27:
         cc:88:54:22:63:bf:54:c6:21:a9:c3:f1:1c:b5:ca:3b:43:2a:
         eb:f0:78:b7:ab:a3:d5:a8:8b:92:27:71:a4:4c:ba:d1:42:39:
         88:b2:d6:e6:f4:8b:20:5e:53:f6:94:98:27:58:b7:d7:10:da:
         7a:4c:13:89:3a:8c:d4:14:db:45:f6:01:3a:5f:c3:e3:c8:b6:
         ef:12:02:84:da:ea:97:93:2a:c3:ca:a7:4f:c2:f7:f5:bf:37:
         a5:ab:74:37:cd:d7:70:6a:cb:6a:7c:1e:5f:c7:65:cf:7e:15:
         33:7f:5b:3e:4b:a7:5b:a4:ec:bf:b0:23:5a:01:f4:e0:69:1b:
         f8:04:cf:8a:53:a3:5e:18:dc:a0:8e:27:b1:1f:db:cf:57:26:
         bc:00:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:18 2025 by rpki-client